Edit tour

Windows Analysis Report
https://app.heractivatie-portal.net/

Overview

General Information

Sample URL:	https://app.heractivatie-portal.net/
Analysis ID:	1589190
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

AI detected suspicious URL

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2192,i,17868920631784718586,2862128570928024239,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.heractivatie-portal.net/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=BTisUJb3amYRXNdT7SeeRWLgYSFeLAuPucrFfW%2F%2B9M4dlrPxDTTZVesMLB3i2g4aiJRmu2OF%2B6ejXhg33suQNy9gi4zRnsN7ZrqEFx2AGJ3hEPS3FBPHCgRG0So8jWU%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 396Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 14:42:04 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bjOHD9v7ILWXIVpUQf9fzs3DwWr71MCfCTIqsjWLpgjOP6imxK%2BP8L2ge9GlKee7y0FgzAUPEbyi5qTi8Fjwb4UwAoUdiHaSspLG0hMNxHucRDPdbGEKdSvoDrjf77E%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9005abdb08735e72-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1685&rtt_var=640&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1880&delivery_rate=1699650&cwnd=32&unsent_bytes=0&cid=4e3cbcc118fb984d&ts=339&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 14:42:05 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RvjguHMTxDOsgoItJOeVWeRy2JE0g0qBIycBwO606TFIpGlL2e1V2e9pCvNLzLXTtGDWvS%2FIUVB0EFIGBNUyQU1MwR0P3cf4%2FyqBL3FOYCLWXn3GctCFFtTbVQpJ0JQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9005abdd2afd72b9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1892&min_rtt=1883&rtt_var=724&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1880&delivery_rate=1492079&cwnd=217&unsent_bytes=0&cid=81b82e62192a5ae8&ts=319&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 14:42:06 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wKvNrBgMzssrj6G%2FgtlGDjAaP%2BRGFdJa4AY0yNS%2BqwXdjJXtGF5NCUqlFKItHG4mDTsriCy3rFOdRhQ72r2%2BMQulxco6R%2BahQGGNVM5UqGWCLCJwk5x0y%2FMoYCOqijI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9005abe75873729f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2001&min_rtt=1996&rtt_var=759&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1768&delivery_rate=1432777&cwnd=169&unsent_bytes=0&cid=2693ae06407cdc1a&ts=377&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 14:42:07 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dw2vDUw53gq5gEWc4c5x8MWz6XBm8WRcXv%2F1h98dFDPv23qAe0xfgtP0GCxrKkFupBjeAm5GIRcr0hGsodx9aPxb1DtWeC5G1YQj6N%2F497DRkdj4KyHfu8l9WwCOSS0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9005abeac8cb1851-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1720&min_rtt=1714&rtt_var=655&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2143&delivery_rate=1655328&cwnd=214&unsent_bytes=0&cid=0f5d5676323b1d49&ts=303&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 14:42:07 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2FHzzKB8ft0fnzlPUj5DIHcjCf67f5uJx0yQIYlHk0ZGoqLZ6qIdLoSnOmnkKTf2k5R%2BYfymzPCYCeg3RBkTaqMePL2Kkqc9Ml5L6%2BlV9JRlCux0YtSSD5MPvQtJRbo%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9005abeadf2c425c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1624&min_rtt=1617&rtt_var=611&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1768&delivery_rate=1805813&cwnd=226&unsent_bytes=0&cid=a3c038451b1d38a6&ts=344&x=0"

Source: chromecache_56.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal48.win@17/36@14/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2192,i,17868920631784718586,2862128570928024239,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.heractivatie-portal.net/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2192,i,17868920631784718586,2862128570928024239,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://app.heractivatie-portal.net/	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://portal-nl.ru/lnternationalcardservices/lcs/files/favicon-144x144-withoutlines.png	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/4.png	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/woty-badge-populairste-financieel-1.png	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/main-ics.css	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/?ID=3a1c16b099933303	0%	Avira URL Cloud	safe
https://portal-nl.ru/web/?t=1736606516	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/0-1	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/index_1.html	0%	Avira URL Cloud	safe
https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/jsd/r/9005abd2da7d0f77	0%	Avira URL Cloud	safe
https://portal-nl.ru/cdn-cgi/challenge-platform/scripts/jsd/main.js	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/0-2	0%	Avira URL Cloud	safe
http://portal-nl.ru/web/?t=1736606516	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/5.png	0%	Avira URL Cloud	safe
https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js?	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices?ID=3a1c16b099933303	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/1.png	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/2.png	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/0	0%	Avira URL Cloud	safe
https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/jsd/r/9005abdd2afd72b9	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/index_2.html	0%	Avira URL Cloud	safe
https://portal-nl.ru/lnternationalcardservices/lcs/files/3.png	0%	Avira URL Cloud	safe
https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/jsd/r/9005abdb08735e72	0%	Avira URL Cloud	safe
http://portal-nl.ru/lnternationalcardservices/?ID=3a1c16b099933303	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
app.heractivatie-portal.net	185.244.151.84	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
portal-nl.ru	104.21.9.2	true	true	unknown
www.google.com	216.58.206.68	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://portal-nl.ru/lnternationalcardservices/lcs/files/index_1.html	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/jsd/r/9005abd2da7d0f77	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/favicon-144x144-withoutlines.png	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/4.png	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/?ID=3a1c16b099933303	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/woty-badge-populairste-financieel-1.png	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/main-ics.css	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/web/?t=1736606516	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=TqXt6svga2K64CsXHtJ4%2BamRLHIvGgPZAWf1CaeLODNDigD%2BkKLjHPHzas7nUQv1wkICOhsUKMBhxcdqF978t3qPQw125m3IckwQOMSUlWFxkz6U%2BkS3K%2FG3Zt6iY60%3D	false		high
https://portal-nl.ru/lnternationalcardservices/selecteren.php	false		unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/0-1	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/0-2	false	Avira URL Cloud: safe	unknown
http://portal-nl.ru/web/?t=1736606516	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/5.png	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js?	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/1.png	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/jsd/r/9005abdd2afd72b9	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/2.png	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/0	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices?ID=3a1c16b099933303	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/index_2.html	false	Avira URL Cloud: safe	unknown
https://portal-nl.ru/lnternationalcardservices/lcs/files/3.png	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=CF6a6r%2BCEIVgz9SqV4rQUoj7c09AuCxs6PQ9Wt4ozPjvN8RIo6TOZybm8f3YV2Q9e2kFymEXrhlPcgRFbv1FwSP7wz%2FnxLtC8S5nNezcmtyr5yYvtEsZ%2FaPhjGQ%2FfAM%3D	false		high
https://a.nel.cloudflare.com/report/v4?s=BTisUJb3amYRXNdT7SeeRWLgYSFeLAuPucrFfW%2F%2B9M4dlrPxDTTZVesMLB3i2g4aiJRmu2OF%2B6ejXhg33suQNy9gi4zRnsN7ZrqEFx2AGJ3hEPS3FBPHCgRG0So8jWU%3D	false		high
https://portal-nl.ru/web?t=1736606516	true		unknown
https://app.heractivatie-portal.net/	false		unknown
https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/jsd/r/9005abdb08735e72	false	Avira URL Cloud: safe	unknown
http://portal-nl.ru/lnternationalcardservices/?ID=3a1c16b099933303	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
185.244.151.84	app.heractivatie-portal.net	Netherlands	60117	HSAE	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.130.200	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.9.2	portal-nl.ru	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589190
Start date and time:	2025-01-11 15:40:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://app.heractivatie-portal.net/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@17/36@14/7

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.74.206, 173.194.76.84, 172.217.23.110, 216.58.206.78, 2.22.50.131, 192.229.221.95, 142.250.185.234, 142.250.186.67, 142.250.186.174, 142.250.184.206, 142.250.185.110, 172.217.18.3, 142.250.186.78, 172.217.16.206, 142.250.185.142, 2.23.242.162, 20.109.210.53, 13.107.246.45
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://app.heractivatie-portal.net/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://app.heractivatie-portal.net Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://app.heractivatie-portal.net
URL: https://portal-nl.ru/lnternationalcardservices/sel... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This script appears to be a simple function that sets the value of a hidden input field and then submits a form. It does not exhibit any high-risk behaviors and is likely part of a legitimate form submission process." }
function submitForm(cardName) { document.getElementById('card_name').value = cardName; // Set the hidden input value document.forms[0].submit(); // Submit the form }
URL: https://portal-nl.ru/web?t=1736606516... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and indicative of potential malicious intent." }
(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9005abad89441a0f',t:'MTczNjYwNjUxNy4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();
URL: https://portal-nl.ru/lnternationalcardservices/lcs... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and indicative of a potential attack vector." }
(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9005abdb08735e72',t:'MTczNjYwNjUyNC4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();
URL: https://portal-nl.ru/web?t=1736606516... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The script appears to be attempting to bypass security measures and execute unauthorized actions on the user's system. The presence of obfuscated code and the attempt to interact with various browser automation frameworks further increases the risk. Overall, this script demonstrates a high level of malicious intent and should be treated with caution." }
var _21120829="ICAgICAgIHhodHRwLnNlbmQoIm5hbWUxPUhlbnJ5Jm5hbWUyPUZvcmQiKTsKICAgICAgICB9LCBmYWxzZSk7Cn0pKCk7Cg==";var _87711814="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
URL: https://portal-nl.ru/lnternationalcardservices/sel... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of malicious intent." }
(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9005abd2da7d0f77',t:'MTczNjYwNjUyMy4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();
URL: https://portal-nl.ru/lnternationalcardservices/lcs... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of malicious intent." }
(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9005abdd2afd72b9',t:'MTczNjYwNjUyNS4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();
URL: https://portal-nl.ru/lnternationalcardservices/selecteren.php Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "Akkoord", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://portal-nl.ru/lnternationalcardservices/selecteren.php Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "Akkoord", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://portal-nl.ru/lnternationalcardservices/selecteren.php Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://portal-nl.ru/lnternationalcardservices/selecteren.php Model: Joe Sandbox AI	{ "brands": [ "International Card Services" ] }
	{ "brands": [ "International Card Services" ] }
URL: https://portal-nl.ru/lnternationalcardservices/selecteren.php Model: Joe Sandbox AI	{ "brands": [ "International Card Services" ] }
	{ "brands": [ "International Card Services" ] }
URL: https://portal-nl.ru/lnternationalcardservices/selecteren.php Model: Joe Sandbox AI	{ "brands": [ "International Card Services" ] }
	{ "brands": [ "International Card Services" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (952)
Category:	downloaded
Size (bytes):	1253
Entropy (8bit):	5.322220503593389
Encrypted:	false
SSDEEP:	24:yjeRmfe9xvVCzjsuRpFGLnxbFGWsAu1JJSa7oRW7aRWXCunouOvTMOKFId6J39S:8eLX4/DGLrGWsVSTw2wptI8Id6a
MD5:	7A6DF0A120E8DC5089E8690CE52889F7
SHA1:	490987644ABA107CEEB4ED54E0CBDD28D7978883
SHA-256:	965FE1113BDCF9B38C215AF89B47A62CC012B7C1975EB31782F706042994B758
SHA-512:	13EC6C3A8DCA1027B1F5C8275B4BB996BEF809FBF5589AA5FD7F742DEEDD6F5663269131FF886FF5FA89AFB103D5B33422FD139C90A3FE8DCFD15A56D6BFA5A9
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/0-1
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.<script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9005abeadf2c425c',t:'MTczNjYwNjUyNy4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventLi

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	7.725638578267857
Encrypted:	false
SSDEEP:	48:M/64mnMba5r124H33OwZcQ0rZ2nBXBfqhaMWgO/zOvOi/D:MSDMbap1FH33Ow2Q0dmRfqhaRlOvND
MD5:	DCB6AE696E0354484C31D22CA8517ECB
SHA1:	ECAA1104522AF2BE7F8B13502D94F7DEF13C5C84
SHA-256:	04E1ABA2DC4D4A1854C0909F5FF16A3EF390CBBCD06800E694831CCC96BEDADB
SHA-512:	4453FD4F271E4090203DEAB2C9CAE5E42F4F413D8AA90015B780E2231B219576BDFCA74A34989791C313F6CB640AB342846CCCA35F27DFD6B75A199CB4F72824
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............F.....pHYs.................sRGB.........gAMA......a.....IDATx..MhTW..oK7......E."h...LV..v.T..`.E.....j..$..R..va.(h.j\v..P..&.Bg.ZH...e{./..;.s...}......yy....8....;.?....$o.B.P "........@D..""(..A....DDP "........@D..""(..A....DDP "........@D..""(..A....DDP "........@D..""(..A....DDP "........@D..""(..A....DDP "....o.EZ..m.l.2.0Y.o&..2>h]..,.o.~.f..M{..<..pOZ..M...&.%{}S/.>)j......+.'7.Y...6...6R:.6.+.Z....D..2..>2...~F........Ufy.j..'v......m..z[.?.n:.....m.iI..k..Df. b..._w..+.....H.....{..Z...@.k@.7"..}O_....dEy....L?\|.\|.y{.vY...X..P....$.8.'K.yN\|:X......I.9..@...../...ev......H........@o.Q'..\|.SO...s./.$..x.)...~Myf..BbHy.o.... .!........Bu.1..@x.C.....#:..U]....JWo.E.,..@T.!..6..#.Lh.g.U?...'......k. ...a5B.I...iH=......@....y=K..!...b..c.<v..ya.2.g0..A..M._..-e.M.....).+.7y.......Q.D.........7Me..)..}a..l\.4....\|5...UL....Fu...4....m..i$h..}6f...t....G{..e...?...z....-.B.X....)...........d....U..h...e.\|.....

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	3162
Entropy (8bit):	7.927837631536251
Encrypted:	false
SSDEEP:	48:PaatIu0hyvqi1jbBXbOla5figONXmEkmshGfEXJJqGzK80NN7dXRHn:CK0hvobBLOfgONXIXvqSANb
MD5:	95368CB80214891D094CE484AFA5272E
SHA1:	BCE522F8DACADE67C6CC80FFFC5E694F45881F05
SHA-256:	A820DB9105905BC9A262B3DD4ED5519E02D100EC1C0DD279141F34A5DDC9A5DF
SHA-512:	7CB821DA6B4B0057EDEAF416815BE3833917A48B807FC52FBA694C52AC802EBC92AD4C12C3D4F402B18FEA568D225992CD63987805CF0B3F3EF3B6A4110855AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~.....IDATx.V.pT...S.....g.h.....$.%....n6......#.....H.......(....T...5 A.Bv.c..&A.P...!...~.=...HM........{..<..C......h....k..+2RAH...!. #$..I..K........./...7k:.4PeYQ..$..s2O..U.R.5.? U]W.2..TM.D..h.......#l..hz.[.0../.nXP..k..>...Y..q`s.`.hX...&+..k".T.{....b...G%.D.\.A..av.{.../..PuY..c,.....U..yE..];...y......\|y...7.\|......'.T.eM..h1)..FX.IM..x...tB.....q.X,..._.r......1..znE_............k...2...'.U......Q...#..xp..!.PX..>..~..o.W...../.......J..f_p.{...Z9E=....]......{..K..~p.}...[.9.{..}./b./...Q...()....;....\.;t...[.62c.6...c\|..[..:.9v.+9.....)./.onw.m..}&....R..=.....P.._.T#....p.3...=....}..U..6.i.....o.`...u..m.h-.a..7w}.j/}......[^mb'..~E...67.t.EEM..u.1\|.X......>.... ...z....{....N.9p...i..3.k^...-..0...f....=..C-].v.J/.:{..W.i...~".8.q.8.P..]..,.qf.K...n..72}Q.R_.s=O....HWx.j...p.wPT.....q..Y.S.kQ.K.a.?.....I.k!..\|t..>..O.......h..x.q..y..%..&r........:%......

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2743
Entropy (8bit):	7.915930978522004
Encrypted:	false
SSDEEP:	48:pegh7HN8DoC8UZaawDBCiB1AZ/c4UsGw3xErzTk0ObdraFHE:hh7HN8DT8UZAD3B1Ai4U7w3xErzTk00F
MD5:	1111703797FF2F413E31CEC85AB8DDD2
SHA1:	2361E1EC7F7F2059720932A34114FE9755801E69
SHA-256:	750EC66B183BA71B754BEEDFEE1489BA716AD301AD4FBBA82019C4ADC57AF9E8
SHA-512:	7F39C0F08FEFDF9E8EB4DB5BEEE17848E7B647519B7BC910809252A54B63F5BBDC3A550E6C01A3F5DD0C57449D1B0FEEC9F8E48BF5A75FD7CC2B92D79F66FF2E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~....iIDATx.WyX...O].D2.I23I..U...Z...@..,(..T..(Z..J..}V.....O.........b+.IP.YT\........Z.....=w&aQ...\|.......;..s.G ..JH_..I.N..^L....`..Sz.2Q.....Z..h........IvP.)=..b......@B.1..,A... 1.H@.V./B...........B..I..R:)...N;w..F?.9.......\|..4.7..s.Lx>..<.z.u=d.@."......+G....C..]k:C..cFD......x.....E.u2.......{2......$...... ....4..J.b.....!.i..f.ZGP:..3.2.(...........Ark.<j........`.T...<.e.P&..'KP..8...70..`$.?......ZC..\|...bZ#.T..p+.).OpQL...b.........2...../:....DQ./9628.h ....T.KY.....W:83.!.4.3f}.1.g.j..\@Q$....e(..T..>D....]..&.......^...T.%..P..&R).0.:...3=...:...S...h..u.....=...".........M[.CW...F.....YC..'<fzeC.;..............7+ ......[.*O..,...0e..k....'.t...fa.n.0b......T........].G..f..8je.....g..]=w..-.W~...#.Ne..JI}/6>......f[.......}.......={?]..{.soh.Q..fc....1v....!B.....nvZ.'vf.F.lfL18...h.w..8Ww..\....."cS...]......~..../...~.EI..y.l..].Qc..=......e......y.....m-=..+/je...1..Y..

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2128
Entropy (8bit):	7.725638578267857
Encrypted:	false
SSDEEP:	48:M/64mnMba5r124H33OwZcQ0rZ2nBXBfqhaMWgO/zOvOi/D:MSDMbap1FH33Ow2Q0dmRfqhaRlOvND
MD5:	DCB6AE696E0354484C31D22CA8517ECB
SHA1:	ECAA1104522AF2BE7F8B13502D94F7DEF13C5C84
SHA-256:	04E1ABA2DC4D4A1854C0909F5FF16A3EF390CBBCD06800E694831CCC96BEDADB
SHA-512:	4453FD4F271E4090203DEAB2C9CAE5E42F4F413D8AA90015B780E2231B219576BDFCA74A34989791C313F6CB640AB342846CCCA35F27DFD6B75A199CB4F72824
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/favicon-144x144-withoutlines.png
Preview:	.PNG........IHDR..............F.....pHYs.................sRGB.........gAMA......a.....IDATx..MhTW..oK7......E."h...LV..v.T..`.E.....j..$..R..va.(h.j\v..P..&.Bg.ZH...e{./..;.s...}......yy....8....;.?....$o.B.P "........@D..""(..A....DDP "........@D..""(..A....DDP "........@D..""(..A....DDP "........@D..""(..A....DDP "........@D..""(..A....DDP "....o.EZ..m.l.2.0Y.o&..2>h]..,.o.~.f..M{..<..pOZ..M...&.%{}S/.>)j......+.'7.Y...6...6R:.6.+.Z....D..2..>2...~F........Ufy.j..'v......m..z[.?.n:.....m.iI..k..Df. b..._w..+.....H.....{..Z...@.k@.7"..}O_....dEy....L?\|.\|.y{.vY...X..P....$.8.'K.yN\|:X......I.9..@...../...ev......H........@o.Q'..\|.SO...s./.$..x.)...~Myf..BbHy.o.... .!........Bu.1..@x.C.....#:..U]....JWo.E.,..@T.!..6..#.Lh.g.U?...'......k. ...a5B.I...iH=......@....y=K..!...b..c.<v..ya.2.g0..A..M._..-e.M.....).+.7y.......Q.D.........7Me..)..}a..l\.4....\|5...UL....Fu...4....m..i$h..}6f...t....G{..e...?...z....-.B.X....)...........d....U..h...e.\|.....

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8697), with no line terminators
Category:	downloaded
Size (bytes):	8697
Entropy (8bit):	5.736385210149219
Encrypted:	false
SSDEEP:	192:KT/8j/SoeX34Z/BnZgF3xQiELkUZ7C8ej/zFC/NASv:80GoeXYJZgpxQiEIUZe8OR6A8
MD5:	A54715DBA3B640EC5E97A5956F901159
SHA1:	7EB96A31D38403E3C99F4638B530F153ACAA57A7
SHA-256:	5EB361E0794E8550079CEC3007FE1A7211C1BCF3DC22C9C5C2FDC6DF0EE517D3
SHA-512:	4D97F4424B0383EE8BA9F1C53EB3AF77705A0C0931393232C29EE7D1AC502E4B328E59FBC87ADB79CFEB81B3AA108908CA86785A06DE5624AA2BCF98740E4CF4
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,k,o,s,x){W=b,function(d,e,V,f,g){for(V=b,f=d();!![];)try{if(g=parseInt(V(547))/1+parseInt(V(567))/2+parseInt(V(576))/3+parseInt(V(603))/4*(-parseInt(V(514))/5)+parseInt(V(592))/6+-parseInt(V(559))/7+-parseInt(V(543))/8,g===e)break;else f.push(f.shift())}catch(E){f.push(f.shift())}}(a,362201),h=this\|\|self,i=h[W(565)],j={},j[W(501)]='o',j[W(577)]='s',j[W(558)]='u',j[W(564)]='z',j[W(521)]='n',j[W(488)]='I',j[W(555)]='b',k=j,h[W(601)]=function(g,E,F,G,a1,I,J,K,L,M,N){if(a1=W,E===null\|\|void 0===E)return G;for(I=n(E),g[a1(498)][a1(485)]&&(I=I[a1(586)](g[a1(498)][a1(485)](E))),I=g[a1(522)][a1(580)]&&g[a1(495)]?g[a1(522)][a1(580)](new g[(a1(495))](I)):function(O,a2,P){for(a2=a1,O[a2(550)](),P=0;P<O[a2(582)];O[P+1]===O[P]?O[a2(494)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'),J=J[a1(593)][a1(557)](J),K=0;K<I[a1(582)];L=I[K],M=m(g,E,L),J(M)?(N=M==='s'&&!g[a1(599)](E[L]),a1(542)===F+L?H(F+L,M):N\|\|H(F+L,E[L])):H(F+L,M),K++);return G;function H(

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3162
Entropy (8bit):	7.927837631536251
Encrypted:	false
SSDEEP:	48:PaatIu0hyvqi1jbBXbOla5figONXmEkmshGfEXJJqGzK80NN7dXRHn:CK0hvobBLOfgONXIXvqSANb
MD5:	95368CB80214891D094CE484AFA5272E
SHA1:	BCE522F8DACADE67C6CC80FFFC5E694F45881F05
SHA-256:	A820DB9105905BC9A262B3DD4ED5519E02D100EC1C0DD279141F34A5DDC9A5DF
SHA-512:	7CB821DA6B4B0057EDEAF416815BE3833917A48B807FC52FBA694C52AC802EBC92AD4C12C3D4F402B18FEA568D225992CD63987805CF0B3F3EF3B6A4110855AD
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/2.png
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~.....IDATx.V.pT...S.....g.h.....$.%....n6......#.....H.......(....T...5 A.Bv.c..&A.P...!...~.=...HM........{..<..C......h....k..+2RAH...!. #$..I..K........./...7k:.4PeYQ..$..s2O..U.R.5.? U]W.2..TM.D..h.......#l..hz.[.0../.nXP..k..>...Y..q`s.`.hX...&+..k".T.{....b...G%.D.\.A..av.{.../..PuY..c,.....U..yE..];...y......\|y...7.\|......'.T.eM..h1)..FX.IM..x...tB.....q.X,..._.r......1..znE_............k...2...'.U......Q...#..xp..!.PX..>..~..o.W...../.......J..f_p.{...Z9E=....]......{..K..~p.}...[.9.{..}./b./...Q...()....;....\.;t...[.62c.6...c\|..[..:.9v.+9.....)./.onw.m..}&....R..=.....P.._.T#....p.3...=....}..U..6.i.....o.`...u..m.h-.a..7w}.j/}......[^mb'..~E...67.t.EEM..u.1\|.X......>.... ...z....{....N.9p...i..3.k^...-..0...f....=..C-].v.J/.:{..W.i...~".8.q.8.P..]..,.qf.K...n..72}Q.R_.s=O....HWx.j...p.wPT.....q..Y.S.kQ.K.a.?.....I.k!..\|t..>..O.......h..x.q..y..%..&r........:%......

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5065
Entropy (8bit):	7.960858235395294
Encrypted:	false
SSDEEP:	96:oq+zw3+vfvlrBSN0y2jYbrKkCj7bZIL2IEgTATCbz+MiV0tKgdWjU1hyO0uNa9rB:oZC+2SzYqHbZnIEZTCbfKyWo1hybuI9d
MD5:	7A6C006D59C64B21CE269FD70770187C
SHA1:	A4AE5789C016D38109B30C57C7A9627F4D00D7B8
SHA-256:	88F7267B714B58C6A84534C4CD828E2B88407A7FDADB1633667AFDB4C7A67CD8
SHA-512:	1D0A395969CD441B295F81B7C9391C50D934669E210505838A17F208FC1CFD25DA9A2CD4B85C1884874EFE30DF915454AF986553161A61D59096CC7CEB0DDC6F
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/woty-badge-populairste-financieel-1.png
Preview:	.PNG........IHDR...:...:......J(....IDATx..Z.x.E.~..Fz.$...D.B..(E._.Q..A...l..X....]@].Udm. ."..+E..5. .$!.B ....;s!...T.{x....\|s.......l.......z..;.@4..)..._..E.B.f..i..y.]...-Z$.f&..D....TU...._r..c.v.......??._.t%....Q2....Tu.q..D3....8.).B._.d8..@M.XQQ.0r../{..S:,.-..Ed..M.F3ZRR..6.w.....O........h$5....Q..O^..G......)....n....X\X....i4..6..6..!__...j__.2.Eu]b[..4....J..#.V..8.......+x....{.6`.....d,....v..h.Z..-k.w`....9.d...k..@#HK~..v...0.\|...d.?#.......p..)P3...8M\|.Ji2T2o\...m..E..5.....p..vjm/..JI.aR)....+.....l.......o..S..GBo..=..O$l..X...;.Z...:.TJR\..t.T.o....)..&_u..J.6.....`...8c9.+^...!.h...tgV........'.:.P.7Q.....>....R..T..<=?.....u>.........wJ..Q@.....JUU2WB)...1%..~g..L.;..VB;.,......d`(Ux.l..2....Bs8.........+B.......s.>....B...P..`.{..[;...r....9.h.B=:C2#H.#ZD.....v...ad;...f.J.5........'.....s..k..@...e......:..8..^F...>e.q.Omxl....rP.Cq..........U.}{O9.......Rk...[i.1.mm;..0.(!!...;...G?2y..G.d.G. .j....p...P

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8649), with no line terminators
Category:	dropped
Size (bytes):	8649
Entropy (8bit):	5.742856090247829
Encrypted:	false
SSDEEP:	192:RPmITPs0qyjDDwfKxLF4jBSwghMkATAJ+kqHLzDRC:R+q0FMD+4LF4jBSwSUAJYrzk
MD5:	9A9D9C6132BB9FD2CA124DB98F9B30A8
SHA1:	DBBB46EEE2D8485105ED4C11DDDFC5511719E64B
SHA-256:	4224745626AFAF1CA29CB2C087D9F514ADBD7CC974578E15897416232FE1EE4B
SHA-512:	55482F2EAC04EFA0AAF51E823298F4B81817905C7003D765DB51F98FB3FC95D787B7C6F6D01C275886EDB2047F2DED8D0359CC21DA2CA701066E9FBD9C119197
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,k,l,s,v){W=b,function(c,e,V,f,g){for(V=b,f=c();!![];)try{if(g=parseInt(V(394))/1+-parseInt(V(341))/2+parseInt(V(348))/3*(-parseInt(V(444))/4)+-parseInt(V(425))/5+-parseInt(V(433))/6+-parseInt(V(431))/7+parseInt(V(448))/8,e===g)break;else f.push(f.shift())}catch(E){f.push(f.shift())}}(a,174592),h=this\|\|self,i=h[W(437)],j=function(X,e,f,g){return X=W,e=String[X(357)],f={'h':function(E){return E==null?'':f.g(E,6,function(F,Y){return Y=b,Y(366)[Y(420)](F)})},'g':function(E,F,G,Z,H,I,J,K,L,M,N,O,P,Q,R,S,T,U){if(Z=X,null==E)return'';for(I={},J={},K='',L=2,M=3,N=2,O=[],P=0,Q=0,R=0;R<E[Z(359)];R+=1)if(S=E[Z(420)](R),Object[Z(340)][Z(415)][Z(358)](I,S)\|\|(I[S]=M++,J[S]=!0),T=K+S,Object[Z(340)][Z(415)][Z(358)](I,T))K=T;else{if(Object[Z(340)][Z(415)][Z(358)](J,K)){if(256>K[Z(365)](0)){for(H=0;H<N;P<<=1,F-1==Q?(Q=0,O[Z(389)](G(P)),P=0):Q++,H++);for(U=K[Z(365)](0),H=0;8>H;P=P<<1\|U&1.02,Q==F-1?(Q=0,O[Z(389)](G(P)),P=0):Q++,U>>=1,H++);}else{for(U=1,H=0;

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5065
Entropy (8bit):	7.960858235395294
Encrypted:	false
SSDEEP:	96:oq+zw3+vfvlrBSN0y2jYbrKkCj7bZIL2IEgTATCbz+MiV0tKgdWjU1hyO0uNa9rB:oZC+2SzYqHbZnIEZTCbfKyWo1hybuI9d
MD5:	7A6C006D59C64B21CE269FD70770187C
SHA1:	A4AE5789C016D38109B30C57C7A9627F4D00D7B8
SHA-256:	88F7267B714B58C6A84534C4CD828E2B88407A7FDADB1633667AFDB4C7A67CD8
SHA-512:	1D0A395969CD441B295F81B7C9391C50D934669E210505838A17F208FC1CFD25DA9A2CD4B85C1884874EFE30DF915454AF986553161A61D59096CC7CEB0DDC6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...:......J(....IDATx..Z.x.E.~..Fz.$...D.B..(E._.Q..A...l..X....]@].Udm. ."..+E..5. .$!.B ....;s!...T.{x....\|s.......l.......z..;.@4..)..._..E.B.f..i..y.]...-Z$.f&..D....TU...._r..c.v.......??._.t%....Q2....Tu.q..D3....8.).B._.d8..@M.XQQ.0r../{..S:,.-..Ed..M.F3ZRR..6.w.....O........h$5....Q..O^..G......)....n....X\X....i4..6..6..!__...j__.2.Eu]b[..4....J..#.V..8.......+x....{.6`.....d,....v..h.Z..-k.w`....9.d...k..@#HK~..v...0.\|...d.?#.......p..)P3...8M\|.Ji2T2o\...m..E..5.....p..vjm/..JI.aR)....+.....l.......o..S..GBo..=..O$l..X...;.Z...:.TJR\..t.T.o....)..&_u..J.6.....`...8c9.+^...!.h...tgV........'.:.P.7Q.....>....R..T..<=?.....u>.........wJ..Q@.....JUU2WB)...1%..~g..L.;..VB;.,......d`(Ux.l..2....Bs8.........+B.......s.>....B...P..`.{..[;...r....9.h.B=:C2#H.#ZD.....v...ad;...f.J.5........'.....s..k..@...e......:..8..^F...>e.q.Omxl....rP.Cq..........U.}{O9.......Rk...[i.1.mm;..0.(!!...;...G?2y..G.d.G. .j....p...P

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (952)
Category:	downloaded
Size (bytes):	1253
Entropy (8bit):	5.329258889152253
Encrypted:	false
SSDEEP:	24:yjeRmfe9xvVCzjsuRpFGLnxbFGW+r+u1JJSa7oRW7aRWXCunouOvTMOKFId6J39S:8eLX4/DGLrGW+rnSTw2wptI8Id6a
MD5:	54F60B1471ABB6CB3F1E059675FE06FA
SHA1:	50A4C856A039F07B11ADFB4875A26C05BC3C2997
SHA-256:	B2BD0CFB7ED621636789627F50A5501F616627F861F05244D8EAFE916002500B
SHA-512:	7B3650D17581CC0A285335F22D4FC1D77EFBB295F386754EA743770FA635B6C0FD0357807DAE7B69CA63D6E867C3CCDDE55095AD8438689AA07655D05D79D727
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/index_2.html
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.<script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9005abdd2afd72b9',t:'MTczNjYwNjUyNS4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventLi

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	774
Entropy (8bit):	5.2757358714980915
Encrypted:	false
SSDEEP:	12:UNmF3O6ZRoT6pfD3DhKa+zb77kYYtJcb65wCgDrqAF3O6ZRoT6pfDZfKayVVey9+:33OYs2ztJc+u/r3OYsPwy96cGSSf7
MD5:	DE52D8255B9A8A5D8F4DBDB55AF60E31
SHA1:	FD3AF6384F2B84C5E7D0CA1A555CEE50D46ADB99
SHA-256:	52D62465D244BEF9C22960BED269D931EB2B705DFF7F09A0BCF5DDBA62554F45
SHA-512:	76FE9AC96244CFDCEA6349CF3A10C50D593AAEB5CCFAF07B9DFC9705D58E7BFB125D6AB4AF31729F8D079F8E573136A17ACB0035551BE401EF0F60F95ABD9B10
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lato
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2415
Entropy (8bit):	7.91615373208749
Encrypted:	false
SSDEEP:	48:tGu/v/vKqE8xsoyQGCLbnISJVbscO7VADY8+CouOlanaoLIOe8+9:t9/v/r6QGMbn9xsR7VKYQRkaad8w
MD5:	7FE7E37424B6AE08363DD58F285D9A7C
SHA1:	6CAB426380D23501FABC68B0863FF8F93D48863B
SHA-256:	E6DA18D20E14D208422A4D0B1F905F682B9C22E3484FED27DB7165A7B98AC247
SHA-512:	54D01B3ADB16BF6820B130611B84F30B67FB5E99C619CD682544728745FFCAD52233EBC4E55A405C782F1826DF0C5B4215F3EBCFA17B40F6A2B709EE27E06F55
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~....!IDATx.X.SZ...o..n\| .0..v.m..4...d.y.L.$.....m.1p....1Y.j....Qy. .DE".B......>.\|.....t..Bf.0p..{>.....~.,..#.e.(..!.......#..pq.C...>.j(.4..QH:=.pRl."..!<.@9,...h..si.H..3..4...E.!...3u......0[...P...cM-b..C88.....1..S..Ci.b($G...p5.}7..$.a........e..\|.X;...O.{....D<.Pb..'#..............q........r..G..'...8...F.7..-R.%Q.D...O...<...J.'EP..]..Q%.."/.a9.!..@..n. S.`w ..i.......... .B...\|....`0 9.c6dJn.7.aK..2A.\.V.. K!.(`...1...I.f..M!l...t..#.Ys. ......)J......<....2K..a.6...~r^}..E.G}.?g.r.H..$..k....J.......oO....F.A...9...,=..<.\..Pc.w_...yx.,...i=.7.....I..0m.G{.........Kn[o,..GCk.%...3543..._.Uw_7....9.,.c..."9.C9`J...N......Y].t..#...+...H...........es..:..fm........5...6..@`.7...v....][=....otV...$.C...18..C....w\|.g.. .Z.{..P.....5.Y.Eb...1.M.4JG.U.e..-%..z$...lm.../..]c.v.sPn.=.Q..o.R[u...'.bO.i.(..p...5.s.;..$..2C........hW..>...0...{j....$...[.X8.Z..]~..c.q.(..........5.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2510
Entropy (8bit):	7.900044646130137
Encrypted:	false
SSDEEP:	48:PT+mZSx/SAjr4GzOXS6QOLYXMMSBOIUjcxNqZs47bcdc:rnYdrrzn9xc36cxgb3
MD5:	DF388202EDEF04A124FEFE4FF611A4C0
SHA1:	D15D79CA8EDD7CA1E20E270E8DC263422C44FB5C
SHA-256:	6ED34D0923F2E69E82D90AC59962ABCD44BAAB49D1B1060D80E000160861A9E4
SHA-512:	62C10A0FF4D3AB9F2CF22FDF89BCC9F1CD994DE46DA19AB3DE3605383B6D3B930FDB0C13D1945D0128A67F3191FD9B3B39557F36F76C4E247016D95BED8431B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~.....IDATx.W{PT..?....Fm.fL....L..d..4.i.5.....,.....!..!jb.G...].L5...L..'.@^c.M..aawA.......&....~.....2..8....w~....E.#.$.."J...`..&K.,i..).&..b.......>Y.`.....P.O..#ER5A.e..."x.t0......h...5..U....g1......[=.7z._..}o.....=. .D\..F.i...TU..}.U.....@..41....^...+...n]PQ:.r...-..}.....~_.....f..L..G.D(..)2V.`C...jt..TU..N\.......J6O+)I,.h...[..}...@...w...<.z.QX....F..{..B.+....4.Y.mOy...m.[...........w.[.....xR...@C...TqHjlb..Z..ri....N.l{.ru...D..3<...-.u...$...Y.F,..... ..V,..9n.vqF...[..ly.b.sI...<]....wo.SQ...TK.w.f...ih(.F......T..6^..d.G.e..6.X......~......@.-.....".c.!..+..FUk'/_..y...).m.*+.y.{..5.......?.K...BB...3Xo..)........E....uG.n^...W\|.n}.J.....\|.KU.D....,yL...T.D ......(.a.(X....?.....+...W.>..{d.......L^T.Q<..@...hL.M......#......./.~....O.GBMI...(Id2~e...n..d.Xy...@.....M.e!.j;...pq..sA.4U....J..[=L.v.....q....w.../..=...)..#xcHa(.0toI...H..lAA....0y~.nc..1.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (952)
Category:	downloaded
Size (bytes):	1253
Entropy (8bit):	5.344150385766677
Encrypted:	false
SSDEEP:	24:yjeRmfe9xvVCzjsuRpFGLnxbFGWMnQu1JJSa7oRW7aRWXCunouOvTMOKFId6J39S:8eLX4/DGLrGWMlSTw2wptI8Id6a
MD5:	3000E7FD57AC736B6EBDBD2EF5599BB9
SHA1:	3798838350C238B931D120BB6A011A72541FDC04
SHA-256:	A28401D306A931D3AF1C766651E8C4CEF038495E9BA234EE0E09E121E491E7D2
SHA-512:	F60909655E7C085E1C5E5D3D39C0EF2D1B372DFFAC6CE0BB1E800794E7ED0D244638AC9B6C97C0CD493F38E4B6A8DAF63AC9894BEBDD28810352D06FEC045EF1
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/0-2
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.<script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9005abe75873729f',t:'MTczNjYwNjUyNi4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventLi

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2365
Entropy (8bit):	7.900938143942054
Encrypted:	false
SSDEEP:	48:Q2lCBDo9p1kDtpD7BE4aosLWHUb0P6UiSmmLbgN2Kh1wh85D5cb09:QvBmkPD7BE1Db0yUflLbgN2Kh085yb09
MD5:	C1212C1A8C1F4FD0A7D78F16AA96C8E0
SHA1:	B0D639D338249DE324DAF7304821322A0DE6488A
SHA-256:	EFE3579D5B6133220AD3F5C3B9E54D27F57E6C5ED4C703176528988653A6D221
SHA-512:	8C617DFF9C2C4DFF47FB6B29A3C4BD0FFC7F519BA6A935475C9646F3C949C21871098EC1615D4494D01370C9337DBF23341A153E4131C26577D8682BD66D66F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~.....IDATx..X.T.W..gO]k[D.......u.......&.B.y....b..".j..W.U.V. n.O"..X.)..C.....~. ...;{.d..b..s.%.{....o.... .i....4.G..E@.H......h........TA.P..&..@.V...fvT.CH..9..(t.....o....H.9...v.MSS4.1.:.h5Uf.p.g.........Y.u.....C(....v...H.!._..e.a..K.8M.8..e.z.:w4........C8.).r...7..W.Q.\|..vCv..;..t...l@...K@1.!..(.&....8C.a.C`$^.p....(.S.hX2#....f.`Gv....(-.GmF-W.RiR.=M..vw.(.9H......H.....@1.Y0...h.k.....0...........J.I.X..M.'.}....A4=H..R.$.c.......>y.\|@>0.T(.BE..b..4.G..hk..M<x............-..mi.P..pH......C.[....z<3WZXS....L;.s. .......'"x..q\jRj.5i~Uumkk.H.LV#K.d..z^..F.\|a......)......>.o.w.....v.D.1.;..M...Smm}.8.3.\|....Y....[...n.u4>.bF..JYSs...0....$v..rCS{G..(q...wJ.u..45.~...V....[..c#....yy.).s...U......?..^`.d.- 8.2:.K....j.[....0......,(50.#.H5pYuw....._..p........o.....?.U.9n............\.t..._..!N.O...U....S.j.x.0...30.3.%..5....n.3\<a....o.B_. .C....p...O.......\...#

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2415
Entropy (8bit):	7.91615373208749
Encrypted:	false
SSDEEP:	48:tGu/v/vKqE8xsoyQGCLbnISJVbscO7VADY8+CouOlanaoLIOe8+9:t9/v/r6QGMbn9xsR7VKYQRkaad8w
MD5:	7FE7E37424B6AE08363DD58F285D9A7C
SHA1:	6CAB426380D23501FABC68B0863FF8F93D48863B
SHA-256:	E6DA18D20E14D208422A4D0B1F905F682B9C22E3484FED27DB7165A7B98AC247
SHA-512:	54D01B3ADB16BF6820B130611B84F30B67FB5E99C619CD682544728745FFCAD52233EBC4E55A405C782F1826DF0C5B4215F3EBCFA17B40F6A2B709EE27E06F55
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/4.png
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~....!IDATx.X.SZ...o..n\| .0..v.m..4...d.y.L.$.....m.1p....1Y.j....Qy. .DE".B......>.\|.....t..Bf.0p..{>.....~.,..#.e.(..!.......#..pq.C...>.j(.4..QH:=.pRl."..!<.@9,...h..si.H..3..4...E.!...3u......0[...P...cM-b..C88.....1..S..Ci.b($G...p5.}7..$.a........e..\|.X;...O.{....D<.Pb..'#..............q........r..G..'...8...F.7..-R.%Q.D...O...<...J.'EP..]..Q%.."/.a9.!..@..n. S.`w ..i.......... .B...\|....`0 9.c6dJn.7.aK..2A.\.V.. K!.(`...1...I.f..M!l...t..#.Ys. ......)J......<....2K..a.6...~r^}..E.G}.?g.r.H..$..k....J.......oO....F.A...9...,=..<.\..Pc.w_...yx.,...i=.7.....I..0m.G{.........Kn[o,..GCk.%...3543..._.Uw_7....9.,.c..."9.C9`J...N......Y].t..#...+...H...........es..:..fm........5...6..@`.7...v....][=....otV...$.C...18..C....w\|.g.. .Z.{..P.....5.Y.Eb...1.M.4JG.U.e..-%..z$...lm.../..]c.v.sPn.=.Q..o.R[u...'.bO.i.(..p...5.s.;..$..2C........hW..>...0...{j....$...[.X8.Z..]~..c.q.(..........5.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2365
Entropy (8bit):	7.900938143942054
Encrypted:	false
SSDEEP:	48:Q2lCBDo9p1kDtpD7BE4aosLWHUb0P6UiSmmLbgN2Kh1wh85D5cb09:QvBmkPD7BE1Db0yUflLbgN2Kh085yb09
MD5:	C1212C1A8C1F4FD0A7D78F16AA96C8E0
SHA1:	B0D639D338249DE324DAF7304821322A0DE6488A
SHA-256:	EFE3579D5B6133220AD3F5C3B9E54D27F57E6C5ED4C703176528988653A6D221
SHA-512:	8C617DFF9C2C4DFF47FB6B29A3C4BD0FFC7F519BA6A935475C9646F3C949C21871098EC1615D4494D01370C9337DBF23341A153E4131C26577D8682BD66D66F7
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/1.png
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~.....IDATx..X.T.W..gO]k[D.......u.......&.B.y....b..".j..W.U.V. n.O"..X.)..C.....~. ...;{.d..b..s.%.{....o.... .i....4.G..E@.H......h........TA.P..&..@.V...fvT.CH..9..(t.....o....H.9...v.MSS4.1.:.h5Uf.p.g.........Y.u.....C(....v...H.!._..e.a..K.8M.8..e.z.:w4........C8.).r...7..W.Q.\|..vCv..;..t...l@...K@1.!..(.&....8C.a.C`$^.p....(.S.hX2#....f.`Gv....(-.GmF-W.RiR.=M..vw.(.9H......H.....@1.Y0...h.k.....0...........J.I.X..M.'.}....A4=H..R.$.c.......>y.\|@>0.T(.BE..b..4.G..hk..M<x............-..mi.P..pH......C.[....z<3WZXS....L;.s. .......'"x..q\jRj.5i~Uumkk.H.LV#K.d..z^..F.\|a......)......>.o.w.....v.D.1.;..M...Smm}.8.3.\|....Y....[...n.u4>.bF..JYSs...0....$v..rCS{G..(q...wJ.u..45.~...V....[..c#....yy.).s...U......?..^`.d.- 8.2:.K....j.[....0......,(50.#.H5pYuw....._..p........o.....?.U.9n............\.t..._..!N.O...U....S.j.x.0...30.3.%..5....n.3\<a....o.B_. .C....p...O.......\...#

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (952)
Category:	downloaded
Size (bytes):	1253
Entropy (8bit):	5.3401809182771
Encrypted:	false
SSDEEP:	24:yjeRmfe9xvVCzjsuRpFGLnxbFGWaOu1JJSa7oRW7aRWXCunouOvTMOKFId6J39S:8eLX4/DGLrGWa3STw2wptI8Id6a
MD5:	DF421380A34FBE812F5DAB4D97C9F3DD
SHA1:	BFEADC66195852DA5FEC5B64DA94A470151D275E
SHA-256:	9357AFD398B3861FD430908288F80A225700F03A71464709B96358CF465800FE
SHA-512:	D9D0C2356BD57DD0D883DB4D6597596695409AB34DB643CB423204FF07A19CFF1D5A1D87DB5A3D2337725EA241EB1D3283737B0B4E023F08555208F164CE5C46
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/index_1.html
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.<script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9005abdb08735e72',t:'MTczNjYwNjUyNC4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventLi

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2743
Entropy (8bit):	7.915930978522004
Encrypted:	false
SSDEEP:	48:pegh7HN8DoC8UZaawDBCiB1AZ/c4UsGw3xErzTk0ObdraFHE:hh7HN8DT8UZAD3B1Ai4U7w3xErzTk00F
MD5:	1111703797FF2F413E31CEC85AB8DDD2
SHA1:	2361E1EC7F7F2059720932A34114FE9755801E69
SHA-256:	750EC66B183BA71B754BEEDFEE1489BA716AD301AD4FBBA82019C4ADC57AF9E8
SHA-512:	7F39C0F08FEFDF9E8EB4DB5BEEE17848E7B647519B7BC910809252A54B63F5BBDC3A550E6C01A3F5DD0C57449D1B0FEEC9F8E48BF5A75FD7CC2B92D79F66FF2E
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/3.png
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~....iIDATx.WyX...O].D2.I23I..U...Z...@..,(..T..(Z..J..}V.....O.........b+.IP.YT\........Z.....=w&aQ...\|.......;..s.G ..JH_..I.N..^L....`..Sz.2Q.....Z..h........IvP.)=..b......@B.1..,A... 1.H@.V./B...........B..I..R:)...N;w..F?.9.......\|..4.7..s.Lx>..<.z.u=d.@."......+G....C..]k:C..cFD......x.....E.u2.......{2......$...... ....4..J.b.....!.i..f.ZGP:..3.2.(...........Ark.<j........`.T...<.e.P&..'KP..8...70..`$.?......ZC..\|...bZ#.T..p+.).OpQL...b.........2...../:....DQ./9628.h ....T.KY.....W:83.!.4.3f}.1.g.j..\@Q$....e(..T..>D....]..&.......^...T.%..P..&R).0.:...3=...:...S...h..u.....=...".........M[.CW...F.....YC..'<fzeC.;..............7+ ......[.*O..,...0e..k....'.t...fa.n.0b......T........].G..f..8je.....g..]=w..-.W~...#.Ne..JI}/6>......f[.......}.......={?]..{.soh.Q..fc....1v....!B.....nvZ.'vf.F.lfL18...h.w..8Ww..\....."cS...]......~..../...~.EI..y.l..].Qc..=......e......y.....m-=..+/je...1..Y..

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2510
Entropy (8bit):	7.900044646130137
Encrypted:	false
SSDEEP:	48:PT+mZSx/SAjr4GzOXS6QOLYXMMSBOIUjcxNqZs47bcdc:rnYdrrzn9xc36cxgb3
MD5:	DF388202EDEF04A124FEFE4FF611A4C0
SHA1:	D15D79CA8EDD7CA1E20E270E8DC263422C44FB5C
SHA-256:	6ED34D0923F2E69E82D90AC59962ABCD44BAAB49D1B1060D80E000160861A9E4
SHA-512:	62C10A0FF4D3AB9F2CF22FDF89BCC9F1CD994DE46DA19AB3DE3605383B6D3B930FDB0C13D1945D0128A67F3191FD9B3B39557F36F76C4E247016D95BED8431B7
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/5.png
Preview:	.PNG........IHDR...(...(......./:....pHYs...........~.....IDATx.W{PT..?....Fm.fL....L..d..4.i.5.....,.....!..!jb.G...].L5...L..'.@^c.M..aawA.......&....~.....2..8....w~....E.#.$.."J...`..&K.,i..).&..b.......>Y.`.....P.O..#ER5A.e..."x.t0......h...5..U....g1......[=.7z._..}o.....=. .D\..F.i...TU..}.U.....@..41....^...+...n]PQ:.r...-..}.....~_.....f..L..G.D(..)2V.`C...jt..TU..N\.......J6O+)I,.h...[..}...@...w...<.z.QX....F..{..B.+....4.Y.mOy...m.[...........w.[.....xR...@C...TqHjlb..Z..ri....N.l{.ru...D..3<...-.u...$...Y.F,..... ..V,..9n.vqF...[..ly.b.sI...<]....wo.SQ...TK.w.f...ih(.F......T..6^..d.G.e..6.X......~......@.-.....".c.!..+..FUk'/_..y...).m.*+.y.{..5.......?.K...BB...3Xo..)........E....uG.n^...W\|.n}.J.....\|.KU.D....,yL...T.D ......(.a.(X....?.....+...W.>..{d.......L^T.Q<..@...hL.M......#......./.~....O.GBMI...(Id2~e...n..d.Xy...@.....M.e!.j;...pq..sA.4U....J..[=L.v.....q....w.../..=...)..#xcHa(.0toI...H..lAA....0y~.nc..1.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://portal-nl.ru/lnternationalcardservices/lcs/files/0
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 15:41:48.452394009 CET	49675	443	192.168.2.4	173.222.162.32
Jan 11, 2025 15:41:53.256429911 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:41:53.256536961 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:41:53.256608009 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:41:53.256810904 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:41:53.256848097 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:41:53.918553114 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:41:53.918994904 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:41:53.919024944 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:41:53.920717955 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:41:53.920804024 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:41:53.921633959 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:41:53.921727896 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:41:53.966468096 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:41:53.966485977 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:41:54.013350010 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:41:54.996426105 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:54.996443033 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:54.996449947 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:54.996485949 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:54.996517897 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:54.996570110 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:54.996840954 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:54.996853113 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:54.996854067 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:54.996877909 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.711663008 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.712054014 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.712104082 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.713768005 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.713908911 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.717643976 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.717737913 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.717840910 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.718574047 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.718800068 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.718826056 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.720551968 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.720698118 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.721477032 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.721577883 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.759370089 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.768625021 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.768646955 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.768652916 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.768686056 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:55.810904980 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:55.812660933 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:56.134783983 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:56.134864092 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:56.135092020 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:56.136298895 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:56.136341095 CET	443	49740	185.244.151.84	192.168.2.4
Jan 11, 2025 15:41:56.136367083 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:56.136393070 CET	49740	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:41:56.150549889 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.150567055 CET	443	49742	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:56.150666952 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.151030064 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.151040077 CET	443	49742	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:56.626746893 CET	443	49742	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:56.630342960 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.630352020 CET	443	49742	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:56.631227016 CET	443	49742	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:56.631285906 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.632189989 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.632217884 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.632247925 CET	443	49742	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:56.632327080 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.632334948 CET	443	49742	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:56.632342100 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.632621050 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.632630110 CET	49742	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.632677078 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:56.633887053 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.634058952 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:56.634093046 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.279244900 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.279529095 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.279575109 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.280491114 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.280553102 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.281517982 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.281589985 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.281744003 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.281760931 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.329556942 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.586473942 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586575031 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586599112 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586620092 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586637974 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.586642981 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586674929 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586704969 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.586726904 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586731911 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.586746931 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586796045 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.586808920 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586838961 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.586884022 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.588018894 CET	49743	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.588044882 CET	443	49743	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.602392912 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:57.602426052 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:57.602507114 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:57.602672100 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:57.602679968 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:57.648161888 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.648255110 CET	443	49745	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.648348093 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.648881912 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.648919106 CET	443	49745	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.649591923 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.649630070 CET	443	49746	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:57.649682999 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.651027918 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:57.651038885 CET	443	49746	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.107165098 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.107435942 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.107449055 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.108329058 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.108392000 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.109313011 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.109357119 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.109527111 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.109534025 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.133968115 CET	443	49745	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.134454012 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.134520054 CET	443	49745	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.134773970 CET	443	49746	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.134921074 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.134932995 CET	443	49746	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.136019945 CET	443	49745	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.136091948 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.136377096 CET	443	49746	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.136379957 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.136379957 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.136434078 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.136447906 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.136477947 CET	443	49745	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.136538982 CET	49745	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.136708975 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.136740923 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.136790991 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137026072 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137038946 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137064934 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137109041 CET	443	49746	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.137152910 CET	49746	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137238026 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137320995 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.137383938 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137442112 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137454987 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.137593031 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.137626886 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.154642105 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.229594946 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.229679108 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.229840994 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.229907036 CET	49744	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.229919910 CET	443	49744	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.230439901 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.230479002 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.230540037 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.230770111 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.230782986 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.830420971 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.830677032 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.830703020 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.831096888 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.831372023 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.831444979 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.831471920 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.831536055 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.831702948 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.831746101 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.833260059 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.833333969 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.833626032 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.833728075 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.833734989 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.834604025 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.834769011 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.834791899 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.836287975 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.836344957 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.836608887 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.836682081 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.836694956 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.836714983 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.875330925 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.875332117 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.879023075 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.879030943 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.879051924 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.879095078 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.879116058 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.927139997 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.927143097 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.960483074 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.960557938 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.960609913 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.960726976 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.960746050 CET	443	49751	35.190.80.1	192.168.2.4
Jan 11, 2025 15:41:58.960755110 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.960791111 CET	49751	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:41:58.984956980 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.985032082 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.985097885 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.986900091 CET	49749	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.986924887 CET	443	49749	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.988082886 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.988104105 CET	443	49752	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:58.988270998 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.988503933 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:58.988523960 CET	443	49752	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.136192083 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.136351109 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.136485100 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.191134930 CET	49750	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.191174984 CET	443	49750	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.202469110 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.202550888 CET	443	49753	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.202617884 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.203728914 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.203763008 CET	443	49753	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.464709997 CET	443	49752	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.465024948 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.465039015 CET	443	49752	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.465939045 CET	443	49752	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.465987921 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.466375113 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.466388941 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.466424942 CET	443	49752	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.466444016 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.466476917 CET	49752	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.466922998 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.466948032 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.466996908 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.467423916 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.467432976 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.670613050 CET	443	49753	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.670890093 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.670929909 CET	443	49753	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.672430992 CET	443	49753	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.672508955 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.672890902 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.672924042 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.672951937 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.672983885 CET	443	49753	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.673042059 CET	49753	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.673264027 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.673305988 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.673366070 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.673856020 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.673882961 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.933331966 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.933598995 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.933614016 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.934504032 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.934567928 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.934856892 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.934909105 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.935012102 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:41:59.935019016 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:41:59.982670069 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.154330969 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.154652119 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.154717922 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.156210899 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.156285048 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.156626940 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.156719923 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.156796932 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.156819105 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.202285051 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.277772903 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.277816057 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.277846098 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.277873039 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.277884960 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.277901888 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.277954102 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.278012991 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.278012991 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.278042078 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.278388977 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.278449059 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.279143095 CET	49755	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.279172897 CET	443	49755	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.300954103 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.301035881 CET	443	49756	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:00.301121950 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.301872015 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.301907063 CET	443	49756	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:00.360490084 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.360529900 CET	443	49757	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.360584021 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.361789942 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.361802101 CET	443	49757	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.451164007 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.451258898 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.451297998 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.451636076 CET	49754	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.451649904 CET	443	49754	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.468472958 CET	49758	80	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.473414898 CET	80	49758	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.473486900 CET	49758	80	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.473742962 CET	49758	80	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.478600025 CET	80	49758	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.784259081 CET	443	49756	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:00.784599066 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.784660101 CET	443	49756	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:00.786102057 CET	443	49756	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:00.786174059 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.786487103 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.786487103 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.786528111 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.786581993 CET	443	49756	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:00.786643028 CET	49756	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.786796093 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.786822081 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:00.786874056 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.787098885 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:00.787115097 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:00.816004038 CET	443	49757	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.816181898 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.816199064 CET	443	49757	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.817713976 CET	443	49757	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.817770004 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.818005085 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.818015099 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.818042994 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.818085909 CET	443	49757	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.818136930 CET	49757	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.818244934 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.818265915 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.818309069 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.818471909 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.818481922 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.942739964 CET	80	49758	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.945219994 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.945303917 CET	443	49761	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.945388079 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.945657015 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:00.945697069 CET	443	49761	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:00.982548952 CET	49758	80	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.241436958 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.241967916 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.241986036 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.243598938 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.243720055 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.244105101 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.244105101 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.244115114 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.244220018 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.277703047 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.277982950 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.277996063 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.278445005 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.278829098 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.278829098 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.278841972 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.278904915 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.299274921 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.299283981 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.331196070 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.346283913 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.384535074 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.384588003 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.384614944 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.384639978 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.384644985 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.384692907 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.384716988 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.384721994 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.384865046 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.384964943 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.384989977 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.385198116 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.385739088 CET	49759	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:01.385756969 CET	443	49759	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:01.434763908 CET	443	49761	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.435101986 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.435163021 CET	443	49761	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.436640978 CET	443	49761	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.436739922 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437017918 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437017918 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437107086 CET	443	49761	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.437144995 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437252998 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437304020 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.437319994 CET	443	49761	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.437335968 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437395096 CET	49761	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437395096 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437566996 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.437597990 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.598303080 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.598414898 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.601511955 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.601511955 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.603768110 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.603856087 CET	443	49764	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.610635996 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.610873938 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.610913992 CET	443	49764	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.895699978 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.896027088 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.896089077 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.896785975 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.897253036 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.897253036 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.897294044 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.897367954 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.903268099 CET	49760	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:01.903285027 CET	443	49760	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:01.949212074 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.067406893 CET	443	49764	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.067714930 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.067751884 CET	443	49764	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.069185019 CET	443	49764	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.069252968 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.069892883 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.069892883 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.069932938 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.069986105 CET	443	49764	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.070039034 CET	49764	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.070261955 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.070298910 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.070364952 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.070574045 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.070600986 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.189332962 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.189552069 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.189719915 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.189805031 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.189805031 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.189846039 CET	443	49763	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.189902067 CET	49763	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.191703081 CET	49758	80	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.196664095 CET	80	49758	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.295145988 CET	80	49758	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.302966118 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.303010941 CET	443	49767	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.303093910 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.303342104 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.303354979 CET	443	49767	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.347434998 CET	49758	80	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.531261921 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.531620026 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.531651974 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.532780886 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.533067942 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.533179045 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.533191919 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.533252954 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.582395077 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.784763098 CET	443	49767	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.785062075 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.785092115 CET	443	49767	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.786721945 CET	443	49767	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.786797047 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.787117004 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.787117958 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.787156105 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.787208080 CET	443	49767	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.787269115 CET	49767	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.787547112 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.787630081 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.787699938 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.787872076 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.787914991 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.830104113 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.830292940 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.830354929 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.831753969 CET	49766	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.831779957 CET	443	49766	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.832704067 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.832727909 CET	443	49770	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:02.832879066 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.833035946 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:02.833046913 CET	443	49770	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.268634081 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.268990993 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.269052029 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.270287991 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.270636082 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.270755053 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.270770073 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.270858049 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.296370029 CET	443	49770	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.296677113 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.296700954 CET	443	49770	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.298331976 CET	443	49770	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.298418045 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.298870087 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.298935890 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.298948050 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.298978090 CET	443	49770	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.299027920 CET	49770	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.299338102 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.299405098 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.299487114 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.299720049 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.299757957 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.311444998 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.582999945 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583148956 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583220005 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.583246946 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583281040 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583343029 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.583442926 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583590984 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583626986 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583635092 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.583666086 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583717108 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.583731890 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583792925 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.583832979 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.583852053 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.603439093 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.603492975 CET	443	49773	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.603552103 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.603780031 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.603787899 CET	443	49773	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.634572983 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.634633064 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.673336983 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.673365116 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.673397064 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.673432112 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.673469067 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.673480034 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.673494101 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.673542976 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.673554897 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.685583115 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.685631037 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.685642958 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.685662031 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.685697079 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.685703993 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.685714960 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.685758114 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.686059952 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.686161041 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.686196089 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.686203957 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.686217070 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.686273098 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.686284065 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.686944962 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.686978102 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.687000990 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.687012911 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.687051058 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.687052011 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.687072992 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.687124968 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.687138081 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.687850952 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.687885046 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.687900066 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.687911987 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.687958002 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.761254072 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.761615038 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.761650085 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.762748957 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.763041973 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.763160944 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.763191938 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.763237000 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.763982058 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.764095068 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.764132977 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.764144897 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.764190912 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.764235020 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.764399052 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.764465094 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.764671087 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.764720917 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.776175022 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.776246071 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.776336908 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.776483059 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.777024984 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.777093887 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.777179003 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.777223110 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.777725935 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.777784109 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.777919054 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.777964115 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.778664112 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.778724909 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.778765917 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.778806925 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.778810024 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.778820038 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.778846025 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.778867960 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.779659033 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.779712915 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.803680897 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:03.803741932 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:03.803803921 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:42:03.804275036 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.854892969 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.854980946 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.854990005 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.855000973 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.855043888 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.855215073 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.855273008 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.855549097 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.855612040 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.855710983 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.855775118 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.855840921 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.855892897 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.866980076 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.867047071 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.867049932 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.867084026 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.867115021 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.867132902 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.867336988 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.867394924 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.867470980 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.867530107 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.867680073 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.867726088 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.868191957 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.868228912 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.868261099 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.868278980 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.868305922 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.868915081 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.868974924 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.868988037 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.869052887 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.869082928 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.869163036 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.869273901 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.869324923 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.869352102 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.869395018 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.869930029 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.869992971 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.870114088 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.870178938 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.870218992 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.870269060 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.870901108 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.870959997 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.871092081 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.871150017 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.871212006 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.871273994 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.871886969 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.871954918 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.879597902 CET	49737	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:42:03.879625082 CET	443	49737	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:03.880446911 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.880505085 CET	443	49775	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.880568027 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.880831957 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.880848885 CET	443	49775	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.890491962 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.890629053 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.890686035 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.890712023 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.890824080 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.890896082 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.890903950 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.890932083 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.890985012 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.891019106 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.891172886 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.891221046 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.891233921 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.895072937 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.895133018 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.895148993 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.895221949 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.895271063 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.895284891 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.915072918 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.915163994 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.936096907 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.945250034 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.945324898 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.945327997 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.945353031 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.945379972 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.945585012 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.945658922 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.945673943 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.945729971 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.946161032 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.946180105 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.946219921 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.946229935 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.946249008 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.946260929 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.946290016 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.946784019 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.946825981 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.946851969 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.946865082 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.946892023 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.946909904 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.946971893 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.947076082 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.947093964 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.947120905 CET	443	49769	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.947163105 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.947163105 CET	49769	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.954257011 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.954287052 CET	443	49777	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.954344988 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.954611063 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.954663038 CET	443	49778	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.954729080 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.954984903 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.954992056 CET	443	49779	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.955034971 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.955523014 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.955533981 CET	443	49777	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.955894947 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.955925941 CET	443	49778	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.956185102 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.956193924 CET	443	49779	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.977039099 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.977219105 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.977283001 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.977297068 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.977327108 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.977376938 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.977411985 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.977579117 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.977629900 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.977644920 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.978014946 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.978064060 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.978076935 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.978167057 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.978224993 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.978238106 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.978406906 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.978456020 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.978468895 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.978950977 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.979008913 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.979022026 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.979105949 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.979156971 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.979167938 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.979264975 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.979329109 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.979341984 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.979871035 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:03.979929924 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:03.979943991 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.019490957 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.019604921 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.019637108 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064372063 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064472914 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064496040 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.064511061 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064559937 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.064568043 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064666986 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064686060 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064714909 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.064723969 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064750910 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.064770937 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064822912 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.064832926 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064863920 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064867973 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.064893961 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.064943075 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.065006971 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.065068960 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.065160990 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.065212965 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.065623045 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.065677881 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.065825939 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.065891027 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.066607952 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.066682100 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.066725016 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.066776991 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.066956997 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.067008018 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.067483902 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.067554951 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.067709923 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.067759037 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.067794085 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.067841053 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.068525076 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.068850994 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.080152988 CET	443	49773	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.080353975 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.080372095 CET	443	49773	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.082012892 CET	443	49773	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.082070112 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.082423925 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.082465887 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.082505941 CET	443	49773	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.082526922 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.082551003 CET	49773	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.082854033 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.082885027 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.082948923 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.083126068 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.083133936 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.150659084 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.150743961 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.150780916 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.150831938 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.150873899 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.150934935 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.150968075 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.151021004 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.151052952 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.151106119 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.151307106 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.151365995 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.151439905 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.151494026 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.151557922 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.151608944 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.151844978 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.151904106 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.152000904 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.152060986 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.152339935 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.152400970 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.152430058 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.152513981 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.152554035 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.152575016 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.152601004 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.152791977 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.152842999 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.152854919 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.152906895 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.152964115 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.153023005 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.153274059 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.153332949 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.153358936 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.153470039 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.153822899 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.153887987 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.153940916 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.153991938 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.154140949 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.154189110 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.154198885 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.154210091 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.154239893 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.154263020 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.154309034 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.154320955 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.154367924 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.154768944 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.154823065 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.154831886 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.154844046 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.154880047 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.154880047 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.155066013 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.155117035 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.155340910 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.155388117 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.237564087 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.237593889 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.237631083 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.237637997 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.237654924 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.237673044 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.237718105 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.237860918 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.237907887 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.237921953 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.237936020 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.237966061 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.237986088 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.238517046 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.238565922 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.238594055 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.238606930 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.238692999 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.238714933 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.239006996 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.239027023 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.239068031 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.239080906 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.239106894 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.239125967 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.239851952 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.239918947 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.240295887 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.240365982 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.240384102 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.240437984 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.240456104 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.240494013 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.240513086 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.240535975 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.241153955 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.241178989 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.241214037 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.241226912 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.241256952 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.241677046 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.241697073 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.241729021 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.241744041 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.241770029 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.281599045 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.324394941 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.324455023 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.324491978 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.324506998 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.324537039 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.324558020 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.324572086 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.324892998 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.324934959 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.324985981 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.325005054 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.325027943 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.325440884 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.325491905 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.325503111 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.325526953 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.325556993 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.326292038 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.326332092 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.326366901 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.326380968 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.326407909 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.326553106 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.326608896 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.327474117 CET	49772	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.327501059 CET	443	49772	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.328234911 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.328278065 CET	443	49781	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.328352928 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.330466986 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.330496073 CET	443	49781	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.350092888 CET	443	49775	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.350317955 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.350346088 CET	443	49775	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.353919983 CET	443	49775	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.353984118 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.354365110 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.354383945 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.354418039 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.354465008 CET	443	49775	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.354521036 CET	49775	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.354650974 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.354682922 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.354739904 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.354935884 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.354952097 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.431474924 CET	443	49779	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.431670904 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.431680918 CET	443	49779	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.433245897 CET	443	49779	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.433296919 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.433649063 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.433657885 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.433692932 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.433738947 CET	443	49779	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.433783054 CET	49779	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.433912992 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.433970928 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.434036970 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.434055090 CET	443	49778	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.434238911 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.434271097 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.434376955 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.434436083 CET	443	49778	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.436011076 CET	443	49778	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.436073065 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.436563015 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.436650038 CET	443	49778	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.436786890 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.436801910 CET	443	49778	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.436849117 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.436849117 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.436849117 CET	49778	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.437247038 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.437330008 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.437406063 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.437563896 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.437608004 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.442926884 CET	443	49777	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.443159103 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.443166971 CET	443	49777	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.446233034 CET	443	49777	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.446291924 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.446576118 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.446585894 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.446652889 CET	443	49777	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.446659088 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.446703911 CET	49777	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.446897030 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.446918011 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.447015047 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.447242975 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.447254896 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.564373016 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.564559937 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.564574003 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.565422058 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.565474987 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.565860033 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.565917015 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.565984011 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.565993071 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.610080957 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.785005093 CET	443	49781	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.785361052 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.785388947 CET	443	49781	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.786917925 CET	443	49781	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.786988020 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.787724972 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.787760973 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.787794113 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.787832022 CET	443	49781	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.787889957 CET	49781	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.788070917 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.788095951 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.788149118 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.788407087 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.788417101 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.833661079 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.833940029 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.833954096 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.835402012 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.835472107 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.835688114 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.835769892 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.835792065 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.876513004 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.876523972 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.893518925 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.893651009 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.893801928 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.897361994 CET	49780	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.897375107 CET	443	49780	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.897682905 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.897747040 CET	443	49789	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.897819996 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.898539066 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.898572922 CET	443	49789	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.899243116 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.899590969 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.899650097 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.903228998 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.903318882 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.903644085 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.903765917 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.903778076 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.903867006 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.907603979 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.907763958 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.907773018 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.911505938 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.911588907 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.911859035 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.911962032 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.911966085 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.912024975 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.924027920 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.924227953 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.924248934 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.924619913 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.925705910 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.925781012 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.926028013 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.926115036 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.926245928 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.926264048 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.953887939 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.953905106 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.953970909 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.953979969 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.974364042 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.974396944 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:04.974490881 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.974689007 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:04.974746943 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.001441956 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.006400108 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.020910978 CET	49782	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.020939112 CET	443	49782	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.021331072 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.021382093 CET	443	49790	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.021460056 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.022085905 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.022114992 CET	443	49790	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.033915043 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.034043074 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.034107924 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.034116030 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.034226894 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.037774086 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.038023949 CET	49785	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.038033962 CET	443	49785	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.038331985 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.038374901 CET	443	49791	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.039541960 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.040134907 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.040162086 CET	443	49791	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.043749094 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.043767929 CET	443	49792	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.043858051 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.044078112 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.044101954 CET	443	49792	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.047672987 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.047702074 CET	443	49793	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.047847986 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.048084021 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.048108101 CET	443	49793	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.068878889 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.068985939 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.069067955 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.069134951 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.069197893 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.069331884 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.069348097 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.069449902 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.079858065 CET	49783	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.079885960 CET	443	49783	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.080332041 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.080388069 CET	443	49794	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.080476999 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.082573891 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.082608938 CET	443	49794	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.095062971 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.095093966 CET	443	49795	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.095246077 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.095480919 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.095495939 CET	443	49795	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.207787037 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.208156109 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.208350897 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.209017992 CET	49784	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.209055901 CET	443	49784	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.209337950 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.209387064 CET	443	49796	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.209459066 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.210875034 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.210903883 CET	443	49796	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.280930042 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.282217979 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.282228947 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.282721043 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.286336899 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.286359072 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.286370993 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.286439896 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.286439896 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.286447048 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.286519051 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.326874018 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.371267080 CET	443	49789	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.371515989 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.371535063 CET	443	49789	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.372968912 CET	443	49789	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.373035908 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.373959064 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.373959064 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.374008894 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.374047995 CET	443	49789	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.374114037 CET	49789	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.374264956 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.374281883 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.374336958 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.374522924 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.374537945 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.486325979 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.486479044 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.486541033 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.487204075 CET	49787	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.487212896 CET	443	49787	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.487494946 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.487536907 CET	443	49798	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.487607002 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.489036083 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.489063025 CET	443	49798	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.490797043 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.490879059 CET	443	49799	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.490976095 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.491174936 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.491211891 CET	443	49799	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.511773109 CET	443	49790	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.514147997 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.514166117 CET	443	49790	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.515626907 CET	443	49790	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.515710115 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.515979052 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.516006947 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.516026020 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.516057014 CET	443	49790	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.516113043 CET	49790	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.516247988 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.516319036 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.516385078 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.516577959 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.516608000 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.519473076 CET	443	49791	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.521178961 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.521197081 CET	443	49791	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.522820950 CET	443	49791	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.522887945 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.523185015 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.523215055 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.523231983 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.523273945 CET	443	49791	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.523411036 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.523437023 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.523441076 CET	49791	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.523488045 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.523634911 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.523647070 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.542876959 CET	443	49792	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.543544054 CET	443	49794	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.543829918 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.543898106 CET	443	49794	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.544013977 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.544027090 CET	443	49792	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.545526981 CET	443	49792	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.545576096 CET	443	49794	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.545633078 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.545684099 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.546931982 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.546967983 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.546987057 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.547034025 CET	443	49794	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.547091961 CET	49794	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.547255993 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.547287941 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.547517061 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.547547102 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.547588110 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.547610044 CET	443	49792	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.547610998 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.547662020 CET	49792	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.547796965 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.547846079 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.547897100 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.548012972 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.548038960 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.548134089 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.548145056 CET	443	49793	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.548151016 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.548310995 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.548327923 CET	443	49793	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.549619913 CET	443	49793	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.549674034 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.549964905 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.549993992 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.550014973 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.550035000 CET	443	49793	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.550184011 CET	443	49793	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.550194025 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.550215960 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.550228119 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.550251961 CET	49793	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.550277948 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.550503969 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.550512075 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.560915947 CET	443	49795	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.561125994 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.561155081 CET	443	49795	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.564487934 CET	443	49795	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.564555883 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.564842939 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.564861059 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.564879894 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.564937115 CET	443	49795	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.564980030 CET	49795	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.565076113 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.565097094 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.565165043 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.565294981 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:05.565323114 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.669294119 CET	443	49796	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.671770096 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.671794891 CET	443	49796	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.675328016 CET	443	49796	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.675411940 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.678152084 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.678152084 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.678196907 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.678248882 CET	443	49796	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.678313971 CET	49796	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.680589914 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.680624008 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.682089090 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.682724953 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.682739973 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.884711027 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.929112911 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.946734905 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.946767092 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.947134972 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.972369909 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.972451925 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.972541094 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.972615957 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.972654104 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.972721100 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.982693911 CET	443	49798	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.997572899 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.997596025 CET	443	49798	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.998577118 CET	443	49798	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.998652935 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.999439001 CET	443	49799	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:05.999484062 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.999552011 CET	443	49798	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.999701023 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.999716043 CET	443	49798	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:05.999816895 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:05.999845028 CET	49798	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.000288963 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.000374079 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.000444889 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.000530958 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.000593901 CET	443	49799	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.000623941 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.000664949 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.004234076 CET	443	49799	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.004323006 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.004709959 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.004750967 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.004750967 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.004851103 CET	443	49799	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.004913092 CET	49799	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.004966021 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.004995108 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.005049944 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.005225897 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.005237103 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.011302948 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.011831045 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.011841059 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.012459993 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.012634039 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.012676954 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.013509035 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.013575077 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.013940096 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.014059067 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.014194012 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.014200926 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.014246941 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.014262915 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.014292002 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.014441967 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.014652967 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.014663935 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.015305042 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.015330076 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.015376091 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.015686989 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.015782118 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.015805006 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.016103983 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.016166925 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.017086983 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.017165899 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.017466068 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.017472982 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.024615049 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.024988890 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.025001049 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.025969982 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.026024103 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.026340961 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.026386976 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.026451111 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.026457071 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.039035082 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.039289951 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.039308071 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.041675091 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.041892052 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.041907072 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.043045044 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.043131113 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.043483973 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.043632984 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.043643951 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.043716908 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.045494080 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.045574903 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.045821905 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.045903921 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.045913935 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.045994997 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.059372902 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.062933922 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.062941074 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.062956095 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.078134060 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.093148947 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.093148947 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.093167067 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.093189955 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.109553099 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.129190922 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.129580975 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.129631042 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.130312920 CET	49797	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.130331039 CET	443	49797	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.130691051 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.130743980 CET	443	49811	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.130914927 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.132045031 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.132075071 CET	443	49811	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.135644913 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.135667086 CET	443	49812	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.135734081 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.135983944 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.136008024 CET	443	49812	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.140351057 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.140480042 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.140480995 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.140480995 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.140525103 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.140542030 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.140775919 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.140830994 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.141836882 CET	49803	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.141849041 CET	443	49803	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.142023087 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.142154932 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.142195940 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.143878937 CET	49801	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.143896103 CET	443	49801	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.144160986 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.144177914 CET	443	49813	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.144227028 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.145245075 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.145253897 CET	443	49813	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.149893999 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.149914980 CET	443	49814	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.149986982 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.150321007 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.150343895 CET	443	49814	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.156924009 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.156961918 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.156999111 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.157005072 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.157052040 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.157084942 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.158948898 CET	49804	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.158957958 CET	443	49804	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.167140961 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.167268038 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.167360067 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.167376995 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.167504072 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.167557955 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.170346022 CET	49800	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.170365095 CET	443	49800	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.177728891 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.177779913 CET	443	49816	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.177841902 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.178107977 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.178134918 CET	443	49816	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.178209066 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.178332090 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.178385019 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.178400993 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.178545952 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.178592920 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.179673910 CET	49802	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.179687023 CET	443	49802	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.182079077 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.182280064 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.182290077 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.184119940 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.184145927 CET	443	49817	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.184168100 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.184227943 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.184262991 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.184722900 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.184741020 CET	443	49817	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.185206890 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.185345888 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.186611891 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.186619043 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.191334963 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.191457033 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.191514015 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.191534996 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.191601992 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.191648960 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.191662073 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.191730022 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.191783905 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.193419933 CET	49805	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.193434000 CET	443	49805	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.233635902 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.321252108 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.321312904 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.321353912 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.321356058 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.321372986 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.321418047 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.321425915 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.321511030 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.321552038 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.347832918 CET	49806	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.347846031 CET	443	49806	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.464574099 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.484920025 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.514029980 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.529079914 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.562819004 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.562840939 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.562846899 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.562860966 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.563251972 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.564424992 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.564521074 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.564644098 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.566531897 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.566606045 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.567190886 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.567379951 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.567387104 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.567404032 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.586086035 CET	443	49811	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.587280035 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.587352991 CET	443	49811	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.588259935 CET	443	49811	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.588335037 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.588872910 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.588907003 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.588946104 CET	443	49811	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.588973045 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.589000940 CET	49811	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.590323925 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.590353012 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.590409040 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.590573072 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.590579033 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.606569052 CET	443	49812	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.606910944 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.606934071 CET	443	49812	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.607348919 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.610511065 CET	443	49812	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.610598087 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.610965014 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.610996962 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.611040115 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.611154079 CET	443	49812	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.611227036 CET	49812	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.611280918 CET	49819	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.611361980 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.611426115 CET	49819	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.611602068 CET	49819	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.611634016 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.616502047 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.616589069 CET	443	49820	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.616688967 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.616883039 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.616924047 CET	443	49820	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.619436979 CET	443	49813	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.619602919 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:42:06.619642973 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.619659901 CET	443	49813	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.619765997 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:42:06.619824886 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:42:06.621140957 CET	443	49813	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.621202946 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.621501923 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.621514082 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.621552944 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.621583939 CET	443	49813	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.621630907 CET	49813	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.621776104 CET	49821	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.621815920 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.621882915 CET	49821	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.621997118 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.622004032 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.622096062 CET	49821	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.622121096 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.631779909 CET	443	49814	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.632069111 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.632083893 CET	443	49814	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.635387897 CET	443	49814	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.635469913 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.635754108 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.635754108 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.635828018 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.635842085 CET	443	49814	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.635911942 CET	49814	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.636171103 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.636255026 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.636336088 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.636497021 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.636533976 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.656359911 CET	443	49816	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.657550097 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.657566071 CET	443	49816	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.661148071 CET	443	49816	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.661223888 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.661557913 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.661557913 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.661634922 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.661746025 CET	443	49816	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.661806107 CET	49816	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.661832094 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.661848068 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.661894083 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.662051916 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.662061930 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.662086010 CET	443	49817	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.662247896 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.662270069 CET	443	49817	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.665417910 CET	443	49817	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.665483952 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.665765047 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.665800095 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.665821075 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.665870905 CET	443	49817	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.665920973 CET	49817	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.666052103 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.666068077 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.666115046 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.666268110 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.666277885 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.672450066 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.691083908 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.691227913 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.691286087 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.692039013 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.692039013 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.692051888 CET	443	49808	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:06.692100048 CET	49808	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:06.838906050 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.839036942 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.839107990 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.840466976 CET	49807	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:06.840507030 CET	443	49807	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:06.873389006 CET	49741	443	192.168.2.4	185.244.151.84
Jan 11, 2025 15:42:06.873420954 CET	443	49741	185.244.151.84	192.168.2.4
Jan 11, 2025 15:42:07.051111937 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.051438093 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.051450968 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.051902056 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.052195072 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.052273989 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.052305937 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.067869902 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.068173885 CET	49819	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.068214893 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.068579912 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.069161892 CET	49819	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.069236040 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.069483042 CET	49819	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.071983099 CET	443	49820	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.072190046 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.072221994 CET	443	49820	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.073232889 CET	443	49820	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.073298931 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.073905945 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.073923111 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.073964119 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.073977947 CET	443	49820	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.074032068 CET	49820	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.074399948 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.074481964 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.074565887 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.074846029 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.074887037 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.083447933 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.089262009 CET	49821	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.089283943 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.089934111 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.090281010 CET	49821	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.090380907 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.090764999 CET	49821	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.090806007 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.093923092 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.093929052 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.094790936 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.095169067 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.095233917 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.095542908 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.096784115 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.096873999 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.096911907 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.115324020 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.139364004 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.140717030 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.141050100 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.141066074 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.143001080 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.143390894 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.143399000 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.143971920 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.144227028 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.144295931 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.145328045 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.145409107 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.145692110 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.145699024 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.146316051 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.146383047 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.147330999 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.147403002 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.147866011 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.147872925 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.188421011 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.188514948 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.232959986 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.233022928 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.233161926 CET	49819	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.234950066 CET	49819	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.234981060 CET	443	49819	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.262353897 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.262398958 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.262557030 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.264475107 CET	49822	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.264518023 CET	443	49822	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.278367996 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.278487921 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.278621912 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.278642893 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.278749943 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.278804064 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.281158924 CET	49824	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.281172991 CET	443	49824	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.289858103 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.289990902 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.290045023 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.290055990 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.290200949 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.290247917 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.291244984 CET	49823	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.291254044 CET	443	49823	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.375999928 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.376243114 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.376313925 CET	49821	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.377760887 CET	49821	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.377787113 CET	443	49821	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.389470100 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.389858961 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.389919043 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.390419006 CET	49818	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.390425920 CET	443	49818	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.397479057 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.397505999 CET	443	49826	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.397629023 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.398216963 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.398231030 CET	443	49826	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.582253933 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.582663059 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.582722902 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.583089113 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.583659887 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.583738089 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.583993912 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.627367973 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.766648054 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.766803980 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.766830921 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.766844988 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.766855001 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.766874075 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.766894102 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.767493963 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.767537117 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.770936966 CET	49825	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:07.770950079 CET	443	49825	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:07.868063927 CET	443	49826	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.868464947 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.868478060 CET	443	49826	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.872009039 CET	443	49826	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.872075081 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.872782946 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.872939110 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.872956991 CET	443	49826	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.872992992 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.873080015 CET	49826	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.874248981 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.874311924 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:07.874392986 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.875157118 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:07.875188112 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.377254963 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.419811010 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:08.488569975 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:08.488599062 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.489809036 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.490292072 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:08.490454912 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:08.490473032 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.490586996 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.544823885 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:08.601488113 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.601624966 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.601675987 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:08.601696968 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.601839066 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.601922989 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:08.602813005 CET	49827	443	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:08.602844000 CET	443	49827	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:08.607558966 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:08.607604980 CET	443	49828	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:08.607728958 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:08.607973099 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:08.608000040 CET	443	49828	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.078950882 CET	443	49828	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.079278946 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.079325914 CET	443	49828	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.083138943 CET	443	49828	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.083211899 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.083769083 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.083769083 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.083834887 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.083971024 CET	443	49828	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.084049940 CET	49828	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.084083080 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.084112883 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.084172964 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.084376097 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.084388018 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.554079056 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.554306984 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.554321051 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.554780960 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.555103064 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.555187941 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.555236101 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.595350981 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.705909014 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.705943108 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.706013918 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.706032038 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.706048965 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:09.706093073 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.707218885 CET	49829	443	192.168.2.4	172.67.130.200
Jan 11, 2025 15:42:09.707231045 CET	443	49829	172.67.130.200	192.168.2.4
Jan 11, 2025 15:42:47.295828104 CET	49758	80	192.168.2.4	104.21.9.2
Jan 11, 2025 15:42:47.300884008 CET	80	49758	104.21.9.2	192.168.2.4
Jan 11, 2025 15:42:53.312437057 CET	49884	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:42:53.312483072 CET	443	49884	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:53.312572002 CET	49884	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:42:53.312818050 CET	49884	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:42:53.312833071 CET	443	49884	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:53.958647966 CET	443	49884	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:53.959389925 CET	49884	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:42:53.959414005 CET	443	49884	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:53.960560083 CET	443	49884	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:53.960855007 CET	49884	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:42:53.961028099 CET	443	49884	216.58.206.68	192.168.2.4
Jan 11, 2025 15:42:54.013781071 CET	49884	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:42:55.873882055 CET	49723	80	192.168.2.4	199.232.210.172
Jan 11, 2025 15:42:55.873919964 CET	49724	80	192.168.2.4	199.232.210.172
Jan 11, 2025 15:42:55.879148006 CET	80	49723	199.232.210.172	192.168.2.4
Jan 11, 2025 15:42:55.879220963 CET	49723	80	192.168.2.4	199.232.210.172
Jan 11, 2025 15:42:55.879533052 CET	80	49724	199.232.210.172	192.168.2.4
Jan 11, 2025 15:42:55.879592896 CET	49724	80	192.168.2.4	199.232.210.172
Jan 11, 2025 15:42:57.609432936 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:57.609467983 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:57.609525919 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:57.609776974 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:57.609798908 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:57.617372990 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:57.617387056 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:57.617439985 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:57.617614031 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:57.617624044 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.080425024 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.080710888 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.080745935 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.081088066 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.081387043 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.081460953 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.081504107 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.097028017 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.097326994 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.097337008 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.100929022 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.100995064 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.101324081 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.101416111 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.101421118 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.101496935 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.123352051 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.123411894 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.154768944 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.154776096 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.201637983 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.213972092 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.214044094 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.214324951 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.214358091 CET	443	49912	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.214382887 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.214868069 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.214895010 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.214895964 CET	49912	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.214951992 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.215116024 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.215123892 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.230288982 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.230463028 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.230679035 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.230688095 CET	443	49913	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.230830908 CET	49913	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.231337070 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.231367111 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.231425047 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.231600046 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.231616020 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.677762032 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.678236961 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.678251028 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.678536892 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.678906918 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.678925037 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.678960085 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.678972006 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.715296030 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.715631962 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.715656042 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.716778040 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.717066050 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.717250109 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.717251062 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.717283964 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.717358112 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.732779026 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.764178991 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.812392950 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.812464952 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.812788010 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.812799931 CET	443	49918	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.812810898 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.812855959 CET	49918	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.850136995 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.850306034 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.850328922 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.850363016 CET	443	49919	35.190.80.1	192.168.2.4
Jan 11, 2025 15:42:58.850395918 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:42:58.850431919 CET	49919	443	192.168.2.4	35.190.80.1
Jan 11, 2025 15:43:03.858577967 CET	443	49884	216.58.206.68	192.168.2.4
Jan 11, 2025 15:43:03.858711004 CET	443	49884	216.58.206.68	192.168.2.4
Jan 11, 2025 15:43:03.858797073 CET	49884	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:43:04.985435009 CET	49884	443	192.168.2.4	216.58.206.68
Jan 11, 2025 15:43:04.985450983 CET	443	49884	216.58.206.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 15:41:48.841795921 CET	53	61157	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:48.842772961 CET	53	52192	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:49.824987888 CET	53	60352	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:53.248622894 CET	62495	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:41:53.248934031 CET	53064	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:41:53.255373001 CET	53	62495	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:53.255677938 CET	53	53064	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:54.745012045 CET	53032	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:41:54.745151043 CET	61623	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:41:54.990910053 CET	53	53032	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:54.995707989 CET	53	61623	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:56.137171030 CET	64035	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:41:56.137295961 CET	64391	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:41:56.146871090 CET	53	64035	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:56.150209904 CET	53	64391	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:57.593530893 CET	61040	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:41:57.593671083 CET	64378	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:41:57.600665092 CET	53	61040	1.1.1.1	192.168.2.4
Jan 11, 2025 15:41:57.600709915 CET	53	64378	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:00.286951065 CET	59192	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:42:00.287281990 CET	49331	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:42:00.298979044 CET	53	49331	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:00.299130917 CET	53	59192	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:00.454654932 CET	59030	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:42:00.454889059 CET	57309	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:42:00.462764978 CET	53	59030	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:00.549990892 CET	53	57309	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:03.887470961 CET	53	57760	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:06.882956982 CET	53	60314	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:07.456928968 CET	138	138	192.168.2.4	192.168.2.255
Jan 11, 2025 15:42:25.616647959 CET	53	61096	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:48.508364916 CET	53	60206	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:48.522258043 CET	53	57804	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:57.608850956 CET	58102	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:42:57.609091043 CET	62955	53	192.168.2.4	1.1.1.1
Jan 11, 2025 15:42:57.616076946 CET	53	62955	1.1.1.1	192.168.2.4
Jan 11, 2025 15:42:57.617038012 CET	53	58102	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 11, 2025 15:42:00.550060034 CET	192.168.2.4	1.1.1.1	c276	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 11, 2025 15:41:53.248622894 CET	192.168.2.4	1.1.1.1	0x3930	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:41:53.248934031 CET	192.168.2.4	1.1.1.1	0xd07d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 11, 2025 15:41:54.745012045 CET	192.168.2.4	1.1.1.1	0x185f	Standard query (0)	app.heractivatie-portal.net	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:41:54.745151043 CET	192.168.2.4	1.1.1.1	0x7905	Standard query (0)	app.heractivatie-portal.net	65	IN (0x0001)	false
Jan 11, 2025 15:41:56.137171030 CET	192.168.2.4	1.1.1.1	0x589f	Standard query (0)	portal-nl.ru	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:41:56.137295961 CET	192.168.2.4	1.1.1.1	0xa815	Standard query (0)	portal-nl.ru	65	IN (0x0001)	false
Jan 11, 2025 15:41:57.593530893 CET	192.168.2.4	1.1.1.1	0xeead	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:41:57.593671083 CET	192.168.2.4	1.1.1.1	0x17f3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 15:42:00.286951065 CET	192.168.2.4	1.1.1.1	0x9443	Standard query (0)	portal-nl.ru	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:42:00.287281990 CET	192.168.2.4	1.1.1.1	0xc4ce	Standard query (0)	portal-nl.ru	65	IN (0x0001)	false
Jan 11, 2025 15:42:00.454654932 CET	192.168.2.4	1.1.1.1	0x9dad	Standard query (0)	portal-nl.ru	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:42:00.454889059 CET	192.168.2.4	1.1.1.1	0x9b7a	Standard query (0)	portal-nl.ru	65	IN (0x0001)	false
Jan 11, 2025 15:42:57.608850956 CET	192.168.2.4	1.1.1.1	0x3219	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:42:57.609091043 CET	192.168.2.4	1.1.1.1	0x226e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 11, 2025 15:41:53.255373001 CET	1.1.1.1	192.168.2.4	0x3930	No error (0)	www.google.com	216.58.206.68	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:41:53.255677938 CET	1.1.1.1	192.168.2.4	0xd07d	No error (0)	www.google.com		65	IN (0x0001)	false
Jan 11, 2025 15:41:54.990910053 CET	1.1.1.1	192.168.2.4	0x185f	No error (0)	app.heractivatie-portal.net	185.244.151.84	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:41:56.146871090 CET	1.1.1.1	192.168.2.4	0x589f	No error (0)	portal-nl.ru	104.21.9.2	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:41:56.146871090 CET	1.1.1.1	192.168.2.4	0x589f	No error (0)	portal-nl.ru	172.67.130.200	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:41:56.150209904 CET	1.1.1.1	192.168.2.4	0xa815	No error (0)	portal-nl.ru		65	IN (0x0001)	false
Jan 11, 2025 15:41:57.600665092 CET	1.1.1.1	192.168.2.4	0xeead	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:42:00.298979044 CET	1.1.1.1	192.168.2.4	0xc4ce	No error (0)	portal-nl.ru		65	IN (0x0001)	false
Jan 11, 2025 15:42:00.299130917 CET	1.1.1.1	192.168.2.4	0x9443	No error (0)	portal-nl.ru	172.67.130.200	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:42:00.299130917 CET	1.1.1.1	192.168.2.4	0x9443	No error (0)	portal-nl.ru	104.21.9.2	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:42:00.462764978 CET	1.1.1.1	192.168.2.4	0x9dad	No error (0)	portal-nl.ru	104.21.9.2	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:42:00.462764978 CET	1.1.1.1	192.168.2.4	0x9dad	No error (0)	portal-nl.ru	172.67.130.200	A (IP address)	IN (0x0001)	false
Jan 11, 2025 15:42:00.549990892 CET	1.1.1.1	192.168.2.4	0x9b7a	No error (0)	portal-nl.ru		65	IN (0x0001)	false
Jan 11, 2025 15:42:57.617038012 CET	1.1.1.1	192.168.2.4	0x3219	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

app.heractivatie-portal.net

portal-nl.ru

a.nel.cloudflare.com

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49758	104.21.9.2	80	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 11, 2025 15:42:00.473742962 CET	897	OUT	GET /web/?t=1736606516 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc
Jan 11, 2025 15:42:00.942739964 CET	1057	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 11 Jan 2025 14:42:00 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sat, 11 Jan 2025 15:42:00 GMT Location: https://portal-nl.ru/web/?t=1736606516 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3o7PjNIvvnefJlhWY2iWZkWUeeRVo7HSzZ3OP%2B0uPaIH7XkRbZRp9p0jNFLc7nqCtzA51CEvK%2F1FCBG9%2BMhk%2F8lal7PqGxrY69PrrfehSUpp7WIz7kRRf7cM%2FuVTyUE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9005abc38d084262-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&min_rtt=1586&rtt_var=793&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=897&delivery_rate=0&cwnd=188&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Jan 11, 2025 15:42:02.191703081 CET	970	OUT	GET /lnternationalcardservices/?ID=3a1c16b099933303 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78
Jan 11, 2025 15:42:02.295145988 CET	1093	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 11 Jan 2025 14:42:02 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sat, 11 Jan 2025 15:42:02 GMT Location: https://portal-nl.ru/lnternationalcardservices/?ID=3a1c16b099933303 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s2Xb%2BPkL8kPvopIT6btIJPBoE1llo9oZEOgjGb%2FLBMHn%2BxrJYUJzcRPqNiZydT8BoPPdc1pthiqE9Wxzgw1cwkf7g8p%2FjYxAKTP0XWZV851A76Nd90hkwUKtXCydRNY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9005abcbfe794262-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3248&min_rtt=1586&rtt_var=3920&sent=2&recv=5&lost=0&retrans=0&sent_bytes=1057&recv_bytes=1867&delivery_rate=98058&cwnd=189&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Jan 11, 2025 15:42:47.295828104 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	185.244.151.84	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:41:55 UTC	670	OUT	GET / HTTP/1.1 Host: app.heractivatie-portal.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 14:41:56 UTC	576	IN	HTTP/1.1 302 Found Connection: close set-cookie: PHPSESSID=fed47c072a8fb7c6eaeb202379bd0804; path=/; secure cache-control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT location: https://portal-nl.ru/web?t=1736606516 content-type: text/html; charset=UTF-8 content-length: 0 date: Sat, 11 Jan 2025 14:41:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:41:57 UTC	671	OUT	GET /web?t=1736606516 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 14:41:57 UTC	1321	IN	HTTP/1.1 503 Service Temporarily Unavailable Date: Sat, 11 Jan 2025 14:41:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; path=/; expires=Sun, 12-Jan-25 14:41:45 GMT; Max-Age=86400; Set-Cookie: DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; path=/; expires=Sun, 12-Jan-25 14:41:45 GMT; Max-Age=86400; Set-Cookie: ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; path=/; expires=Sun, 12-Jan-25 14:41:45 GMT; Max-Age=86400; Set-Cookie: tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; path=/; expires=Sun, 12-Jan-25 14:41:45 GMT; Max-Age=86400; Set-Cookie: mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; path=/; expires=Sun, 12-Jan-25 14:41:45 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BTisUJb3amYRXNdT7SeeRWLgYSFeLAuPucrFfW%2F%2B9M4dlrPxDTTZVesMLB3i2g4aiJRmu2OF%2B6ejXhg33suQNy9gi4zRnsN7ZrqEFx2AGJ3hEPS3FBPHCgRG0So8jWU%3D"}],"group":"cf-nel","max_age":604800}
2025-01-11 14:41:57 UTC	363	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 30 35 61 62 61 64 38 39 34 34 31 61 30 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 30 34 26 6d 69 6e 5f 72 74 74 3d 31 37 39 37 26 72 74 74 5f 76 61 72 3d 36 38 38 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9005abad89441a0f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1804&min_rtt=1797&rtt_var=688&sent=4&recv=6&lost=0&retrans=0&sent_b
2025-01-11 14:41:57 UTC	1369	IN	Data Raw: 31 64 32 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: 1d21<!DOCTYPE html><html><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /><meta name="viewport" content="width=device-width, initial-
2025-01-11 14:41:57 UTC	1369	IN	Data Raw: 45 6e 49 43 73 67 4a 7a 73 67 5a 58 68 77 61 58 4a 6c 63 7a 30 6e 49 43 73 67 4a 31 4e 31 62 69 77 67 4d 54 49 74 53 6d 46 75 4c 54 49 31 49 44 45 30 4f 6a 51 78 4f 6a 55 31 49 45 64 4e 56 43 63 67 4b 79 41 6e 4f 79 42 77 59 58 52 6f 50 53 38 6e 4f 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 76 4c 32 70 68 64 6d 46 7a 59 33 4a 70 63 48 51 67 63 48 56 36 65 6d 78 6c 49 47 5a 76 63 69 42 69 63 6d 39 33 63 32 56 79 49 48 52 76 49 47 5a 70 5a 33 56 79 5a 53 42 76 64 58 51 67 64 47 38 67 5a 32 56 30 49 47 46 75 63 33 64 6c 63 67 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 70 5a 69 67 68 64 32 6c 75 5a 47 39 33 4c 6c 39 77 61 47 46 75 64 47 39 74 49 Data Ascii: EnICsgJzsgZXhwaXJlcz0nICsgJ1N1biwgMTItSmFuLTI1IDE0OjQxOjU1IEdNVCcgKyAnOyBwYXRoPS8nOwogICAgICAgICAgICAgICAgICAgICAgICAvL2phdmFzY3JpcHQgcHV6emxlIGZvciBicm93c2VyIHRvIGZpZ3VyZSBvdXQgdG8gZ2V0IGFuc3dlcgogICAgICAgICAgICAgICAgICAgICAgICBpZighd2luZG93Ll9waGFudG9tI
2025-01-11 14:41:57 UTC	1369	IN	Data Raw: 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 4c 79 70 39 4b 69 38 4b 4c 79 70 39 4b 69 38 4b 66 51 6f 76 4b 6e 30 71 4c 77 70 39 43 6e 30 4b 66 51 70 39 43 6e 30 4b 66 51 70 39 43 6e 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 4c 79 39 6c 62 6d 51 67 61 6d 46 32 59 58 4e 6a 63 6d 6c 77 64 43 42 77 64 58 70 36 62 47 55 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 64 6d 46 79 49 48 68 6f 64 48 52 77 49 44 30 67 62 6d 56 33 49 46 68 4e 54 45 68 30 64 48 42 53 5a 58 46 31 5a 58 4e 30 4b 43 6b 37 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 68 6f 64 48 52 77 4c 6d 39 75 63 6d 56 68 5a 48 Data Ascii: gICAgICAgICAgICAgLyp9Ki8KLyp9Ki8KfQovKn0qLwp9Cn0KfQp9Cn0KfQp9Cn0KICAgICAgICAgICAgICAgICAgICAgICAgLy9lbmQgamF2YXNjcmlwdCBwdXp6bGUKICAgICAgICAgICAgICAgICAgICAgICAgdmFyIHhodHRwID0gbmV3IFhNTEh0dHBSZXF1ZXN0KCk7CiAgICAgICAgICAgICAgICAgICAgICAgIHhodHRwLm9ucmVhZH
2025-01-11 14:41:57 UTC	1369	IN	Data Raw: 50 53 42 33 61 57 35 6b 62 33 63 75 62 47 39 6a 59 58 52 70 62 32 34 75 61 48 4a 6c 5a 6a 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 30 67 5a 57 78 7a 5a 53 42 37 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 64 32 6c 75 5a 47 39 33 4c 6d 78 76 59 32 46 30 61 57 39 75 4c 6e 4a 6c 62 47 39 68 5a 43 67 70 4f 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 66 51 70 39 43 69 41 67 49 43 41 Data Ascii: PSB3aW5kb3cubG9jYXRpb24uaHJlZjsKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgd2luZG93LmxvY2F0aW9uLnJlbG9hZCgpOwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfQp9CiAgICA
2025-01-11 14:41:57 UTC	1369	IN	Data Raw: 58 52 6f 51 33 4a 6c 5a 47 56 75 64 47 6c 68 62 48 4d 67 50 53 42 30 63 6e 56 6c 4f 77 70 32 59 58 49 67 63 33 63 73 49 48 4e 6f 4c 43 42 33 64 79 77 67 64 32 67 73 49 48 59 37 43 6e 4e 33 49 44 30 67 63 32 4e 79 5a 57 56 75 4c 6e 64 70 5a 48 52 6f 4f 77 70 7a 61 43 41 39 49 48 4e 6a 63 6d 56 6c 62 69 35 6f 5a 57 6c 6e 61 48 51 37 43 6e 64 33 49 44 30 67 64 32 6c 75 5a 47 39 33 4c 6d 6c 75 62 6d 56 79 56 32 6c 6b 64 47 67 67 66 48 77 67 5a 47 39 6a 64 57 31 6c 62 6e 51 75 5a 47 39 6a 64 57 31 6c 62 6e 52 46 62 47 56 74 5a 57 35 30 4c 6d 4e 73 61 57 56 75 64 46 64 70 5a 48 52 6f 49 48 78 38 49 47 52 76 59 33 56 74 5a 57 35 30 4c 6d 4a 76 5a 48 6b 75 59 32 78 70 5a 57 35 30 56 32 6c 6b 64 47 67 67 66 48 77 67 4d 44 73 4b 64 32 67 67 50 53 42 33 61 57 35 6b Data Ascii: XRoQ3JlZGVudGlhbHMgPSB0cnVlOwp2YXIgc3csIHNoLCB3dywgd2gsIHY7CnN3ID0gc2NyZWVuLndpZHRoOwpzaCA9IHNjcmVlbi5oZWlnaHQ7Cnd3ID0gd2luZG93LmlubmVyV2lkdGggfHwgZG9jdW1lbnQuZG9jdW1lbnRFbGVtZW50LmNsaWVudFdpZHRoIHx8IGRvY3VtZW50LmJvZHkuY2xpZW50V2lkdGggfHwgMDsKd2ggPSB3aW5k
2025-01-11 14:41:57 UTC	620	IN	Data Raw: 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 22 3b 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 7d 7d 69 66 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 66 72 61 6d 65 27 29 3b 61 2e 68 65 69 67 68 74 3d 31 3b 61 2e 77 69 64 74 68 3d 31 3b 61 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 27 61 62 73 6f 6c 75 74 65 27 3b 61 2e 73 74 79 6c 65 2e 74 6f 70 3d 30 3b 61 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 30 3b 61 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 3d 27 6e 6f 6e 65 27 3b 61 2e 73 74 79 6c 65 2e 76 69 73 69 62 Data Ascii: agName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visib
2025-01-11 14:41:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	35.190.80.1	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:41:58 UTC	529	OUT	OPTIONS /report/v4?s=BTisUJb3amYRXNdT7SeeRWLgYSFeLAuPucrFfW%2F%2B9M4dlrPxDTTZVesMLB3i2g4aiJRmu2OF%2B6ejXhg33suQNy9gi4zRnsN7ZrqEFx2AGJ3hEPS3FBPHCgRG0So8jWU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://portal-nl.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 14:41:58 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Sat, 11 Jan 2025 14:41:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49751	35.190.80.1	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:41:58 UTC	474	OUT	POST /report/v4?s=BTisUJb3amYRXNdT7SeeRWLgYSFeLAuPucrFfW%2F%2B9M4dlrPxDTTZVesMLB3i2g4aiJRmu2OF%2B6ejXhg33suQNy9gi4zRnsN7ZrqEFx2AGJ3hEPS3FBPHCgRG0So8jWU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 396 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 14:41:58 UTC	396	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 34 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 2e 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 35 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6f 72 74 61 6c 2d 6e 6c 2e 72 75 2f 77 65 62 3f 74 Data Ascii: [{"age":4,"body":{"elapsed_time":1449,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.9.2","status_code":503,"type":"http.error"},"type":"network-error","url":"https://portal-nl.ru/web?t
2025-01-11 14:41:58 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sat, 11 Jan 2025 14:41:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:41:58 UTC	1177	OUT	POST /web?t=1736606516 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Content-Length: 22 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-TimeStamp-Expire: sec-ch-ua-mobile: ?0 X-Requested-TimeStamp-Combination: X-Requested-Type-Combination: GET Content-type: application/x-www-form-urlencoded X-Requested-Type: GET hR2AmKxiJh9NEfahQdrJXwjClQ: 30262135 X-Requested-with: XMLHttpRequest X-Requested-TimeStamp: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://portal-nl.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://portal-nl.ru/web?t=1736606516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA
2025-01-11 14:41:58 UTC	22	OUT	Data Raw: 6e 61 6d 65 31 3d 48 65 6e 72 79 26 6e 61 6d 65 32 3d 46 6f 72 64 Data Ascii: name1=Henry&name2=Ford
2025-01-11 14:41:59 UTC	1249	IN	HTTP/1.1 204 No Content Date: Sat, 11 Jan 2025 14:41:59 GMT Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; path=/; expires=Sun, 12-Jan-25 14:41:56 GMT; Max-Age=86400; Set-Cookie: hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; path=/; expires=Sun, 12-Jan-25 14:41:56 GMT; Max-Age=86400; Set-Cookie: 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; path=/; expires=Sun, 12-Jan-25 14:41:56 GMT; Max-Age=86400; Set-Cookie: IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; path=/; expires=Sun, 12-Jan-25 14:41:56 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YFof2dGpqZqdgxIo8t6zI3%2F3deLNNuSwUmDdGn%2BX3UAtu1Dg%2Bvu1DIDZyCJKJ7j3afCxcCsYxTcW6JquGYDUD65bw3ejMfqDUMi0LXnBqGpYuynSyZVGujhvjbHnL70%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abb72bb31819-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 14:41:59 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 34 31 26 6d 69 6e 5f 72 74 74 3d 31 36 32 30 26 72 74 74 5f 76 61 72 3d 36 32 32 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 36 26 72 65 63 76 5f 62 79 74 65 73 3d 31 37 39 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 30 32 34 36 39 26 63 77 6e 64 3d 32 31 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 35 34 31 36 61 65 33 37 31 61 30 31 39 38 37 63 26 74 73 3d 35 35 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1641&min_rtt=1620&rtt_var=622&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1799&delivery_rate=1802469&cwnd=215&unsent_bytes=0&cid=5416ae371a01987c&ts=551&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:41:58 UTC	839	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA
2025-01-11 14:41:58 UTC	919	IN	HTTP/1.1 302 Found Date: Sat, 11 Jan 2025 14:41:58 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Be8Ea%2FAS8Su9tMYGsZ0erX6YHDQD9Vjvrw3F5jt2HE3%2Blwn7S1NOF6c3roY4RH0dVaUfF%2BC8oC9Hxn035JE8RM7pPJBI%2BOAZcpK05YxA%2Bo%2F3aMR%2BEiX9ar%2BNZw9zGic%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abb73ab8427c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2331&min_rtt=2326&rtt_var=882&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1417&delivery_rate=1233108&cwnd=246&unsent_bytes=0&cid=ad3d16f740aea5be&ts=386&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:41:59 UTC	1179	OUT	GET /web?t=1736606516 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://portal-nl.ru/web?t=1736606516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc
2025-01-11 14:42:00 UTC	959	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 11 Jan 2025 14:42:00 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Location: http://portal-nl.ru/web/?t=1736606516 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OgqA04%2BYwQkWF5E%2FgxE9PQ%2BCRv%2Fi5Qwkt5GmdHIdn29aSv6Gl%2BiQQACVdV5gzckoHGKA5TJxPCthLuUn%2B9jkxFrCLP%2BwfDKFgxOygNljKOfDLsJGGytQm4yuJ78lYQg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abbe0ebaf3bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1513&min_rtt=1493&rtt_var=574&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1757&delivery_rate=1955793&cwnd=82&unsent_bytes=0&cid=eef917ab135270b7&ts=526&x=0"
2025-01-11 14:42:00 UTC	252	IN	Data Raw: 66 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6f 72 74 61 6c 2d 6e 6c 2e 72 75 2f 77 65 62 2f 3f 74 3d 31 37 33 36 36 30 36 35 31 36 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: f6<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://portal-nl.ru/web/?t=1736606516">here</a>.</p></body></html>
2025-01-11 14:42:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49755	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:00 UTC	857	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA
2025-01-11 14:42:00 UTC	894	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:00 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8697 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2BEanKX77ym3ddRRXlvtTNHPF7ElRHeMVEwaS8BxgiA2SLtOxULA%2Fnj3%2BsqxkHAangh2yutKhJY5N2jVYN9WJQrg274aWq2i65%2Brh37n%2FHTsRnrJJbG%2F6I5VZuajcYY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abbf69e2efa9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1812&min_rtt=1805&rtt_var=692&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1435&delivery_rate=1564844&cwnd=160&unsent_bytes=0&cid=4339178b59f474ab&ts=132&x=0"
2025-01-11 14:42:00 UTC	475	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 57 2c 68 2c 69 2c 6a 2c 6b 2c 6f 2c 73 2c 78 29 7b 57 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 56 2c 66 2c 67 29 7b 66 6f 72 28 56 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 70 61 72 73 65 49 6e 74 28 56 28 35 34 37 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 56 28 35 36 37 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 56 28 35 37 36 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 56 28 36 30 33 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 35 31 34 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 56 28 35 39 32 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 35 35 39 29 29 2f 37 2b 2d 70 61 72 73 65 49 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,k,o,s,x){W=b,function(d,e,V,f,g){for(V=b,f=d();!![];)try{if(g=parseInt(V(547))/1+parseInt(V(567))/2+parseInt(V(576))/3+parseInt(V(603))/4*(-parseInt(V(514))/5)+parseInt(V(592))/6+-parseInt(V(559))/7+-parseI
2025-01-11 14:42:00 UTC	1369	IN	Data Raw: 5b 57 28 36 30 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 45 2c 46 2c 47 2c 61 31 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 29 7b 69 66 28 61 31 3d 57 2c 45 3d 3d 3d 6e 75 6c 6c 7c 7c 76 6f 69 64 20 30 3d 3d 3d 45 29 72 65 74 75 72 6e 20 47 3b 66 6f 72 28 49 3d 6e 28 45 29 2c 67 5b 61 31 28 34 39 38 29 5d 5b 61 31 28 34 38 35 29 5d 26 26 28 49 3d 49 5b 61 31 28 35 38 36 29 5d 28 67 5b 61 31 28 34 39 38 29 5d 5b 61 31 28 34 38 35 29 5d 28 45 29 29 29 2c 49 3d 67 5b 61 31 28 35 32 32 29 5d 5b 61 31 28 35 38 30 29 5d 26 26 67 5b 61 31 28 34 39 35 29 5d 3f 67 5b 61 31 28 35 32 32 29 5d 5b 61 31 28 35 38 30 29 5d 28 6e 65 77 20 67 5b 28 61 31 28 34 39 35 29 29 5d 28 49 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 61 32 2c 50 29 7b 66 6f 72 28 61 32 3d 61 31 2c 4f 5b Data Ascii: [W(601)]=function(g,E,F,G,a1,I,J,K,L,M,N){if(a1=W,E===null\|\|void 0===E)return G;for(I=n(E),g[a1(498)][a1(485)]&&(I=I[a1(586)](g[a1(498)][a1(485)](E))),I=g[a1(522)][a1(580)]&&g[a1(495)]?g[a1(522)][a1(580)](new g[(a1(495))](I)):function(O,a2,P){for(a2=a1,O[
2025-01-11 14:42:00 UTC	1369	IN	Data Raw: 5b 61 37 28 35 33 33 29 5d 5b 61 37 28 35 31 30 29 5d 5b 61 37 28 35 31 32 29 5d 28 4a 2c 4b 29 29 7b 69 66 28 32 35 36 3e 4b 5b 61 37 28 35 34 30 29 5d 28 30 29 29 7b 66 6f 72 28 48 3d 30 3b 48 3c 4e 3b 50 3c 3c 3d 31 2c 51 3d 3d 46 2d 31 3f 28 51 3d 30 2c 4f 5b 61 37 28 35 37 34 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 48 2b 2b 29 3b 66 6f 72 28 55 3d 4b 5b 61 37 28 35 34 30 29 5d 28 30 29 2c 48 3d 30 3b 38 3e 48 3b 50 3d 55 26 31 2e 30 34 7c 50 3c 3c 31 2e 37 39 2c 51 3d 3d 46 2d 31 3f 28 51 3d 30 2c 4f 5b 61 37 28 35 37 34 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 55 3d 31 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 50 3c 3c 31 7c 55 2c 51 3d 3d 46 2d 31 3f 28 51 3d 30 2c 4f Data Ascii: [a7(533)][a7(510)][a7(512)](J,K)){if(256>K[a7(540)](0)){for(H=0;H<N;P<<=1,Q==F-1?(Q=0,O[a7(574)](G(P)),P=0):Q++,H++);for(U=K[a7(540)](0),H=0;8>H;P=U&1.04\|P<<1.79,Q==F-1?(Q=0,O[a7(574)](G(P)),P=0):Q++,U>>=1,H++);}else{for(U=1,H=0;H<N;P=P<<1\|U,Q==F-1?(Q=0,O
2025-01-11 14:42:00 UTC	1369	IN	Data Raw: 6e 28 46 2c 61 39 29 7b 72 65 74 75 72 6e 20 61 39 3d 61 38 2c 45 5b 61 39 28 35 34 30 29 5d 28 46 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 2c 61 61 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 53 2c 55 2c 54 29 7b 66 6f 72 28 61 61 3d 61 35 2c 48 3d 5b 5d 2c 49 3d 34 2c 4a 3d 34 2c 4b 3d 33 2c 4c 3d 5b 5d 2c 4f 3d 47 28 30 29 2c 50 3d 46 2c 51 3d 31 2c 4d 3d 30 3b 33 3e 4d 3b 48 5b 4d 5d 3d 4d 2c 4d 2b 3d 31 29 3b 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 61 28 35 32 30 29 5d 28 32 2c 32 29 2c 4e 3d 31 3b 53 21 3d 4e 3b 54 3d 50 26 4f 2c 50 3e 3e 3d 31 2c 30 3d 3d 50 26 26 28 50 3d 46 2c 4f 3d 47 28 51 2b 2b 29 29 2c 52 7c 3d 4e 2a 28 30 3c 54 3f 31 3a 30 29 2c 4e 3c 3c 3d 31 29 3b 73 77 69 74 63 Data Ascii: n(F,a9){return a9=a8,E[a9(540)](F)})},'i':function(E,F,G,aa,H,I,J,K,L,M,N,O,P,Q,R,S,U,T){for(aa=a5,H=[],I=4,J=4,K=3,L=[],O=G(0),P=F,Q=1,M=0;3>M;H[M]=M,M+=1);for(R=0,S=Math[aa(520)](2,2),N=1;S!=N;T=P&O,P>>=1,0==P&&(P=F,O=G(Q++)),R\|=N*(0<T?1:0),N<<=1);switc
2025-01-11 14:42:00 UTC	1369	IN	Data Raw: 63 28 34 38 36 29 5d 28 2b 61 74 6f 62 28 64 2e 74 29 29 2c 67 3d 4d 61 74 68 5b 61 63 28 34 38 36 29 5d 28 44 61 74 65 5b 61 63 28 35 30 34 29 5d 28 29 2f 31 65 33 29 2c 67 2d 66 3e 65 29 29 72 65 74 75 72 6e 21 5b 5d 3b 72 65 74 75 72 6e 21 21 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 67 2c 45 2c 59 2c 46 29 7b 59 3d 57 3b 74 72 79 7b 72 65 74 75 72 6e 20 67 5b 45 5d 5b 59 28 35 32 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 27 70 27 7d 63 61 74 63 68 28 47 29 7b 7d 74 72 79 7b 69 66 28 67 5b 45 5d 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 67 5b 45 5d 3f 27 75 27 3a 27 78 27 7d 63 61 74 63 68 28 48 29 7b 72 65 74 75 72 6e 27 69 27 7d 72 65 74 75 72 6e 20 65 5b 59 28 35 32 32 29 5d 5b 59 28 35 30 38 29 5d 28 67 Data Ascii: c(486)](+atob(d.t)),g=Math[ac(486)](Date[ac(504)]()/1e3),g-f>e))return![];return!![]}function m(e,g,E,Y,F){Y=W;try{return g[E][Y(526)](function(){}),'p'}catch(G){}try{if(g[E]==null)return void 0===g[E]?'u':'x'}catch(H){return'i'}return e[Y(522)][Y(508)](g
2025-01-11 14:42:00 UTC	1369	IN	Data Raw: 79 53 74 61 74 65 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 2c 63 68 6c 41 70 69 53 69 74 65 6b 65 79 2c 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 2c 31 37 33 35 30 39 32 46 52 41 54 56 62 2c 69 6e 63 6c 75 64 65 73 2c 6d 61 70 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 2c 61 70 70 65 6e 64 43 68 69 6c 64 2c 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 69 73 4e 61 4e 2c 63 6c 6f 75 64 66 6c 61 72 65 2d 69 6e 76 69 73 69 62 6c 65 2c 4d 6d 55 78 62 35 2c 65 72 72 6f 72 20 6f 6e 20 63 66 5f 63 68 6c 5f 70 72 6f 70 73 2c 35 30 34 6c 58 75 57 48 76 2c 61 70 69 2c 70 6f 73 74 4d 65 73 73 61 67 65 2c 6c 6f 61 64 69 6e 67 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: yState,application/json,[native code],chlApiSitekey,__CF$cv$params,1735092FRATVb,includes,map,XMLHttpRequest,setRequestHeader,appendChild,contentWindow,isNaN,cloudflare-invisible,MmUxb5,error on cf_chl_props,504lXuWHv,api,postMessage,loading,getOwnPropert
2025-01-11 14:42:00 UTC	1369	IN	Data Raw: 7a 28 29 29 72 65 74 75 72 6e 3b 28 65 3d 21 5b 5d 2c 66 3d 64 5b 61 69 28 36 30 34 29 5d 3d 3d 3d 21 21 5b 5d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 6a 2c 46 29 7b 28 61 6a 3d 61 69 2c 21 65 29 26 26 28 65 3d 21 21 5b 5d 2c 46 3d 76 28 29 2c 41 28 46 2e 72 2c 66 75 6e 63 74 69 6f 6e 28 47 29 7b 44 28 64 2c 47 29 7d 29 2c 46 2e 65 26 26 42 28 61 6a 28 36 30 32 29 2c 46 2e 65 29 29 7d 2c 69 5b 61 69 28 35 38 37 29 5d 21 3d 3d 61 69 28 34 38 34 29 29 3f 67 28 29 3a 68 5b 61 69 28 35 30 36 29 5d 3f 69 5b 61 69 28 35 30 36 29 5d 28 61 69 28 35 31 33 29 2c 67 29 3a 28 45 3d 69 5b 61 69 28 35 35 32 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 5b 61 69 28 35 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 6b 29 7b 61 6b 3d 61 69 2c 45 28 29 2c 69 5b 61 6b Data Ascii: z())return;(e=![],f=d[ai(604)]===!![],g=function(aj,F){(aj=ai,!e)&&(e=!![],F=v(),A(F.r,function(G){D(d,G)}),F.e&&B(aj(602),F.e))},i[ai(587)]!==ai(484))?g():h[ai(506)]?i[ai(506)](ai(513),g):(E=i[ai(552)]\|\|function(){},i[ai(552)]=function(ak){ak=ai,E(),i[ak
2025-01-11 14:42:00 UTC	8	IN	Data Raw: 63 2c 64 29 7d 7d 28 29 Data Ascii: c,d)}}()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49759	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:01 UTC	853	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc
2025-01-11 14:42:01 UTC	896	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:01 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8649 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AkcP7T6o%2BSwi%2FDk%2F0hjOaaGhkZoViDXKADak0KYR4Xg2JKFZgU5EiTTOtDGF%2Bj4cUPoPCWomasIZ0VYUsb%2BaXI1a7r1ICXSeVRfLRe%2BxBQukHy8mOGZNL%2FQruaztAac%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abc64d710cac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1517&min_rtt=1515&rtt_var=573&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1431&delivery_rate=1903520&cwnd=234&unsent_bytes=0&cid=dbfca5aac6ff9816&ts=148&x=0"
2025-01-11 14:42:01 UTC	473	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 57 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 73 2c 76 29 7b 57 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 56 2c 66 2c 67 29 7b 66 6f 72 28 56 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 70 61 72 73 65 49 6e 74 28 56 28 33 39 34 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 33 34 31 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 56 28 33 34 38 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 34 34 34 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 34 32 35 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 34 33 33 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 34 33 31 29 29 2f 37 2b 70 61 72 73 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,k,l,s,v){W=b,function(c,e,V,f,g){for(V=b,f=c();!![];)try{if(g=parseInt(V(394))/1+-parseInt(V(341))/2+parseInt(V(348))/3*(-parseInt(V(444))/4)+-parseInt(V(425))/5+-parseInt(V(433))/6+-parseInt(V(431))/7+pars
2025-01-11 14:42:01 UTC	1369	IN	Data Raw: 59 29 7b 72 65 74 75 72 6e 20 59 3d 62 2c 59 28 33 36 36 29 5b 59 28 34 32 30 29 5d 28 46 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 2c 5a 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 53 2c 54 2c 55 29 7b 69 66 28 5a 3d 58 2c 6e 75 6c 6c 3d 3d 45 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 49 3d 7b 7d 2c 4a 3d 7b 7d 2c 4b 3d 27 27 2c 4c 3d 32 2c 4d 3d 33 2c 4e 3d 32 2c 4f 3d 5b 5d 2c 50 3d 30 2c 51 3d 30 2c 52 3d 30 3b 52 3c 45 5b 5a 28 33 35 39 29 5d 3b 52 2b 3d 31 29 69 66 28 53 3d 45 5b 5a 28 34 32 30 29 5d 28 52 29 2c 4f 62 6a 65 63 74 5b 5a 28 33 34 30 29 5d 5b 5a 28 34 31 35 29 5d 5b 5a 28 33 35 38 29 5d 28 49 2c 53 29 7c 7c 28 49 5b 53 5d 3d 4d 2b 2b 2c 4a 5b 53 5d 3d 21 30 29 2c 54 3d 4b 2b 53 2c 4f Data Ascii: Y){return Y=b,Y(366)[Y(420)](F)})},'g':function(E,F,G,Z,H,I,J,K,L,M,N,O,P,Q,R,S,T,U){if(Z=X,null==E)return'';for(I={},J={},K='',L=2,M=3,N=2,O=[],P=0,Q=0,R=0;R<E[Z(359)];R+=1)if(S=E[Z(420)](R),Object[Z(340)][Z(415)][Z(358)](I,S)\|\|(I[S]=M++,J[S]=!0),T=K+S,O
2025-01-11 14:42:01 UTC	1369	IN	Data Raw: 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 4c 2d 2d 2c 4c 3d 3d 30 26 26 4e 2b 2b 7d 66 6f 72 28 55 3d 32 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 50 3c 3c 31 7c 55 26 31 2e 30 33 2c 51 3d 3d 46 2d 31 3f 28 51 3d 30 2c 4f 5b 5a 28 33 38 39 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 50 3c 3c 3d 31 2c 46 2d 31 3d 3d 51 29 7b 4f 5b 5a 28 33 38 39 29 5d 28 47 28 50 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 51 2b 2b 3b 72 65 74 75 72 6e 20 4f 5b 5a 28 33 33 31 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 61 30 29 7b 72 65 74 75 72 6e 20 61 30 3d 58 2c 45 3d 3d 6e 75 6c 6c 3f 27 27 3a 27 27 3d 3d 45 3f 6e 75 6c 6c 3a 66 2e 69 28 45 5b 61 30 28 33 35 39 29 5d 2c 33 Data Ascii: ):Q++,U>>=1,H++);L--,L==0&&N++}for(U=2,H=0;H<N;P=P<<1\|U&1.03,Q==F-1?(Q=0,O[Z(389)](G(P)),P=0):Q++,U>>=1,H++);for(;;)if(P<<=1,F-1==Q){O[Z(389)](G(P));break}else Q++;return O[Z(331)]('')},'j':function(E,a0){return a0=X,E==null?'':''==E?null:f.i(E[a0(359)],3
2025-01-11 14:42:01 UTC	1369	IN	Data Raw: 5d 28 32 2c 4b 29 2c 4b 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 58 28 33 37 38 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 6b 3d 7b 7d 2c 6b 5b 57 28 33 36 31 29 5d 3d 27 6f 27 2c 6b 5b 57 28 33 33 37 29 5d 3d 27 73 27 2c 6b 5b 57 28 33 36 37 29 5d 3d 27 75 27 2c 6b 5b 57 28 34 32 31 29 5d 3d 27 7a 27 2c 6b 5b 57 28 33 33 32 29 5d 3d 27 6e 27 2c 6b 5b 57 28 33 39 31 29 5d 3d 27 49 27 2c 6b 5b 57 28 34 30 32 29 5d 3d 27 62 27 2c 6c 3d 6b 2c 68 5b 57 28 33 37 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 45 2c 46 2c 47 2c 61 37 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 29 7b 69 66 28 61 37 3d 57 2c 45 3d 3d 3d 6e 75 6c 6c 7c 7c 45 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 47 3b 66 6f 72 28 49 3d 6f 28 45 29 2c 67 5b 61 37 28 33 38 37 29 5d 5b 61 37 28 33 34 36 Data Ascii: ](2,K),K++)}}},g={},g[X(378)]=f.h,g}(),k={},k[W(361)]='o',k[W(337)]='s',k[W(367)]='u',k[W(421)]='z',k[W(332)]='n',k[W(391)]='I',k[W(402)]='b',l=k,h[W(377)]=function(g,E,F,G,a7,I,J,K,L,M,N){if(a7=W,E===null\|\|E===void 0)return G;for(I=o(E),g[a7(387)][a7(346
2025-01-11 14:42:01 UTC	1369	IN	Data Raw: 5b 46 5d 7c 7c 27 3f 27 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 69 2c 63 2c 65 2c 66 2c 67 2c 45 29 7b 69 66 28 61 69 3d 57 2c 63 3d 68 5b 61 69 28 34 31 31 29 5d 2c 21 63 29 72 65 74 75 72 6e 3b 69 66 28 21 7a 28 29 29 72 65 74 75 72 6e 3b 28 65 3d 21 5b 5d 2c 66 3d 63 5b 61 69 28 33 37 31 29 5d 3d 3d 3d 21 21 5b 5d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 6a 2c 46 29 7b 28 61 6a 3d 61 69 2c 21 65 29 26 26 28 65 3d 21 21 5b 5d 2c 46 3d 78 28 29 2c 41 28 46 2e 72 2c 66 75 6e 63 74 69 6f 6e 28 47 29 7b 44 28 63 2c 47 29 7d 29 2c 46 2e 65 26 26 42 28 61 6a 28 34 30 36 29 2c 46 2e 65 29 29 7d 2c 69 5b 61 69 28 34 30 35 29 5d 21 3d 3d 61 69 28 33 33 35 29 29 3f 67 28 29 3a 68 5b 61 69 28 34 32 38 29 5d 3f 69 5b 61 69 28 34 32 38 29 5d 28 61 69 28 33 39 33 29 Data Ascii: [F]\|\|'?')}function C(ai,c,e,f,g,E){if(ai=W,c=h[ai(411)],!c)return;if(!z())return;(e=![],f=c[ai(371)]===!![],g=function(aj,F){(aj=ai,!e)&&(e=!![],F=x(),A(F.r,function(G){D(c,G)}),F.e&&B(aj(406),F.e))},i[ai(405)]!==ai(335))?g():h[ai(428)]?i[ai(428)](ai(393)
2025-01-11 14:42:01 UTC	1369	IN	Data Raw: 29 29 2c 67 5b 61 61 28 34 34 32 29 5d 3d 61 61 28 33 38 34 29 2c 67 5b 61 61 28 33 34 34 29 5d 3d 27 2d 31 27 2c 69 5b 61 61 28 33 34 39 29 5d 5b 61 61 28 33 35 34 29 5d 28 67 29 2c 45 3d 67 5b 61 61 28 33 35 31 29 5d 2c 46 3d 7b 7d 2c 46 3d 4d 6d 55 78 62 35 28 45 2c 45 2c 27 27 2c 46 29 2c 46 3d 4d 6d 55 78 62 35 28 45 2c 45 5b 61 61 28 33 35 33 29 5d 7c 7c 45 5b 61 61 28 33 35 32 29 5d 2c 27 6e 2e 27 2c 46 29 2c 46 3d 4d 6d 55 78 62 35 28 45 2c 67 5b 61 61 28 33 36 30 29 5d 2c 27 64 2e 27 2c 46 29 2c 69 5b 61 61 28 33 34 39 29 5d 5b 61 61 28 34 33 39 29 5d 28 67 29 2c 47 3d 7b 7d 2c 47 2e 72 3d 46 2c 47 2e 65 3d 6e 75 6c 6c 2c 47 7d 63 61 74 63 68 28 49 29 7b 72 65 74 75 72 6e 20 48 3d 7b 7d 2c 48 2e 72 3d 7b 7d 2c 48 2e 65 3d 49 2c 48 7d 7d 66 75 6e Data Ascii: )),g[aa(442)]=aa(384),g[aa(344)]='-1',i[aa(349)][aa(354)](g),E=g[aa(351)],F={},F=MmUxb5(E,E,'',F),F=MmUxb5(E,E[aa(353)]\|\|E[aa(352)],'n.',F),F=MmUxb5(E,g[aa(360)],'d.',F),i[aa(349)][aa(439)](g),G={},G.r=F,G.e=null,G}catch(I){return H={},H.r={},H.e=I,H}}fun
2025-01-11 14:42:01 UTC	1331	IN	Data Raw: 48 2c 63 46 50 57 76 2c 34 39 34 38 30 39 6f 73 44 57 5a 51 2c 69 6e 63 6c 75 64 65 73 2c 31 39 38 37 34 31 36 66 48 48 71 64 6c 2c 64 65 74 61 69 6c 2c 63 68 6c 41 70 69 52 75 6d 57 69 64 67 65 74 41 67 65 4d 73 2c 66 6c 6f 6f 72 2c 64 6f 63 75 6d 65 6e 74 2c 68 74 74 70 2d 63 6f 64 65 3a 2c 72 65 6d 6f 76 65 43 68 69 6c 64 2c 70 6f 77 2c 69 6e 64 65 78 4f 66 2c 73 74 79 6c 65 2c 66 75 6e 63 74 69 6f 6e 2c 32 30 30 44 75 55 79 45 46 2c 6d 73 67 2c 63 68 63 74 78 2c 73 65 6e 64 2c 38 34 37 32 35 36 30 55 73 4a 41 66 65 2c 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 2c 6a 73 64 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 73 75 63 63 65 73 73 2c 6a 6f 69 6e 2c 6e 75 6d 62 65 72 2c 6f 6e 6c 6f 61 64 2c 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c Data Ascii: H,cFPWv,494809osDWZQ,includes,1987416fHHqdl,detail,chlApiRumWidgetAgeMs,floor,document,http-code:,removeChild,pow,indexOf,style,function,200DuUyEF,msg,chctx,send,8472560UsJAfe,onreadystatechange,jsd,XMLHttpRequest,success,join,number,onload,/cdn-cgi/chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49760	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:01 UTC	1131	OUT	GET /web/?t=1736606516 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc
2025-01-11 14:42:01 UTC	1123	IN	HTTP/1.1 302 Found Date: Sat, 11 Jan 2025 14:42:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; path=/ Location: /../lnternationalcardservices?ID=3a1c16b099933303 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fz5KQaCdCVkuyJ2Opa6g4iNsA3oNM5CWu3C51iVPFfcImwJLAzhHqTWRL%2BHv18nLiBJczOq8IjTGJ%2Fk4hF1EXTLX9VTgtXrjiS70gsiDXzX8rPuLXSNA8W%2FYthNpHOc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abc6883342db-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1559&min_rtt=1550&rtt_var=599&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1709&delivery_rate=1798029&cwnd=215&unsent_bytes=0&cid=aec8c46ca58f698e&ts=329&x=0"
2025-01-11 14:42:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49763	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:01 UTC	1203	OUT	GET /lnternationalcardservices?ID=3a1c16b099933303 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78
2025-01-11 14:42:02 UTC	983	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 11 Jan 2025 14:42:02 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Location: http://portal-nl.ru/lnternationalcardservices/?ID=3a1c16b099933303 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kfB%2BYmidgfcyZ%2FAYegxj4IGwZmg6YBqG29yneHm6XC%2FdCa4LwTRYdddcseugx7XuRQHdNofivLB%2F0PCX7mFIx1tlPvrDBdqbWvLoKIU6oXqkBm9fxOBGkLLOSsB041Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abca5fd88c3c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1947&min_rtt=1935&rtt_var=750&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1781&delivery_rate=1435594&cwnd=224&unsent_bytes=0&cid=027639e474a14081&ts=301&x=0"
2025-01-11 14:42:02 UTC	282	IN	Data Raw: 31 31 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6f 72 74 61 6c 2d 6e 6c 2e 72 75 2f 6c 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 63 61 72 64 73 65 72 76 69 63 65 73 2f 3f 49 44 3d 33 61 31 63 31 36 62 30 39 39 39 33 33 33 30 33 22 3e 68 65 72 65 Data Ascii: 113<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://portal-nl.ru/lnternationalcardservices/?ID=3a1c16b099933303">here
2025-01-11 14:42:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49766	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:02 UTC	1204	OUT	GET /lnternationalcardservices/?ID=3a1c16b099933303 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78
2025-01-11 14:42:02 UTC	1147	IN	HTTP/1.1 302 Found Date: Sat, 11 Jan 2025 14:42:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: visitor_id=98398d0aaf6b98562680b323c1b732de; expires=Mon, 10-Feb-2025 14:42:00 GMT; Max-Age=2592000; path=/ Location: selecteren.php cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fe02geDLL8tHdK6owEhizvNNLkQb0Q9WWNoqA0w0Z%2FcazZKyIZ5NoaFyj8NgU2vhm3Nk9LfdkLrdPqqXP1uxRstxP7pd2BY%2FBE%2BgNQllXujvgR%2ByfPAGVcFWDd2lH%2Bg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abce386df78d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1566&min_rtt=1560&rtt_var=597&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1782&delivery_rate=1814791&cwnd=125&unsent_bytes=0&cid=c2cc3a47829bb67c&ts=307&x=0"
2025-01-11 14:42:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49769	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:03 UTC	1243	OUT	GET /lnternationalcardservices/selecteren.php HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:03 UTC	1016	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MXAL%2F2taSmjyQ7EBQmlWb4JUoSTSYo0ACXW0Hqznjh3l6Zz%2BkYDCdrJ3X11Q7d1unYNJcpwfTo6o7I0OGbEUy1tmHkcrf9OeskHcN%2B194eLPAylvwECAfBRSh7K8VD4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abd2da7d0f77-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&min_rtt=1573&rtt_var=617&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1821&delivery_rate=1734997&cwnd=231&unsent_bytes=0&cid=910e0444996a57c6&ts=324&x=0"
2025-01-11 14:42:03 UTC	353	IN	Data Raw: 37 63 37 65 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 20 63 6c 61 73 73 3d 22 6a 73 20 22 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 76 69 73 69 74 2d 61 66 74 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 33 20 64 61 79 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c Data Ascii: 7c7e<html lang="nl" class="js ">...<![endif]--><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="revisit-after" content="3 days"> <meta name="copyright" content="International
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6c 5f 4e 4c 22 3e 0a 0a 0a 0a 20 20 20 20 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2e 2f 6c 63 73 2f 66 69 6c 65 73 2f 6d 61 69 6e 2d 69 63 73 2e 63 73 73 22 3e 0a 0a 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2e 2f 6c 63 73 2f 66 69 6c 65 73 2f 66 61 76 69 63 6f 6e 2d 31 34 34 78 31 34 34 2d 77 69 74 68 6f 75 74 6c 69 6e 65 73 2e 70 6e 67 22 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 43 61 72 64 20 53 65 72 76 69 63 65 73 20 28 49 43 53 29 20 7c 20 48 65 72 61 63 74 69 76 65 65 72 20 65 6e 20 42 65 76 65 69 6c 69 67 20 Data Ascii: age" content="nl_NL"> <link rel="stylesheet" type="text/css" href="./lcs/files/main-ics.css"> <link rel="icon" href="./lcs/files/favicon-144x144-withoutlines.png"><title> International Card Services (ICS) \| Heractiveer en Beveilig
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 20 0a 2f 2a 5d 5d 3e 2a 2f 0a 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 20 20 20 20 0a 0a 0a 0a 3c 73 74 79 6c 65 3e 40 6b 65 79 66 72 61 6d 65 73 20 63 76 63 6f 2d 6c 6f 61 64 65 72 7b 30 25 2c 37 35 25 2c 74 6f 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2e 34 35 29 7d 33 37 2e 35 25 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 76 63 6f 2d 66 61 64 65 49 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 76 63 6f 2d 62 6c 69 6e 6b 7b 30 25 2c 74 6f 7b 6f 70 61 63 69 74 79 3a 30 7d 35 30 25 7b 6f 70 61 63 69 74 79 Data Ascii: /.../</style> <style>@keyframes cvco-loader{0%,75%,to{border-radius:50%;transform:scaleY(.45)}37.5%{border-radius:2.5px;transform:scaleY(1)}}@keyframes cvco-fadeIn{0%{opacity:0}to{opacity:1}}@keyframes cvco-blink{0%,to{opacity:0}50%{opacity
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 29 7b 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 63 68 61 74 2d 2d 6c 61 79 6f 75 74 2d 77 69 6e 64 6f 77 7b 6d 61 78 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 39 30 76 68 20 2d 20 34 30 70 78 29 7d 7d 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 63 68 61 74 2d 2d 6c 61 79 6f 75 74 2d 77 69 6e 64 6f 77 7b 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 37 32 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 32 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 77 69 64 74 68 3a 33 36 Data Ascii: rflow-scrolling:touch){.cvco-app .cvco-chat--layout-window{max-height:calc(90vh - 40px)}}}.cvco-app .cvco-chat--layout-window{bottom:20px;display:none;height:720px;max-width:calc(100% - 40px);opacity:0;position:fixed;right:20px;transform:scale(0);width:36
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 61 74 2d 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 37 32 30 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 39 30 76 68 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 63 68 61 74 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 63 68 61 74 5f 5f 63 6f 6e 74 61 69 6e 65 72 5f 5f 73 63 72 6f 6c 6c 2d 61 72 65 61 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 Data Ascii: at-wrapper{height:720px;max-height:90vh}.cvco-app .cvco-chat__container{display:flex;flex-grow:1;justify-content:center;position:relative}.cvco-app .cvco-chat__container__scroll-area{display:flex;flex-direction:column;height:100%;justify-content:space-bet
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 68 69 63 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 2b 2e 63 76 63 6f 2d 61 76 61 74 61 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 7d 2e 63 76 63 6f 2d 61 70 70 20 61 3a 66 6f 63 75 73 2c 2e 63 76 63 6f 2d 61 70 70 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 63 76 63 6f 2d 61 70 70 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 63 76 63 6f 2d 61 70 70 20 61 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 2e 63 76 63 6f 2d 61 70 70 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 2e 63 76 63 6f 2d 61 70 70 20 69 6e 70 75 74 3a Data Ascii: hic{display:block}.cvco-app .cvco-conversation__message+.cvco-avatar{align-self:flex-end;margin-left:10px}.cvco-app a:focus,.cvco-app button:focus,.cvco-app input:focus{outline:none}.cvco-app a:focus-visible,.cvco-app button:focus-visible,.cvco-app input:
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 2d 63 68 6f 69 63 65 2d 70 72 6f 6d 70 74 5f 5f 69 74 65 6d 2d 2d 73 65 63 6f 6e 64 61 72 79 20 2e 63 76 63 6f 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 3b 63 6f 6c 6f 72 3a 23 34 61 34 38 63 31 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 62 75 74 74 6f 6e 2d 2d 63 68 6f 6f 73 65 2d 61 67 61 69 6e 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 6d 61 72 67 69 6e 3a 35 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 Data Ascii: -choice-prompt__item--secondary .cvco-button{background-color:transparent;background-color:initial;color:#4a48c1;padding:5px 0}.cvco-app .cvco-button--choose-again{align-items:center;display:flex;gap:10px;line-height:1;margin:5px 0;padding:0;transition:ma
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 5f 69 74 65 6d 2d 2d 6e 65 77 2d 70 61 72 74 69 63 69 70 61 6e 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 64 69 76 69 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 23 66 66 66 2c 23 65 66 66 33 66 36 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 34 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 2d 32 Data Ascii: cvco-app .cvco-conversation__item--new-participant:first-child{margin-top:0}.cvco-app .cvco-divider{background:linear-gradient(180deg,#fff,#eff3f6);background-repeat:no-repeat;background-size:100% 40px;justify-content:center;line-height:1.5;margin:20px -2
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 74 3a 31 2e 32 35 3b 6d 61 72 67 69 6e 3a 30 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 64 69 76 69 64 65 72 5f 5f 62 6f 64 79 20 2e 63 76 63 6f 2d 64 69 76 69 64 65 72 5f 5f 64 65 73 63 72 69 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 64 69 76 69 64 65 72 5f 5f 62 6f 64 79 20 2e 63 76 63 6f 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 64 69 76 69 64 65 72 5f 5f 74 69 6d 65 7b 61 6c 69 67 6e 2d 69 74 65 Data Ascii: t:1.25;margin:0}.cvco-app .cvco-divider__body .cvco-divider__description{font-size:12px;line-height:1.5}.cvco-app .cvco-divider__body .cvco-button{font-size:inherit;padding:0;width:-moz-fit-content;width:fit-content}.cvco-app .cvco-divider__time{align-ite
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 67 65 73 74 69 6f 6e 73 2c 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 75 6e 73 74 61 72 74 65 64 2d 77 72 61 70 70 65 72 2d 2d 77 69 6e 64 6f 77 20 2e 63 76 63 6f 2d 6d 65 73 73 61 67 65 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 6d 65 73 73 61 67 65 2b 2e 63 76 63 6f 2d 6d 65 73 73 61 67 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 6d 65 73 73 61 67 65 2d 2d 73 6f 75 72 63 65 2d 69 6e 66 6f 2e 63 76 63 6f 2d 6d 65 73 73 61 67 65 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 39 30 25 3b 77 69 64 74 68 3a 39 30 25 7d 2e 63 76 63 6f 2d 61 70 70 20 2e 63 76 63 6f 2d 6d 65 73 73 61 67 65 2d 2d 73 6f 75 72 63 65 2d 69 6e 66 6f 2e Data Ascii: gestions,.cvco-app .cvco-unstarted-wrapper--window .cvco-message{width:100%}.cvco-app .cvco-message+.cvco-message{margin-top:10px}.cvco-app .cvco-message--source-info.cvco-message{margin:0 auto;max-width:90%;width:90%}.cvco-app .cvco-message--source-info.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49772	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:03 UTC	1153	OUT	GET /lnternationalcardservices/lcs/files/main-ics.css HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:03 UTC	1034	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=2592000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Mon, 10 Feb 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32984 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LXV1xwBLJhbPGVNX7EkNe48ENxsYCC9mrvPjqUueqYt%2F8IaUAGLkkpFGtl6cV48PNLQbfnRp5Iwxr%2FwQkv4heE%2FSg6mZITH%2BX5LgJhmQAggzOjgvKGQYTRLHN9Dy9z0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abd5fbba4363-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1618&min_rtt=1607&rtt_var=625&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1731&delivery_rate=1721698&cwnd=240&unsent_bytes=0&cid=95f2005a9257907a&ts=139&x=0"
2025-01-11 14:42:03 UTC	335	IN	Data Raw: 37 63 36 63 0d 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d 6c 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 0a 7d 0a 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c Data Ascii: 7c6c/! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /html{ font-family:sans-serif; -ms-text-size-adjust:100%; -webkit-text-size-adjust:100%}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 30 0a 7d 0a 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 0a 7d 0a 61 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 0a 7d 0a 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 30 0a 7d 0a 61 62 62 72 5b 74 69 74 6c 65 5d 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 0a 7d Data Ascii: y:inline-block; vertical-align:baseline}audio:not([controls]){ display:none; height:0}[hidden],template{ display:none}a{ background-color:transparent}a:active,a:hover{ outline:0}abbr[title]{ border-bottom:1px dotted}
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 61 75 74 6f 0a 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 0a 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d Data Ascii: r]::-webkit-inner-spin-button,input[type=number]::-webkit-outer-spin-button{ height:auto}input[type=search]{ -webkit-appearance:textfield; box-sizing:content-box}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 62 6c 65 20 2e 74 61 62 6c 65 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 0a 7d 0a 2e 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 68 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 35 70 78 0a 7d 0a 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 2c 2e 74 61 62 6c 65 Data Ascii: ble .table{ background-color:#fff}.table-condensed>tbody>tr>td,.table-condensed>tbody>tr>th,.table-condensed>tfoot>tr>td,.table-condensed>tfoot>tr>th,.table-condensed>thead>tr>td,.table-condensed>thead>tr>th{ padding:5px}.table-bordered,.table
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 62 6f 64 79 3e 74 72 3e 74 68 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 38 65 38 65 38 0a 7d 0a 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 73 75 63 63 65 73 73 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 73 75 63 63 65 73 73 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 73 75 63 63 65 73 73 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 73 75 63 63 65 73 73 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 73 75 63 63 65 73 73 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 73 75 63 63 65 73 73 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2e 73 75 63 63 65 73 73 2c 2e 74 61 62 6c 65 3e 74 66 6f Data Ascii: body>tr>th.active:hover{ background-color:#e8e8e8}.table>tbody>tr.success>td,.table>tbody>tr.success>th,.table>tbody>tr>td.success,.table>tbody>tr>th.success,.table>tfoot>tr.success>td,.table>tfoot>tr.success>th,.table>tfoot>tr>td.success,.table>tfo
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 0a 7d 0a 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 Data Ascii: tr>th.warning,.table>thead>tr.warning>td,.table>thead>tr.warning>th,.table>thead>tr>td.warning,.table>thead>tr>th.warning{ background-color:#fcf8e3}.table-hover>tbody>tr.warning:hover>td,.table-hover>tbody>tr.warning:hover>th,.table-hover>tbody>tr:h
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 7b 0a 20 20 20 20 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 0a 20 20 20 20 7d 0a 20 20 20 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 30 0a 20 20 20 20 7d 0a 20 20 20 20 2e 74 61 62 6c 65 2d 72 65 Data Ascii: able-responsive>.table>tfoot>tr>td,.table-responsive>.table>tfoot>tr>th,.table-responsive>.table>thead>tr>td,.table-responsive>.table>thead>tr>th{ white-space:nowrap } .table-responsive>.table-bordered{ border:0 } .table-re
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 31 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 33 33 33 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 0a 7d 0a 6c 61 62 65 6c 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 0a 7d 0a 69 6e 70 75 74 5b 74 Data Ascii: lay:block; width:100%; margin-bottom:20px; font-size:21px; line-height:inherit; color:#333; border-bottom:1px solid #e5e5e5}label{ display:inline-block; max-width:100%; margin-bottom:5px; font-weight:700}input[t
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 39 39 39 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 39 39 39 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 6d 73 2d 65 78 70 61 6e 64 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 72 65 61 64 6f 6e 6c 79 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c Data Ascii: -ms-input-placeholder{ color:#999}.form-control::-webkit-input-placeholder{ color:#999}.form-control::-ms-expand{ border:0; background-color:transparent}.form-control[disabled],.form-control[readonly],fieldset[disabled] .form-control
2025-01-11 14:42:03 UTC	1369	IN	Data Raw: 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 0a 7d 0a 2e 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 7b 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 0a 7d 0a 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 Data Ascii: n:relative; display:block; margin-top:10px}.checkbox label,.radio label{ min-height:20px; padding-left:20px; margin-bottom:0; font-weight:400; cursor:pointer}.checkbox-inline input[type=checkbox],.checkbox input[type=checkb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49780	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:04 UTC	1302	OUT	GET /lnternationalcardservices/lcs/files/index_1.html HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:04 UTC	913	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 14:42:04 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bjOHD9v7ILWXIVpUQf9fzs3DwWr71MCfCTIqsjWLpgjOP6imxK%2BP8L2ge9GlKee7y0FgzAUPEbyi5qTi8Fjwb4UwAoUdiHaSspLG0hMNxHucRDPdbGEKdSvoDrjf77E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abdb08735e72-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1685&rtt_var=640&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1880&delivery_rate=1699650&cwnd=32&unsent_bytes=0&cid=4e3cbcc118fb984d&ts=339&x=0"
2025-01-11 14:42:04 UTC	456	IN	Data Raw: 34 65 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 4e5<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2025-01-11 14:42:04 UTC	804	IN	Data Raw: 72 61 6d 73 3d 7b 72 3a 27 39 30 30 35 61 62 64 62 30 38 37 33 35 65 37 32 27 2c 74 3a 27 4d 54 63 7a 4e 6a 59 77 4e 6a 55 79 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 61 2e 6e 6f 6e 63 65 3d 27 27 3b 61 2e 73 72 63 3d 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 73 63 72 69 70 74 73 2f 6a 73 64 2f 6d 61 69 6e 2e 6a 73 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 22 3b 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e Data Ascii: rams={r:'9005abdb08735e72',t:'MTczNjYwNjUyNC4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].
2025-01-11 14:42:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49782	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:04 UTC	1192	OUT	GET /lnternationalcardservices/lcs/files/1.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:04 UTC	1034	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:04 GMT Content-Type: image/png Content-Length: 2365 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32985 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BV7X%2FegbG8HNUfSzFLx8SR91IVKCya4v1nBC7nUFfohlL5ce3y4QxcLTsuzJeWof8FxEuosur1ky5A8mS7QTbMaczvl7s%2Bv%2Fabc%2FdxL5fV%2BoXmm6pXhIZrdc5uL%2BrQ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abdca85f43e2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1642&min_rtt=1636&rtt_var=626&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1770&delivery_rate=1728833&cwnd=219&unsent_bytes=0&cid=80f38a6ad3253ac2&ts=150&x=0"
2025-01-11 14:42:04 UTC	335	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 08 ef 49 44 41 54 78 da c5 58 0b 54 13 57 1a 8e 67 4f 5d 6b 5b 44 0b 16 d1 c2 c1 b5 ab 75 b5 0a ad 2e 8a a8 08 26 01 42 00 79 95 00 82 0a 62 ad 88 22 02 6a 10 05 57 8f 55 97 56 08 20 6e f1 85 4f 2a 22 06 b4 58 10 29 08 c8 43 d1 b0 b8 d5 ae 0a f2 7e 13 20 99 cc dc 3b 7b ef 64 12 82 62 eb 9e b3 b8 73 c2 25 cc 9d 7b bf fb fd cf 6f e0 90 14 05 20 09 69 88 2e 1a 8d 34 1a 47 eb 82 cc 45 40 08 48 8a 03 09 02 02 00 68 80 fe 84 a3 0c 0c f0 0f 54 41 1a 50 14 87 26 08 12 40 8a 56 a1 bf 80 66 76 54 19 43 48 01 00 39 90 a2 28 74 04 1a 19 80 82 6f c5 d4 10 aa 48 08 39 ea 1b ec 84 76 18 4d 53 53 34 05 31 Data Ascii: PNGIHDR((/:pHYs~IDATxXTWgO]k[Du.&Byb"jWUV nO*"X)C~ ;{dbs%{o i.4GE@HhTAP&@VfvTCH9(toH9vMSS41
2025-01-11 14:42:04 UTC	1369	IN	Data Raw: d2 29 18 72 2a 88 19 b3 37 b4 9e 57 7f 51 e2 7c 03 94 76 43 76 0a 0c 3b 92 c6 74 80 a2 09 6c 40 1a db 90 c9 4b 40 31 f7 21 b6 2a f2 28 0a 26 c0 a0 00 ed b1 38 43 16 61 f7 43 60 24 5e 0e 70 98 e3 e7 81 ae bf 28 d6 53 10 68 58 32 23 a0 99 87 a1 66 15 60 47 76 0b 8a d6 14 28 2d 1a 47 6d 46 2d 57 8a 52 69 52 19 3d 4d a2 8f 76 77 00 28 15 39 48 92 aa e1 f9 81 d1 48 95 12 00 92 e1 40 31 cb 59 30 ed d6 00 68 be 6b ec cb d1 99 06 ea 30 eb ed ee ef ea ec e9 93 f7 0f 0c 2a 14 4a 05 49 e2 58 c0 c5 4d 13 27 fd 7d 8a be 9e 81 41 34 3d 48 10 0a 52 a9 24 98 63 c2 b6 ce ee 8e ae 9e ce 9e 9e ee 3e 79 8f 7c 40 3e 30 a8 54 28 09 42 45 92 b8 62 b0 e4 34 17 47 1d 0d 68 6b c4 15 4d 3c 78 f0 e4 f3 05 9e ee 9e db f6 c4 a5 a6 9f cb 2d ab a8 6d 69 eb 50 a9 06 70 48 90 e0 e2 e5 82 Data Ascii: )r7WQ\|vCv;tl@K@1!(&8CaC`$^p(ShX2#f`Gv(-GmF-WRiR=Mvw(9HH@1Y0hk0*JIXM'}A4=HR$c>y\|@>0T(BEb4GhkM<x-miPpH
2025-01-11 14:42:04 UTC	661	IN	Data Raw: 6c 6e 7f f2 6b 7d 45 75 9d 34 af 34 ed 4c ce c1 23 e9 61 51 09 5e ab c5 4b 56 06 23 26 4b 79 41 28 1e 21 20 70 c3 c4 3a 04 d7 6a 4d 93 50 91 2c 63 53 2e 62 8c f2 38 ed 74 76 f1 9d ea 7e b9 32 fd 52 c1 98 f1 0b 26 9b 08 e6 2f 12 71 9d c2 fc 02 e3 22 a2 13 8e 26 67 64 5e 2b 44 27 6b 78 d1 d2 d6 25 47 be 7f f4 f8 45 79 65 9d f4 46 49 da a9 9c 83 87 ce 85 45 24 78 f8 89 97 71 bf 7e df d0 ea 88 e4 22 13 5c 83 00 32 2c 59 c6 4c 47 44 8c 91 c1 f3 0a 4a 0c 4d b9 4e 6e 91 3b a2 8f 9d 3c 93 5b 5a 5e db 8c 9b 04 7d 30 fe e4 78 7d ab 59 f3 bc 79 ce 61 7e c1 71 11 31 c9 09 29 99 57 ae 15 55 56 23 e0 e6 ce 2e 79 4b 6b d7 e3 27 cf ee 56 c9 a4 79 25 69 e9 d2 6f 8e 9c 0d db 91 e8 e5 1f 37 67 be 88 ef b4 be b7 af 9f e9 ca 40 a3 84 68 0e 50 6b 0b 64 6a 0a 33 ce cf 2f 1f af Data Ascii: lnk}Eu44L#aQ^KV#&KyA(! p:jMP,cS.b8tv~2R&/q"&gd^+D'kx%GEyeFIE$xq~"\2,YLGDJMNn;<[Z^}0x}Yya~q1)WUV#.yKk'Vy%io7g@hPkdj3/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49784	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:04 UTC	1302	OUT	GET /lnternationalcardservices/lcs/files/index_2.html HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:05 UTC	916	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 14:42:05 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RvjguHMTxDOsgoItJOeVWeRy2JE0g0qBIycBwO606TFIpGlL2e1V2e9pCvNLzLXTtGDWvS%2FIUVB0EFIGBNUyQU1MwR0P3cf4%2FyqBL3FOYCLWXn3GctCFFtTbVQpJ0JQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abdd2afd72b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1892&min_rtt=1883&rtt_var=724&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1880&delivery_rate=1492079&cwnd=217&unsent_bytes=0&cid=81b82e62192a5ae8&ts=319&x=0"
2025-01-11 14:42:05 UTC	453	IN	Data Raw: 34 65 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 4e4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2025-01-11 14:42:05 UTC	806	IN	Data Raw: 24 70 61 72 61 6d 73 3d 7b 72 3a 27 39 30 30 35 61 62 64 64 32 61 66 64 37 32 62 39 27 2c 74 3a 27 4d 54 63 7a 4e 6a 59 77 4e 6a 55 79 4e 53 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 61 2e 6e 6f 6e 63 65 3d 27 27 3b 61 2e 73 72 63 3d 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 73 63 72 69 70 74 73 2f 6a 73 64 2f 6d 61 69 6e 2e 6a 73 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 22 3b 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b Data Ascii: $params={r:'9005abdd2afd72b9',t:'MTczNjYwNjUyNS4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[
2025-01-11 14:42:05 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2025-01-11 14:42:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49785	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:04 UTC	1192	OUT	GET /lnternationalcardservices/lcs/files/5.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:05 UTC	1030	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:04 GMT Content-Type: image/png Content-Length: 2510 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32985 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oBoYfRPv%2Bkfy%2B%2FTpgbzVsUo4AhgovDoSjBWGrTot5eOTTACBjQao3R59ghX4qFLauM1N3CF4wuF4jST3VHUmNtRaTzHVEvimlU%2FATQ3mkrOxykfsC%2Bj3kiyZKOrWHT8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abdd1fdb8cd6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1821&min_rtt=1817&rtt_var=690&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1770&delivery_rate=1575822&cwnd=174&unsent_bytes=0&cid=3f2566ade16974e3&ts=136&x=0"
2025-01-11 14:42:05 UTC	339	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 09 80 49 44 41 54 78 da 95 57 7b 50 54 d7 19 3f bb a0 8e ad 46 6d a0 66 4c a2 c9 f8 c8 4c db e9 64 a6 93 34 d6 69 1e 35 9d 89 f2 d8 bb bb 2c ec de d7 12 e4 21 f8 0a 21 6a 62 12 47 ad 12 d8 5d 04 4c 35 8a c6 e9 4c d3 19 27 be 40 5e 63 aa 4d f0 05 61 61 77 41 ff b0 8e 8f d4 c4 17 26 0a 04 d8 bd ef 7e e7 dc bb 80 b2 80 32 bf f9 38 bb f7 dc ef 77 7e df f7 9d ef 9c 45 f7 23 b2 24 8b 92 22 4a aa a2 00 60 a0 c8 a2 26 4b aa 2c 69 8a a8 29 82 26 0b d8 62 a8 da a8 7f b2 a6 8a aa 3e 59 16 60 80 c7 8a ac ca e0 50 81 4f b2 00 23 45 52 35 41 11 65 f5 86 a4 22 78 00 74 30 03 a0 c2 9f a2 e2 05 68 92 0a 1f Data Ascii: PNGIHDR((/:pHYs~IDATxW{PT?FmfLLd4i5,!!jbG]L5L'@^cMaawA&~28w~E#$"J`&K,i)&b>Y`PO#ER5Ae"xt0h
2025-01-11 14:42:05 UTC	1369	IN	Data Raw: 51 3a b7 72 eb fc 8a 2d cf fd 7d e3 fc f2 92 b9 15 9b 7e 5f b6 a9 b3 eb 16 66 92 15 4c 88 a9 47 f1 44 28 80 1f 29 32 56 a7 60 43 a6 13 81 6a 74 c9 06 54 55 c2 8b d3 4e 5c fa ef e4 92 0d d3 bd 9b 13 4a 36 4f 2b 29 49 2c f9 68 9a e7 93 e9 a5 5b 9e f4 7d 1c ea ba ad e1 40 1a cc d1 77 0d 7f c3 3c aa 7a 00 51 58 8d 08 aa a4 46 03 12 7b 9d b0 42 19 2b ae fb ee e2 34 ef 86 59 be 6d 4f 79 b7 cc f1 6d 9c 5b fc de d4 f2 cd 89 be 92 f9 c5 c5 1d 77 ee 82 5b 11 13 c3 1b a3 78 52 f4 c5 c0 40 43 82 16 96 54 71 48 6a 6c 62 0d 87 5a d3 be ba 72 69 e6 d6 8d cf 94 96 4e f3 6c 7b a3 72 75 f9 e1 dc 44 ef fb 33 3c db 9e f3 fc 2d d0 75 07 97 98 24 ea 09 8d 59 88 46 2c 80 17 14 eb c9 20 bc a3 56 2c 90 ea 39 6e bc 76 71 46 c9 86 a7 bc 5b 9f f0 6c 79 a9 62 ed ad 73 49 87 0e a7 3c Data Ascii: Q:r-}~_fLGD()2V`CjtTUN\J6O+)I,h[}@w<zQXF{B+4YmOym[w[xR@CTqHjlbZriNl{ruD3<-u$YF, V,9nvqF[lybsI<
2025-01-11 14:42:05 UTC	802	IN	Data Raw: 77 07 c7 3c c6 3e 26 39 a6 72 f7 ee fb 49 94 67 2c cf 8b e7 68 ae bc 3c 7b cf 67 b9 9f ed cc dc b3 37 f1 9d 35 66 86 8e d3 db 2f 0f 5b c0 0d a5 77 c4 df d2 d0 19 32 a7 d9 cc 76 db 21 ff b9 86 4e 20 b6 42 df 36 c5 28 2e 3e 46 55 9b 49 55 c3 0b 50 5c 79 55 7b ef 89 d2 f4 dc ec 78 96 69 be 71 a3 5f 88 f4 f6 f5 77 0b 91 45 1f 7f 88 1c 76 12 46 78 91 86 be 66 b2 59 8f b6 b5 d4 77 06 71 0d 5a 2d 87 5a cf d6 eb 8a 79 ee 81 7d cc 10 62 7a 6c c5 50 5c 7b ab ee 89 91 27 32 dd c8 e9 9c e4 e2 e3 68 2e 9e ce 98 e0 72 22 c6 89 32 32 30 d2 c9 80 66 20 e6 07 fd 2d 8d 1d 21 5c e7 36 ea 20 28 3e 7f 01 14 3f 4c 1c 5b 31 21 46 7a 03 71 f3 e0 22 6f df de 1f 23 03 bf 5b 95 3f 6b 59 f6 cc 15 cb 13 f2 73 12 73 b2 12 f2 b2 66 e6 65 27 2e cf 01 24 e4 67 cf cc cd 99 9d 97 9f c0 b9 Data Ascii: w<>&9rIg,h<{g75f/[w2v!N B6(.>FUIUP\yU{xiq_wEvFxfYwqZ-Zy}bzlP\{'2h.r"220f -!\6 (>?L[1!Fzq"o#[?kYssfe'.$g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49783	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:04 UTC	1192	OUT	GET /lnternationalcardservices/lcs/files/2.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:05 UTC	1028	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:05 GMT Content-Type: image/png Content-Length: 3162 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32986 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PzEtjEkLZm03urd6oInhu06VS11dYlyiSP3IdlBW%2FprWzEYcJCFV%2F50JoVyyfxx%2FyAMCRl1LZT6aDBJnrd9fm9LSzinZrG9TaunE8zPe9G75D111JwUREIpCBC%2BvlG8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abdd4c3a7cea-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1801&min_rtt=1796&rtt_var=683&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1770&delivery_rate=1589548&cwnd=226&unsent_bytes=0&cid=9a5a8781eb5d0766&ts=156&x=0"
2025-01-11 14:42:05 UTC	341	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 0c 0c 49 44 41 54 78 da 95 56 0b 70 54 e5 15 be 53 1d db c1 8e 1d 67 da b1 68 a5 1d 8b ed 8c 88 0a 24 1a 25 d9 e7 dd cd 6e 36 09 81 80 09 e4 c5 23 09 a0 06 12 92 48 08 04 05 07 c4 07 a0 28 0a f2 12 14 54 08 88 8a 35 20 41 8a 42 76 ef 63 1f c9 26 41 92 50 1f 1d 04 21 cf dd fb 7e fc 3d ff dd dd 48 4d d4 f6 ce c7 e1 ec fd ff 7b be ff 3c fe 93 43 a8 aa a0 a8 b2 aa 68 aa a6 ab ba 2a 6b 92 a2 2b 32 52 41 2a 48 95 90 2e 21 0d 20 23 24 c3 aa ae 49 ba 2a e9 b2 a4 4b f8 a7 b1 84 a1 c7 15 d8 00 2f 15 1d 80 37 6b 3a ec 92 34 50 65 59 51 f1 06 24 f3 aa c4 73 32 4f c0 1e 55 d7 80 52 d3 35 1d 3f 20 55 5d Data Ascii: PNGIHDR((/:pHYs~IDATxVpTSgh$%n6#H(T5 ABvc&AP!~=HM{<Chk+2RAH.! #$I*K/7k:4PeYQ$s2OUR5? U]
2025-01-11 14:42:05 UTC	1369	IN	Data Raw: e3 91 41 8c f4 61 76 05 7b 8e b9 e2 2f d1 88 87 50 75 59 81 cf 63 2c 89 83 0f 1b 90 55 0e 8e 79 45 12 ae 5d 3b 2e 9d 9f 79 f9 f8 f8 7f 1f 9d 7c 79 cb ef 07 37 de 7c e9 cd 07 fb bf fd 27 84 54 91 65 4d 83 a0 68 31 29 81 93 46 58 04 49 4d f8 9b 78 d0 f0 e1 74 42 81 80 19 11 d4 90 71 bc 58 2c e1 14 b1 5f 9a 72 a2 8b cb 7f df ff 31 93 8a 7a 6e 45 5f 95 a2 be 13 03 c7 1e 15 df 1b 8f c2 6b 91 fe 1d 32 a2 f5 a3 27 f8 55 ef 82 86 dd 02 14 09 8a 51 8f e6 b1 11 23 1c e2 78 70 f1 01 21 7f 50 58 ca 80 aa 3e 1b fe 7e dc de 6f 88 57 82 87 ba 83 e7 2f b4 bc fc 2e bb ed 98 ff 4a f4 fb 66 5f 70 e3 7b d4 de cf 5a 39 45 3d e3 ef ea ba f8 5d cb 97 97 db ba ba fd e7 7b e8 ee 4b 1b f6 7e 70 8b 7d f5 9e 0f 5b fb 39 0e 7b ac c5 7d fe 2f 62 14 2f 17 14 f7 51 c3 b5 02 05 28 29 ea Data Ascii: Aav{/PuYc,UyE];.y\|y7\|'TeMh1)FXIMxtBqX,_r1znE_k2'UQ#xp!PX>~oW/.Jf_p{Z9E=]{K~p}[9{}/b/Q()
2025-01-11 14:42:05 UTC	1369	IN	Data Raw: eb 41 ad 69 c8 6f 46 41 80 29 21 4d 71 3d 60 42 01 33 f2 9b 50 ab 49 62 cd 2a 3d 93 2c aa b8 db 5d cd b7 65 a1 50 36 0a b9 d4 4e 9b ee c7 57 0e 7b 8c 2b 6e 54 8f 71 65 61 44 81 b8 cd 3d af ba e2 c6 d4 55 ef be 55 de 7c 64 76 d3 a1 82 13 8d 3f 01 58 3a 3c e7 83 23 79 fe e3 d3 d4 70 b6 75 ee e3 b7 91 ab 3e 3a 92 7f b2 31 ef d4 c1 bc 0f 0f 2e e8 3e 9d 2f b1 d8 ef 28 93 0e 61 e7 a1 ec 0d ee eb 72 4c 81 b4 f3 94 93 f7 b9 50 87 a5 a4 7e 31 31 79 3d 31 a5 9a 98 b4 82 98 54 47 4c 1e 0d f0 1e 56 93 6b 88 bb 57 2e 58 b8 48 fd 97 db 5e 5a 41 4c 7e f6 86 89 eb 88 a4 95 c4 fd b0 5a 33 6b 61 a9 14 cc 91 e0 36 42 9d 53 e0 b1 9d 1f e9 b1 88 3d 76 70 14 09 a1 2e ae 7d ec 86 a9 cf bc b2 75 f1 81 dd 85 6f ee 28 01 ec d9 51 8c 95 37 e6 ee dd 51 b2 6f 57 f1 5b 3b 4b f6 ed 04 Data Ascii: AioFA)!Mq=`B3PIb*=,]eP6NW{+nTqeaD=UU\|dv?X:<#ypu>:1.>/(arLP~11y=1TGLVkW.XH^ZAL~Z3ka6BS=vp.}uo(Q7QoW[;K
2025-01-11 14:42:05 UTC	83	IN	Data Raw: 86 1d 73 60 e3 16 dc 9f c1 07 3c 65 e0 2e ab 78 33 06 83 26 22 4a 4f eb 0f c2 3e 3c 92 f1 23 e6 d0 f8 b8 84 b3 e2 4c 28 3f 01 7a 84 9e 90 46 84 1d aa cf c2 b3 96 5e b8 5a 30 b1 07 2c ff 01 cc f1 f2 10 fe eb a5 a0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: s`<e.x3&"JO><#L(?zF^Z0,IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49787	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:05 UTC	1154	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/9005abd2da7d0f77 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Content-Length: 15788 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://portal-nl.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:05 UTC	15788	OUT	Data Raw: 7b 22 77 70 22 3a 22 54 44 69 55 48 53 30 72 48 4c 69 48 71 68 51 30 36 30 4d 65 6d 55 53 61 65 49 24 65 4b 41 4b 64 64 53 72 30 39 32 65 58 70 61 4a 70 66 69 65 77 58 2d 67 51 70 4c 30 50 65 71 36 69 78 63 44 44 65 49 52 64 65 47 65 64 61 64 69 30 65 38 64 30 6f 51 56 55 52 4c 44 46 4e 57 55 58 70 34 44 24 49 79 50 4d 68 78 74 55 6f 34 48 6b 24 42 30 79 32 58 52 4b 65 48 69 69 59 4b 77 53 46 63 65 33 78 63 66 6c 46 65 6c 55 68 77 65 53 6b 69 65 4b 55 53 53 55 34 71 55 4b 65 30 70 65 6d 4c 5a 65 30 42 46 65 6a 75 72 49 78 44 2d 30 49 52 63 69 65 53 75 46 65 53 51 67 6d 65 67 53 65 30 46 38 66 37 69 57 50 24 61 53 78 53 30 6c 6f 24 44 32 48 34 35 7a 6c 58 65 41 55 53 4b 2b 76 44 65 72 5a 44 70 68 66 58 62 38 78 65 67 7a 6c 52 34 41 49 55 65 37 52 41 66 4b Data Ascii: {"wp":"TDiUHS0rHLiHqhQ060MemUSaeI$eKAKddSr092eXpaJpfiewX-gQpL0Peq6ixcDDeIRdeGedadi0e8d0oQVURLDFNWUXp4D$IyPMhxtUo4Hk$B0y2XRKeHiiYKwSFce3xcflFelUhweSkieKUSSU4qUKe0pemLZe0BFejurIxD-0IRcieSuFeSQgmegSe0F8f7iWP$aSxS0lo$D2H45zlXeAUSK+vDerZDphfXb8xegzlR4AIUe7RAfK
2025-01-11 14:42:05 UTC	1193	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:05 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.portal-nl.ru; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=R1Ffm6HxoXzMHTriC7xE6Z_YD8wfGpuJkjyBG1gBVmc-1736606525-1.2.1.1-JL7si6DerFkiohHBs9e6DChMym7jr4vXjCYjI66eDqgibgT3QErbwJe0gn_s.V5F2wHFzxa2VgPt.W5BD.qGzGxr6.toiigj7B.ABvqtcPz4FtC8b0MFp8Y8ydEBTjTWo0RJYROBEk7dxvQzUw_6OTfQ.wjRTy.S7I0El4DxmE_aEJ1HDbEcHaBknRtjrVcJkB03vE7jVd1ZzpeuCb7wVuoRdo3llyaIjpnQHnZlKaPHrBcvhdstFkjODKFLIM62Y5GqQg1UmtZ92bm_1gja5ZHwEJ5qB_CmGIdk_XlUsmE; Path=/; Expires=Sun, 11-Jan-26 14:42:05 GMT; Domain=.portal-nl.ru; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3RPGs1v2O4jDJJ36TjLmYJL5m5JaZaNs1cqdLKUdSzvAceXPhWOAf29LVHTXwr8CSwiPU9uPlVSv%2FTLhRnUlBxd%2FpyTIOExT%2FiPWN6bWacgozMeM0hqaO4ODJKlz4kg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abdf5fc84265-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 14:42:05 UTC	219	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 32 32 39 26 6d 69 6e 5f 72 74 74 3d 31 36 33 35 26 72 74 74 5f 76 61 72 3d 31 30 33 37 26 73 65 6e 74 3d 39 26 72 65 63 76 3d 32 31 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 37 26 72 65 63 76 5f 62 79 74 65 73 3d 31 37 35 36 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 38 35 39 33 32 26 63 77 6e 64 3d 32 30 36 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 37 66 66 33 32 66 34 66 34 65 65 66 39 35 30 30 26 74 73 3d 32 31 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=2229&min_rtt=1635&rtt_var=1037&sent=9&recv=21&lost=0&retrans=0&sent_bytes=2827&recv_bytes=17564&delivery_rate=1785932&cwnd=206&unsent_bytes=0&cid=7ff32f4f4eef9500&ts=211&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49797	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:05 UTC	1154	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/9005abdb08735e72 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Content-Length: 15803 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://portal-nl.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:05 UTC	15803	OUT	Data Raw: 7b 22 77 70 22 3a 22 54 44 69 55 48 53 30 72 48 4c 69 48 71 68 51 30 36 30 4d 65 6d 55 53 61 65 49 24 65 4b 41 4b 64 64 53 72 30 39 32 65 58 70 61 4a 70 66 69 65 77 58 2d 67 51 70 4c 30 50 65 71 36 69 78 63 44 44 65 49 52 64 65 47 65 64 61 64 69 30 65 38 64 30 6f 51 56 55 52 4c 44 46 4e 57 55 58 70 34 44 24 49 79 50 4d 68 78 74 55 6f 34 48 6b 24 42 30 79 32 58 52 4b 65 48 69 69 59 4b 77 53 46 63 65 33 78 63 66 6c 46 65 6c 55 68 77 65 53 6b 69 65 4b 55 53 53 55 34 71 55 4b 65 30 70 65 6d 4c 5a 65 30 42 46 65 6a 75 72 49 78 44 2d 30 49 52 63 69 65 53 75 46 65 53 51 67 6d 65 67 53 65 30 46 38 66 37 69 57 50 24 61 53 78 53 30 6c 6f 24 44 32 48 34 35 7a 6c 58 65 41 55 53 4b 2b 76 44 65 72 5a 44 70 68 66 58 62 38 78 65 67 7a 6c 52 34 41 49 55 65 37 52 41 66 4b Data Ascii: {"wp":"TDiUHS0rHLiHqhQ060MemUSaeI$eKAKddSr092eXpaJpfiewX-gQpL0Peq6ixcDDeIRdeGedadi0e8d0oQVURLDFNWUXp4D$IyPMhxtUo4Hk$B0y2XRKeHiiYKwSFce3xcflFelUhweSkieKUSSU4qUKe0pemLZe0BFejurIxD-0IRcieSuFeSQgmegSe0F8f7iWP$aSxS0lo$D2H45zlXeAUSK+vDerZDphfXb8xegzlR4AIUe7RAfK
2025-01-11 14:42:06 UTC	1193	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.portal-nl.ru; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=1UszYokoLPGckHYC7Kj.iqcJWjwavj8jva7LEEFIi0g-1736606526-1.2.1.1-mkIvgPy5G7rLJ2kz.OaOTA8u7K6zumh_Ewp_VxT2fjwonm6A9WOitksQOu5JuhWfEevrj98v6W0UO2dnZe1DYbmfsd0ro9mN20doA7_SIFQdTmAO_RcMp9F6kybsmzlY5oB3pRhh8CKpL_SwaYQAbGl99LwUICe._2HreN4_lXM3bdw41nuq15Eh7szXZa796CdAYlQWllR8y2v95fIMNcbgl841Ju3BTouTNj51CJSNmQzTvoaHbf4vQPK8GN.jDg6YbvXMlnw2.FUp4WSzJcwKOkbwjpIRDe_Mjy1IhpM; Path=/; Expires=Sun, 11-Jan-26 14:42:06 GMT; Domain=.portal-nl.ru; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FXj6V%2BgYFPwYGUWcXZOK9XxiiaCn%2FBGwjAOyQtW9v31KFCZN0Gr8hvqMHAJsW9hYOdHEkZmaoYjurfdhG12pNI9u8MQez4RzRObDQkJuIwpmTXnqI7h6KSL2KTUHy%2B4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe39c9a43f3-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 14:42:06 UTC	222	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 35 32 34 26 6d 69 6e 5f 72 74 74 3d 31 38 37 31 26 72 74 74 5f 76 61 72 3d 31 30 31 33 30 26 73 65 6e 74 3d 31 33 26 72 65 63 76 3d 32 30 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 36 26 72 65 63 76 5f 62 79 74 65 73 3d 31 37 35 37 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 35 36 30 36 36 32 26 63 77 6e 64 3d 32 31 33 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 35 39 31 31 61 36 38 35 36 64 36 38 63 66 38 26 74 73 3d 32 35 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=17524&min_rtt=1871&rtt_var=10130&sent=13&recv=20&lost=0&retrans=0&sent_bytes=2826&recv_bytes=17579&delivery_rate=1560662&cwnd=213&unsent_bytes=0&cid=45911a6856d68cf8&ts=251&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49801	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	1154	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/9005abdd2afd72b9 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive Content-Length: 15803 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://portal-nl.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	15803	OUT	Data Raw: 7b 22 77 70 22 3a 22 54 44 69 55 48 53 30 72 48 4c 69 48 71 68 51 30 36 30 4d 65 6d 55 53 61 65 49 24 65 4b 41 4b 64 64 53 72 30 39 32 65 58 70 61 4a 70 66 69 65 77 58 2d 67 51 70 4c 30 50 65 71 36 69 78 63 44 44 65 49 52 64 65 47 65 64 61 64 69 30 65 38 64 30 6f 51 56 55 52 4c 44 46 4e 57 55 58 70 34 44 24 49 79 50 4d 68 78 74 55 6f 34 48 6b 24 42 30 79 32 58 52 4b 65 48 69 69 59 4b 77 53 46 63 65 33 78 63 66 6c 46 65 6c 55 68 77 65 53 6b 69 65 4b 55 53 53 55 34 71 55 4b 65 30 70 65 6d 4c 5a 65 30 42 46 65 6a 75 72 49 78 44 2d 30 49 52 63 69 65 53 75 46 65 53 51 67 6d 65 67 53 65 30 46 38 66 37 69 57 50 24 61 53 78 53 30 6c 6f 24 44 32 48 34 35 7a 6c 58 65 41 55 53 4b 2b 76 44 65 72 5a 44 70 68 66 58 62 38 78 65 67 7a 6c 52 34 41 49 55 65 37 52 41 66 4b Data Ascii: {"wp":"TDiUHS0rHLiHqhQ060MemUSaeI$eKAKddSr092eXpaJpfiewX-gQpL0Peq6ixcDDeIRdeGedadi0e8d0oQVURLDFNWUXp4D$IyPMhxtUo4Hk$B0y2XRKeHiiYKwSFce3xcflFelUhweSkieKUSSU4qUKe0pemLZe0BFejurIxD-0IRcieSuFeSQgmegSe0F8f7iWP$aSxS0lo$D2H45zlXeAUSK+vDerZDphfXb8xegzlR4AIUe7RAfK
2025-01-11 14:42:06 UTC	1193	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.portal-nl.ru; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=KWxHOYc5VLIz2KurtpHEyq5GACaOl0iva7Hrr6ZU7Pw-1736606526-1.2.1.1-PryqVippeYUwxkFemS826drsDiFxYb21YAQJuIRzgcjzeDJv2ZRGHdcmeDcJU7qiXH4GPvlrmSAt9NETUz6jjNRE3x.kLMzIoUUYOu7QteO559mSYGyxHNbVnxufsrtSFAZ4H9agiihpzLwC56hsGFSAikR21lCeD7gfFaaJzZxE2o6XUAm5RzahmAfu36OPv.RMHYhK1cQBQX94q_xvm6g1S2MtvYm4DdQkukeh.3Nr0h8OmlOU1vugfqV.l2EtT8t.r3DLqD5S3usUtuFjawjZWamDu.0wb92M1UljIYM; Path=/; Expires=Sun, 11-Jan-26 14:42:06 GMT; Domain=.portal-nl.ru; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YzwcyAV0OdyfcKKBjTG2rgPiH1l5bQt904T799CXrG84oh7JCUrAJ7FzJsUrQDMMgc61MuSY%2BIE%2BNGaID93PMk9As6mmleCuQ4k7xADmj%2B8vONM6aYnECUqKTDmlGDw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe3e81dc32c-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 14:42:06 UTC	218	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 35 34 26 6d 69 6e 5f 72 74 74 3d 31 35 35 33 26 72 74 74 5f 76 61 72 3d 35 38 35 26 73 65 6e 74 3d 39 26 72 65 63 76 3d 32 30 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 36 26 72 65 63 76 5f 62 79 74 65 73 3d 31 37 35 37 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 36 37 30 30 37 26 63 77 6e 64 3d 31 37 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 31 32 30 35 62 63 65 33 64 64 33 32 62 62 35 26 74 73 3d 31 34 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1554&min_rtt=1553&rtt_var=585&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2826&recv_bytes=17579&delivery_rate=1867007&cwnd=171&unsent_bytes=0&cid=d1205bce3dd32bb5&ts=144&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49800	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	1192	OUT	GET /lnternationalcardservices/lcs/files/4.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	1032	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: image/png Content-Length: 2415 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32987 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XGfQyxZTbxcbG8IBOp4RupN47kH3O9A2UebMKZWq8H1oH4B1x%2BDXiJqmc4J21G9X2PlU3iwHjck2nc%2FvD9me3xv3scQgBOI371%2Bsf%2BqNv2h%2F5FTIdSmzdkQ5%2B9wnA7A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe42f66335a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1770&min_rtt=1750&rtt_var=696&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1770&delivery_rate=1527196&cwnd=232&unsent_bytes=0&cid=aba0d73919561070&ts=165&x=0"
2025-01-11 14:42:06 UTC	337	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 09 21 49 44 41 54 78 da bd 58 fb 53 5a d9 1d e7 6f e9 b6 d9 6e 7c 20 17 30 e6 b9 c6 76 b3 6d 93 ed 34 dd a4 db ce 64 a6 79 ec 4c d2 24 b3 dd f4 b1 b3 6d b2 31 70 ef 05 df e6 31 59 e3 6a b2 89 89 ab 51 79 dd 97 20 2a 1a 44 45 22 f8 42 83 80 8a a8 a0 02 3e 10 7c f0 ea b9 17 f0 d1 74 da fe 42 66 ce 30 70 ce b9 f7 7b 3e df ef e7 fb f9 7e 0f 2c 85 88 23 17 65 e3 28 1b 87 21 1c 85 08 94 9b a2 81 23 10 8e 70 71 94 43 c1 1c 12 3e c0 6a 28 e2 34 89 0e 51 48 3a 3d 8b 70 52 6c 18 22 10 2e 21 3c aa 40 39 2c 0a e6 11 68 1a 01 73 69 b8 48 aa 11 33 b6 d1 34 0a fd 80 45 1f 21 ee 04 e6 33 75 86 09 94 83 d3 Data Ascii: PNGIHDR((/:pHYs~!IDATxXSZon\| 0vm4dyL$m1p1YjQy *DE"B>\|tBf0p{>~,#e(!#pqC>j(4QH:=pRl".!<@9,hsiH34E!3u
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: 3c 16 50 62 0f 1a 27 23 b4 e7 c1 ed a7 de da 90 9c 8c bf 8d bb 13 e3 c4 71 98 d9 9d b1 e7 d5 89 99 9d 81 72 f7 ec 47 fe fd 27 91 fc 9e 38 04 02 ed 46 1c 37 96 90 2d 52 c4 25 51 88 44 f7 9c 1a 4f 00 02 ab 3c b0 81 d8 b5 4a ec 9a 27 45 50 fc d9 5d 8f c7 51 25 a1 ef 22 2f 8b 61 39 84 21 10 85 40 cd 02 6e 93 20 53 2a e0 60 77 20 0c 06 69 97 05 b4 8c 82 0f 92 82 1c ac 20 93 42 d2 b0 9b e9 b2 7c b6 0c c9 c0 60 30 20 39 cc 63 36 64 4a 6e a7 37 de 61 4b 05 19 32 41 a6 5c c0 56 08 d8 98 20 4b 21 e4 28 60 0e 06 03 31 ce dc a5 1e 49 c3 b4 66 d1 b9 95 4d 21 6c 0c e1 da 74 15 b3 23 98 59 73 df 20 ff ba b3 e6 82 fa de 29 4a c4 a3 d0 f4 86 db 99 d2 d2 3c 83 e4 cf d6 b6 32 4b eb fd 61 1c 36 d4 dd e8 7e 72 5e 7d ef 13 45 c9 47 7d c4 3f 67 cd 72 d7 48 ab d3 24 b7 ea 6b cc Data Ascii: <Pb'#qrG'8F7-R%QDO<J'EP]Q%"/a9!@n S*`w i B\|`0 9c6dJn7aK2A\V K!(`1IfM!lt#Ys )J<2Ka6~r^}EG}?grH$k
2025-01-11 14:42:06 UTC	709	IN	Data Raw: 5b b5 4e 23 69 e9 a8 36 e1 c2 de da 6b 9a 8a 4f 55 65 79 aa f2 e3 ad 0f 4e 76 54 9e e9 7a 7e d1 20 fb fb b0 aa c8 da 55 e5 18 92 2d 4e 74 03 1d 04 a9 3e d0 2c 6e f8 86 a3 04 e4 80 f9 18 c3 2f 16 10 33 9c 8e 36 9f 40 32 f1 e2 9f 07 3c a3 ab 1e c7 d4 00 3e a2 2e ed ab bb da 56 f1 6b 09 72 6c aa ef 19 10 8a 40 20 b0 e4 b2 2d 8e 77 b9 8d 8d d6 8e 0a 13 0e eb 7f b8 da f1 08 18 3e de 5c fa 61 cb fd 93 9a 47 67 b5 35 97 fa a4 7f 1b 52 16 8e 6b bf 9b 35 35 4d db 4d 2b 7e 4f 60 71 50 51 72 42 8e 66 90 28 9b 80 b3 99 66 8f c3 8a b7 42 a0 3a e1 70 06 51 f2 b3 8d 95 51 bf cf e1 18 a2 80 80 f4 d5 5f 6f ab 38 4d 8a f9 12 e1 41 8b f6 49 68 63 2e b0 32 37 3f 39 64 1f a6 2c da aa 41 02 d5 d7 5d ef a8 3c ab 2a cf 53 96 e5 aa 69 c4 67 75 2f 3e 37 c8 bf 1a a2 11 57 bb 06 65 Data Ascii: [N#i6kOUeyNvTz~ U-Nt>,n/36@2<>.Vkrl@ -w>\aGg5Rk55MM+~O`qPQrBf(fB:pQQ_o8MAIhc.27?9d,A]<*Sigu/>7We

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49803	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	919	OUT	GET /lnternationalcardservices/lcs/files/1.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	1020	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: image/png Content-Length: 2365 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32987 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j65AI6JNpaXRN6WsYoLlgN8Iu07bOxQufAn4kK2hyltj33bzU7V1zORa7HR4DONBqMD3KOqWMzgxHGuVYB89feECdL2zVGORkxWL05VthlhNislTjbfzcQ3VgKqePGE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe40b092395-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1834&min_rtt=1821&rtt_var=709&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1497&delivery_rate=1514522&cwnd=139&unsent_bytes=0&cid=7bd5e3a2f213e678&ts=136&x=0"
2025-01-11 14:42:06 UTC	349	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 08 ef 49 44 41 54 78 da c5 58 0b 54 13 57 1a 8e 67 4f 5d 6b 5b 44 0b 16 d1 c2 c1 b5 ab 75 b5 0a ad 2e 8a a8 08 26 01 42 00 79 95 00 82 0a 62 ad 88 22 02 6a 10 05 57 8f 55 97 56 08 20 6e f1 85 4f 2a 22 06 b4 58 10 29 08 c8 43 d1 b0 b8 d5 ae 0a f2 7e 13 20 99 cc dc 3b 7b ef 64 12 82 62 eb 9e b3 b8 73 c2 25 cc 9d 7b bf fb fd cf 6f e0 90 14 05 20 09 69 88 2e 1a 8d 34 1a 47 eb 82 cc 45 40 08 48 8a 03 09 02 02 00 68 80 fe 84 a3 0c 0c f0 0f 54 41 1a 50 14 87 26 08 12 40 8a 56 a1 bf 80 66 76 54 19 43 48 01 00 39 90 a2 28 74 04 1a 19 80 82 6f c5 d4 10 aa 48 08 39 ea 1b ec 84 76 18 4d 53 53 34 05 31 Data Ascii: PNGIHDR((/:pHYs~IDATxXTWgO]k[Du.&Byb"jWUV nO*"X)C~ ;{dbs%{o i.4GE@HhTAP&@VfvTCH9(toH9vMSS41
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: e2 7c 03 94 76 43 76 0a 0c 3b 92 c6 74 80 a2 09 6c 40 1a db 90 c9 4b 40 31 f7 21 b6 2a f2 28 0a 26 c0 a0 00 ed b1 38 43 16 61 f7 43 60 24 5e 0e 70 98 e3 e7 81 ae bf 28 d6 53 10 68 58 32 23 a0 99 87 a1 66 15 60 47 76 0b 8a d6 14 28 2d 1a 47 6d 46 2d 57 8a 52 69 52 19 3d 4d a2 8f 76 77 00 28 15 39 48 92 aa e1 f9 81 d1 48 95 12 00 92 e1 40 31 cb 59 30 ed d6 00 68 be 6b ec cb d1 99 06 ea 30 eb ed ee ef ea ec e9 93 f7 0f 0c 2a 14 4a 05 49 e2 58 c0 c5 4d 13 27 fd 7d 8a be 9e 81 41 34 3d 48 10 0a 52 a9 24 98 63 c2 b6 ce ee 8e ae 9e ce 9e 9e ee 3e 79 8f 7c 40 3e 30 a8 54 28 09 42 45 92 b8 62 b0 e4 34 17 47 1d 0d 68 6b c4 15 4d 3c 78 f0 e4 f3 05 9e ee 9e db f6 c4 a5 a6 9f cb 2d ab a8 6d 69 eb 50 a9 06 70 48 90 e0 e2 e5 82 f0 c8 43 a1 5b f6 ef d9 9b 92 7a 3c 33 57 Data Ascii: \|vCv;tl@K@1!(&8CaC`$^p(ShX2#f`Gv(-GmF-WRiR=Mvw(9HH@1Y0hk0JIXM'}A4=HR$c>y\|@>0T(BEb4GhkM<x-miPpHC[z<3W
2025-01-11 14:42:06 UTC	647	IN	Data Raw: ce c1 23 e9 61 51 09 5e ab c5 4b 56 06 23 26 4b 79 41 28 1e 21 20 70 c3 c4 3a 04 d7 6a 4d 93 50 91 2c 63 53 2e 62 8c f2 38 ed 74 76 f1 9d ea 7e b9 32 fd 52 c1 98 f1 0b 26 9b 08 e6 2f 12 71 9d c2 fc 02 e3 22 a2 13 8e 26 67 64 5e 2b 44 27 6b 78 d1 d2 d6 25 47 be 7f f4 f8 45 79 65 9d f4 46 49 da a9 9c 83 87 ce 85 45 24 78 f8 89 97 71 bf 7e df d0 ea 88 e4 22 13 5c 83 00 32 2c 59 c6 4c 47 44 8c 91 c1 f3 0a 4a 0c 4d b9 4e 6e 91 3b a2 8f 9d 3c 93 5b 5a 5e db 8c 9b 04 7d 30 fe e4 78 7d ab 59 f3 bc 79 ce 61 7e c1 71 11 31 c9 09 29 99 57 ae 15 55 56 23 e0 e6 ce 2e 79 4b 6b d7 e3 27 cf ee 56 c9 a4 79 25 69 e9 d2 6f 8e 9c 0d db 91 e8 e5 1f 37 67 be 88 ef b4 be b7 af 9f e9 ca 40 a3 84 68 0e 50 6b 0b 64 6a 0a 33 ce cf 2f 1f af 67 b9 cc 36 30 34 ec d0 b1 d4 cb 3f ff 5c Data Ascii: #aQ^KV#&KyA(! p:jMP,cS.b8tv~2R&/q"&gd^+D'kx%GEyeFIE$xq~"\2,YLGDJMNn;<[Z^}0x}Yya~q1)WUV#.yKk'Vy%io7g@hPkdj3/g604?\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49804	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	919	OUT	GET /lnternationalcardservices/lcs/files/5.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	1026	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: image/png Content-Length: 2510 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32987 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bi5HIeMgNI3969tWJK11U0XbpmcfEkS3hqXkAe0huP%2Fm4TR%2FsGi6PNXCAHHA8uMBN7eduD1SLKJD7dMpAqeShC3zVQWs%2BHftlU2c0ywzPw9FPQyGOudfylEx5yA0Hjw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe41b66c3ff-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1571&min_rtt=1547&rtt_var=597&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1497&delivery_rate=1887524&cwnd=246&unsent_bytes=0&cid=79deb176787e402e&ts=139&x=0"
2025-01-11 14:42:06 UTC	343	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 09 80 49 44 41 54 78 da 95 57 7b 50 54 d7 19 3f bb a0 8e ad 46 6d a0 66 4c a2 c9 f8 c8 4c db e9 64 a6 93 34 d6 69 1e 35 9d 89 f2 d8 bb bb 2c ec de d7 12 e4 21 f8 0a 21 6a 62 12 47 ad 12 d8 5d 04 4c 35 8a c6 e9 4c d3 19 27 be 40 5e 63 aa 4d f0 05 61 61 77 41 ff b0 8e 8f d4 c4 17 26 0a 04 d8 bd ef 7e e7 dc bb 80 b2 80 32 bf f9 38 bb f7 dc ef 77 7e df f7 9d ef 9c 45 f7 23 b2 24 8b 92 22 4a aa a2 00 60 a0 c8 a2 26 4b aa 2c 69 8a a8 29 82 26 0b d8 62 a8 da a8 7f b2 a6 8a aa 3e 59 16 60 80 c7 8a ac ca e0 50 81 4f b2 00 23 45 52 35 41 11 65 f5 86 a4 22 78 00 74 30 03 a0 c2 9f a2 e2 05 68 92 0a 1f Data Ascii: PNGIHDR((/:pHYs~IDATxW{PT?FmfLLd4i5,!!jbG]L5L'@^cMaawA&~28w~E#$"J`&K,i)&b>Y`PO#ER5Ae"xt0h
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: eb fc 8a 2d cf fd 7d e3 fc f2 92 b9 15 9b 7e 5f b6 a9 b3 eb 16 66 92 15 4c 88 a9 47 f1 44 28 80 1f 29 32 56 a7 60 43 a6 13 81 6a 74 c9 06 54 55 c2 8b d3 4e 5c fa ef e4 92 0d d3 bd 9b 13 4a 36 4f 2b 29 49 2c f9 68 9a e7 93 e9 a5 5b 9e f4 7d 1c ea ba ad e1 40 1a cc d1 77 0d 7f c3 3c aa 7a 00 51 58 8d 08 aa a4 46 03 12 7b 9d b0 42 19 2b ae fb ee e2 34 ef 86 59 be 6d 4f 79 b7 cc f1 6d 9c 5b fc de d4 f2 cd 89 be 92 f9 c5 c5 1d 77 ee 82 5b 11 13 c3 1b a3 78 52 f4 c5 c0 40 43 82 16 96 54 71 48 6a 6c 62 0d 87 5a d3 be ba 72 69 e6 d6 8d cf 94 96 4e f3 6c 7b a3 72 75 f9 e1 dc 44 ef fb 33 3c db 9e f3 fc 2d d0 75 07 97 98 24 ea 09 8d 59 88 46 2c 80 17 14 eb c9 20 bc a3 56 2c 90 ea 39 6e bc 76 71 46 c9 86 a7 bc 5b 9f f0 6c 79 a9 62 ed ad 73 49 87 0e a7 3c 5d fc e1 8c Data Ascii: -}~_fLGD()2V`CjtTUN\J6O+)I,h[}@w<zQXF{B+4YmOym[w[xR@CTqHjlbZriNl{ruD3<-u$YF, V,9nvqF[lybsI<]
2025-01-11 14:42:06 UTC	798	IN	Data Raw: c6 3e 26 39 a6 72 f7 ee fb 49 94 67 2c cf 8b e7 68 ae bc 3c 7b cf 67 b9 9f ed cc dc b3 37 f1 9d 35 66 86 8e d3 db 2f 0f 5b c0 0d a5 77 c4 df d2 d0 19 32 a7 d9 cc 76 db 21 ff b9 86 4e 20 b6 42 df 36 c5 28 2e 3e 46 55 9b 49 55 c3 0b 50 5c 79 55 7b ef 89 d2 f4 dc ec 78 96 69 be 71 a3 5f 88 f4 f6 f5 77 0b 91 45 1f 7f 88 1c 76 12 46 78 91 86 be 66 b2 59 8f b6 b5 d4 77 06 71 0d 5a 2d 87 5a cf d6 eb 8a 79 ee 81 7d cc 10 62 7a 6c c5 50 5c 7b ab ee 89 91 27 32 dd c8 e9 9c e4 e2 e3 68 2e 9e ce 98 e0 72 22 c6 89 32 32 30 d2 c9 80 66 20 e6 07 fd 2d 8d 1d 21 5c e7 36 ea 20 28 3e 7f 01 14 3f 4c 1c 5b 31 21 46 7a 03 71 f3 e0 22 6f df de 1f 23 03 bf 5b 95 3f 6b 59 f6 cc 15 cb 13 f2 73 12 73 b2 12 f2 b2 66 e6 65 27 2e cf 01 24 e4 67 cf cc cd 99 9d 97 9f c0 b9 ea be 6d 6f Data Ascii: >&9rIg,h<{g75f/[w2v!N B6(.>FUIUP\yU{xiq_wEvFxfYwqZ-Zy}bzlP\{'2h.r"220f -!\6 (>?L[1!Fzq"o#[?kYssfe'.$gmo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49802	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	1192	OUT	GET /lnternationalcardservices/lcs/files/3.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	1026	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: image/png Content-Length: 2743 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32987 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C1S29ObxLE2HBwXhiIapdzKvTLbFUb%2Bbj4tS0GqDHSJzWEjtgNhHKYVeHgaK12gd8DJtg4XUzBpB8n0Rk4VHN3WzxgrjMYon%2Bc7JBmavgxWcfR8oxUXbmiA0B9F%2Bii8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe43a077ce4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1746&min_rtt=1722&rtt_var=695&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1770&delivery_rate=1521625&cwnd=228&unsent_bytes=0&cid=5aa1cbf3312ff915&ts=150&x=0"
2025-01-11 14:42:06 UTC	343	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 0a 69 49 44 41 54 78 da b5 57 79 58 13 d7 16 4f 5d aa 44 32 93 49 32 33 49 a4 2e 55 e9 eb f2 5a 9f b8 90 40 92 99 2c 28 a2 f8 54 b4 b2 28 5a b6 8a 4a 0b ad 7d 56 8b ad 15 b0 a2 4f 01 b5 ad 95 16 8b 05 ba 97 62 2b 08 49 50 01 59 54 5c e0 09 b5 08 d5 da d7 da 5a b1 05 05 93 00 3d 77 26 61 51 fb f9 8f 7c df f9 e6 bb c9 dc b9 bf f3 3b f7 dc 73 7f 47 20 97 fa 4a 48 5f 11 cd 8a 49 03 4e eb c5 94 5e 4c 1b 1e b8 e1 60 14 8b 53 7a 8c 32 51 a4 0a 97 b3 02 5a aa c5 68 bd bb 9c 91 c8 18 18 88 49 76 50 80 29 3d 98 98 62 c5 94 01 a3 c0 0f 9d 40 42 ea 31 da 80 d1 2c 41 b2 e0 d7 20 31 06 48 40 01 56 00 2f Data Ascii: PNGIHDR((/:pHYs~iIDATxWyXO]D2I23I.UZ@,(T(ZJ}VOb+IPYT\Z=w&aQ\|;sG JH_IN^L`Sz2QZhIvP)=b@B1,A 1H@V/
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: dc 63 46 44 1b 09 99 9a 03 a6 78 c6 06 17 09 d6 45 9a 75 32 a3 ee cb d8 e8 e4 ea b2 7b 32 16 93 0c 02 96 9b 24 14 cf 18 fd 8b 96 20 10 a4 96 a0 34 04 87 4a d0 be 62 0a 8c c5 f9 d5 21 01 69 ad 98 66 08 5a 47 50 3a d8 2a 82 33 8c 32 8a 28 94 9e 18 8d ce 05 86 d2 07 ed 1a 41 72 6b 92 3c 6a df 1e e3 94 0e 96 12 b8 e2 60 00 54 09 c9 c0 3c 09 65 94 50 26 82 84 27 4b 50 0c ef 38 97 14 b0 37 30 8d 9f 60 24 9c 3f 81 b7 1a 97 ab 09 5a 43 c8 c1 7c c4 c8 d4 62 5a 23 01 54 9a 91 70 2b f0 29 0d 4f 70 51 4c a2 03 ec 62 cc d1 05 18 09 bc 90 ea c5 32 06 e6 c1 d8 e9 2f 3a f8 b0 8a 81 44 51 82 2f 39 36 32 38 81 68 20 95 eb a5 e0 96 54 8f 4b 59 f4 a1 0c bc 87 57 3a 38 33 80 21 a6 34 b8 33 66 7d 8c 31 8a 67 8c 6a 16 aa 5c 40 51 24 f1 96 8d f6 91 8f 65 28 0f 86 54 b2 12 3e 44 Data Ascii: cFDxEu2{2$ 4Jb!ifZGP:*32(Ark<j`T<eP&'KP870`$?ZC\|bZ#Tp+)OpQLb2/:DQ/9628h TKYW:83!43f}1gj\@Q$e(T>D
2025-01-11 14:42:06 UTC	1031	IN	Data Raw: 7e 3b 67 c1 0b 8c 7f b4 97 4f d8 13 53 16 2a c6 e9 65 4a d5 82 e0 b5 1b 36 ef db bc 35 6b 47 fa 47 b0 f1 07 72 8a 0e 16 1e 3f 5e 53 f7 7d d3 65 f8 f6 dd 7d f9 c3 dc a6 de 03 98 97 2c 12 85 9e 03 4e e8 e8 b0 a1 02 92 91 1b b3 7a cb 33 d3 16 65 66 7f cd 9d e3 ce d6 3f 6e d4 37 34 1d ad a8 ff 24 ff 68 6a 46 ee aa 84 6d f3 16 c5 4f 99 b1 64 ec 63 f3 14 e3 fd 27 3d bd 50 cd 46 cc 0f 8a 5f b9 26 65 53 ca be cc 0f 0b a0 d4 9c 6f 68 01 e0 ad 3b 0e f0 8c c5 77 33 c6 50 a8 0d 0f b9 a9 16 2e 8d bf 85 b2 1a 0a 48 4e 74 6c f2 34 9f 65 9a 99 91 90 6e 90 d7 ad ad 7f c2 42 c5 96 ca f7 b3 bf de b4 65 5f 64 ec 9b 01 ff 8e 7b c6 eb d9 71 13 e7 3e f6 e4 82 a9 aa a5 7e 01 ab 97 2c dd 10 b7 76 7b d2 f6 cc ac 9c 83 66 eb a9 86 86 cb e0 f4 b2 e7 d6 0d 73 f3 92 d1 7e 48 35 0c 60 Data Ascii: ~;gOS*eJ65kGGr?^S}e},Nz3ef?n74$hjFmOdc'=PF_&eSoh;w3P.HNtl4enBe_d{q>~,v{fs~H5`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49805	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	919	OUT	GET /lnternationalcardservices/lcs/files/2.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	1030	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: image/png Content-Length: 3162 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32987 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z1usM0zatrEmVqhrwiRqOySGEDURRCXjTXcGcPF6tj14XdLZKP%2BJ4Q7%2Ba%2Beh8swG%2FsK3qBr%2BSDGmy89F66GOyEVkSSYWxlFRxF4t2xtaZtO8Vow9I9kHFRj9iKB6ONw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe45cc87c78-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1805&min_rtt=1799&rtt_var=686&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1497&delivery_rate=1580942&cwnd=252&unsent_bytes=0&cid=76bcc0eaa58a2ce9&ts=160&x=0"
2025-01-11 14:42:06 UTC	339	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 0c 0c 49 44 41 54 78 da 95 56 0b 70 54 e5 15 be 53 1d db c1 8e 1d 67 da b1 68 a5 1d 8b ed 8c 88 0a 24 1a 25 d9 e7 dd cd 6e 36 09 81 80 09 e4 c5 23 09 a0 06 12 92 48 08 04 05 07 c4 07 a0 28 0a f2 12 14 54 08 88 8a 35 20 41 8a 42 76 ef 63 1f c9 26 41 92 50 1f 1d 04 21 cf dd fb 7e fc 3d ff dd dd 48 4d d4 f6 ce c7 e1 ec fd ff 7b be ff 3c fe 93 43 a8 aa a0 a8 b2 aa 68 aa a6 ab ba 2a 6b 92 a2 2b 32 52 41 2a 48 95 90 2e 21 0d 20 23 24 c3 aa ae 49 ba 2a e9 b2 a4 4b f8 a7 b1 84 a1 c7 15 d8 00 2f 15 1d 80 37 6b 3a ec 92 34 50 65 59 51 f1 06 24 f3 aa c4 73 32 4f c0 1e 55 d7 80 52 d3 35 1d 3f 20 55 5d Data Ascii: PNGIHDR((/:pHYs~IDATxVpTSgh$%n6#H(T5 ABvc&AP!~=HM{<Chk+2RAH.! #$I*K/7k:4PeYQ$s2OUR5? U]
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: f8 5c e3 91 41 8c f4 61 76 05 7b 8e b9 e2 2f d1 88 87 50 75 59 81 cf 63 2c 89 83 0f 1b 90 55 0e 8e 79 45 12 ae 5d 3b 2e 9d 9f 79 f9 f8 f8 7f 1f 9d 7c 79 cb ef 07 37 de 7c e9 cd 07 fb bf fd 27 84 54 91 65 4d 83 a0 68 31 29 81 93 46 58 04 49 4d f8 9b 78 d0 f0 e1 74 42 81 80 19 11 d4 90 71 bc 58 2c e1 14 b1 5f 9a 72 a2 8b cb 7f df ff 31 93 8a 7a 6e 45 5f 95 a2 be 13 03 c7 1e 15 df 1b 8f c2 6b 91 fe 1d 32 a2 f5 a3 27 f8 55 ef 82 86 dd 02 14 09 8a 51 8f e6 b1 11 23 1c e2 78 70 f1 01 21 7f 50 58 ca 80 aa 3e 1b fe 7e dc de 6f 88 57 82 87 ba 83 e7 2f b4 bc fc 2e bb ed 98 ff 4a f4 fb 66 5f 70 e3 7b d4 de cf 5a 39 45 3d e3 ef ea ba f8 5d cb 97 97 db ba ba fd e7 7b e8 ee 4b 1b f6 7e 70 8b 7d f5 9e 0f 5b fb 39 0e 7b ac c5 7d fe 2f 62 14 2f 17 14 f7 51 c3 b5 02 05 28 Data Ascii: \Aav{/PuYc,UyE];.y\|y7\|'TeMh1)FXIMxtBqX,_r1znE_k2'UQ#xp!PX>~oW/.Jf_p{Z9E=]{K~p}[9{}/b/Q(
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: 5c 39 eb 41 ad 69 c8 6f 46 41 80 29 21 4d 71 3d 60 42 01 33 f2 9b 50 ab 49 62 cd 2a 3d 93 2c aa b8 db 5d cd b7 65 a1 50 36 0a b9 d4 4e 9b ee c7 57 0e 7b 8c 2b 6e 54 8f 71 65 61 44 81 b8 cd 3d af ba e2 c6 d4 55 ef be 55 de 7c 64 76 d3 a1 82 13 8d 3f 01 58 3a 3c e7 83 23 79 fe e3 d3 d4 70 b6 75 ee e3 b7 91 ab 3e 3a 92 7f b2 31 ef d4 c1 bc 0f 0f 2e e8 3e 9d 2f b1 d8 ef 28 93 0e 61 e7 a1 ec 0d ee eb 72 4c 81 b4 f3 94 93 f7 b9 50 87 a5 a4 7e 31 31 79 3d 31 a5 9a 98 b4 82 98 54 47 4c 1e 0d f0 1e 56 93 6b 88 bb 57 2e 58 b8 48 fd 97 db 5e 5a 41 4c 7e f6 86 89 eb 88 a4 95 c4 fd b0 5a 33 6b 61 a9 14 cc 91 e0 36 42 9d 53 e0 b1 9d 1f e9 b1 88 3d 76 70 14 09 a1 2e ae 7d ec 86 a9 cf bc b2 75 f1 81 dd 85 6f ee 28 01 ec d9 51 8c 95 37 e6 ee dd 51 b2 6f 57 f1 5b 3b 4b f6 Data Ascii: \9AioFA)!Mq=`B3PIb*=,]eP6NW{+nTqeaD=UU\|dv?X:<#ypu>:1.>/(arLP~11y=1TGLVkW.XH^ZAL~Z3ka6BS=vp.}uo(Q7QoW[;K
2025-01-11 14:42:06 UTC	85	IN	Data Raw: 11 22 86 1d 73 60 e3 16 dc 9f c1 07 3c 65 e0 2e ab 78 33 06 83 26 22 4a 4f eb 0f c2 3e 3c 92 f1 23 e6 d0 f8 b8 84 b3 e2 4c 28 3f 01 7a 84 9e 90 46 84 1d aa cf c2 b3 96 5e b8 5a 30 b1 07 2c ff 01 cc f1 f2 10 fe eb a5 a0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: "s`<e.x3&"JO><#L(?zF^Z0,IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49806	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	1226	OUT	GET /lnternationalcardservices/lcs/files/woty-badge-populairste-financieel-1.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	1028	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: image/png Content-Length: 5065 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32987 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EmxDXhFPyNPI8Z5ctapHd4L3ihge9PBVGzrVEzhIfMemHp11I6fRIgAQzWPdcaZfNPor4NcgAa9%2FZZlTytZBXxxlNAbpb8z7%2B0qQdtrJsV%2BsCxEWxQbGWrhrHgRlq%2Fs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe518516a4f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2256&min_rtt=2255&rtt_var=847&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1804&delivery_rate=1294900&cwnd=237&unsent_bytes=0&cid=408746ac1a2079cf&ts=148&x=0"
2025-01-11 14:42:06 UTC	341	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3a 00 00 00 3a 08 06 00 00 00 e1 bb 4a 28 00 00 13 90 49 44 41 54 78 01 c5 5a 07 78 95 45 d6 7e bf 92 46 7a 02 24 84 1a c0 44 16 42 89 a8 28 45 c4 5f 01 51 f9 17 41 d4 7f 15 6c a1 08 58 b0 ec 0a e8 8f 5d 40 5d d0 55 64 6d 88 20 0a 22 88 02 2a 2b 45 8a 2e 35 09 20 a1 24 21 04 42 20 bd 97 af ec 3b 73 21 e4 e6 de 54 82 7b 78 c2 fd ca cc 7c 73 e6 b4 f7 9c 19 05 97 81 6c db 8e c8 cf cf 1f a8 eb 7a 1f c5 b6 3b db 40 34 1f 87 29 8a e2 cf 5f 95 ef 45 b3 42 fe 66 f1 d9 69 cb b6 93 79 bf 5d d3 b4 84 16 2d 5a 24 f0 99 89 66 26 05 cd 44 85 85 85 dd 54 55 bd 97 93 ff 5f 72 da bd c9 63 db 76 aa a2 aa 9b c9 fc 12 3f 3f bf 5f c8 74 25 9a 81 2e 89 51 32 a5 16 e6 e5 8d 54 75 fd 71 de 0e 44 33 2e 9c 1c 1f 38 ac 29 ca Data Ascii: PNGIHDR::J(IDATxZxE~Fz$DB(E_QAlX]@]Udm "*+E.5 $!B ;s!T{x\|slz;@4)_EBfiy]-Z$f&DTU_rcv??_t%.Q2TuqD3.8)
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: af 29 e1 e1 0d 96 6e 83 18 15 b6 58 5c 58 f8 1a 14 e5 69 34 b3 1d 36 95 e8 b0 36 f0 e7 21 5f 5f df d3 0d 6a 5f 5f 03 32 e9 45 75 5d 62 5b d6 18 34 90 14 b3 18 4a e6 2a c0 23 18 56 ab db 38 88 09 f5 cc 97 80 ee 0f 2b 78 00 7f 83 e5 7b c5 36 60 b5 1c c6 f5 d3 a1 64 2c 85 ed d3 11 76 e8 cd 68 c4 5a 1e d2 2d 6b a4 77 60 e0 b1 fa 1a d6 39 a2 64 b2 b8 f8 6b fe 8e 40 23 48 4b 7e 95 0a 76 1a ea a9 c5 30 af 7c 1b ea d9 b5 64 b0 3f 23 a8 0f 94 ac 1f c9 fc 70 a8 a5 29 50 33 96 c1 ea 38 4d 7c 07 4a 69 32 54 32 6f 5c 1f 0f db bb 6d 83 bf 45 06 92 35 db 1e ee 1d 10 70 a4 ae 76 6a 6d 2f 84 ba 4a 49 ba 61 52 29 11 f1 dd ae ad 2b cc ce cf 91 c1 f9 6c a8 f3 ce 82 92 b3 09 b6 6f 94 fc 53 f3 e8 47 42 6f 84 19 3d 17 96 4f 24 6c 8f 10 58 9d ff 0a 3b f0 5a 2e c0 88 3a 99 54 4a Data Ascii: )nX\Xi466!__j__2Eu]b[4J*#V8+x{6`d,vhZ-kw`9dk@#HK~v0\|d?#p)P38M\|Ji2T2o\mE5pvjm/JIaR)+loSGBo=O$lX;Z.:TJ
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: 97 03 1a 57 ad 93 a8 c5 f6 0a bf f8 5e 55 31 75 ca 34 a9 96 f1 09 f1 e8 d1 a3 07 32 cf 66 52 9a 67 d1 ef da 7e 58 f5 cd 2a 54 94 97 23 c0 df 1f c7 8e 1d a3 7d 66 c1 db db 1b 73 e6 cc 93 52 5b bf 61 3d 36 6e dc 88 1f 7f fa 11 15 15 15 ec df 1d be 2d 7c a5 64 3b 75 8c 94 df e8 3f 60 00 96 2e 5b ca 05 2c 02 33 28 f9 2c f5 c4 89 8b c2 a2 b6 89 a4 41 e2 e9 b0 3b 09 22 26 d3 0b 3f 40 55 34 9c 85 0a 0c 71 a8 ae 65 5d 83 1a 64 33 8f 54 8a 7e 87 fe db 00 28 d9 3f 53 b2 3f b8 78 b6 9e 3d 7b 22 36 36 16 4b 96 7c 86 2b a2 a2 e0 e1 e1 81 17 5f 9a 8d c1 83 6f a4 3a e7 a2 73 e7 2e 98 31 63 26 d6 ac fe 16 2d 5b b6 aa ea d7 26 22 02 9e 1e 9e 78 ea a9 a7 d1 be 7d 7b 7c f8 e1 3f f1 f9 e7 9f c3 1d e5 e7 e7 c1 d7 b7 05 c6 8d 1b 8f f5 eb 36 20 3a 2a fa e2 4b ce d1 10 b1 d4 af Data Ascii: W^U1u42fRg~XT#}fsR[a=6n-\|d;u?`.[,3(,A;"&?@U4qe]d3T~(?S?x={"66K\|+_o:s.1c&-[&"x}{\|?6 :K
2025-01-11 14:42:06 UTC	1369	IN	Data Raw: 21 10 08 a7 1d 09 a6 44 c8 e8 d8 b1 a3 54 df 60 e2 58 11 4b 05 f9 f9 fb a1 88 70 4e 30 22 9c ce 09 c2 39 c1 70 60 60 a0 a8 3a 3a c0 7f 68 28 4d c0 20 d8 3f 29 c7 10 fd c5 02 89 f8 2b c2 50 4d 52 93 5f 81 9a c3 3a 71 59 3a 0b 03 d9 32 6f 36 ae d9 42 a7 14 7b 51 6e b6 7d c8 cf df bf 87 c2 41 26 d0 4e 17 3a 0d 90 4a e3 3e fb 3d cb 95 27 65 65 01 cc ff 8c 98 c5 c4 94 a3 d0 10 2a a4 04 bf 5c be 5c 66 24 ad 5a b5 c2 65 21 96 52 3d 76 f4 91 f5 5e db 83 02 f1 0c 93 b1 de ec fe 81 8c 1c d5 e8 2b 32 3a 96 bb ef fa 06 d3 70 76 c9 22 b9 85 f8 a3 ab 96 a5 48 0e 0a a5 e1 c9 76 11 25 f0 c1 a2 85 68 d7 be 1d 91 d1 30 5c 16 22 33 46 2c 8b 64 5e 11 b2 da 5f 83 b9 2a a2 10 e5 16 a3 4e af 78 82 13 3b cb eb 8b 41 ca 64 06 7f 78 2a f5 bd 5c 56 e0 c4 bd f8 95 ea cb 74 ad 3e 12 Data Ascii: !DT`XKpN0"9p``::h(M ?)+PMR_:qY:2o6B{Qn}A&N:J>='ee\\f$Ze!R=v^+2:pv"Hv%h0\"3F,d^_Nx;Adx*\Vt>
2025-01-11 14:42:06 UTC	617	IN	Data Raw: 2e 6b 23 aa 10 5c 75 35 ed 1d 8e c0 1a 53 2f 96 5d 3a 3d 01 35 e1 2f 0e 26 c9 a0 d5 75 36 27 3a 95 50 6d ad 3c 48 75 81 f4 c4 fb ce 3b 13 b1 0d d8 86 b1 7a 9d 63 b3 99 2a 2a aa ee 62 11 f5 84 fb 64 08 11 89 b4 d8 ba 57 59 d6 51 f2 77 38 c6 a9 b9 bf 22 c6 d4 f5 f1 75 31 79 7e d6 75 53 45 51 51 af 0a db fe 81 97 ae 7e 9c 5b fb 0a 6b bf b6 77 47 da e8 c3 b4 ad 15 dc 19 1f 08 83 aa 26 4a 31 ea c9 85 b2 62 61 52 42 82 c4 09 15 ed f0 63 32 24 19 7d 56 4b 15 14 27 58 b4 03 e3 64 8c 36 62 09 50 b8 55 a9 26 bf ce fb 2b a9 b2 ab 61 13 82 8a 64 da f6 72 3d 7f 64 9f 67 92 89 c9 e2 7a d8 a8 3f 26 78 fa f9 c5 eb 1e 1e 62 23 26 c9 e5 25 57 58 a8 1c cc 02 4a d9 df 51 e8 a6 74 25 62 49 5f c4 2d 9e 8e 74 ff 1f c9 a6 0a 93 63 ed d8 4c c7 b5 a8 49 9d 74 a4 c0 56 eb 11 fc 1b Data Ascii: .k#\u5S/]:=5/&u6':Pm<Hu;zc**bdWYQw8"u1y~uSEQQ~[kwG&J1baRBc2$}VK'Xd6bPU&+adr=dgz?&xb#&%WXJQt%bI_-tcLItV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49807	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	1190	OUT	GET /lnternationalcardservices/lcs/files/0-2 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	924	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wKvNrBgMzssrj6G%2FgtlGDjAaP%2BRGFdJa4AY0yNS%2BqwXdjJXtGF5NCUqlFKItHG4mDTsriCy3rFOdRhQ72r2%2BMQulxco6R%2BahQGGNVM5UqGWCLCJwk5x0y%2FMoYCOqijI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe75873729f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2001&min_rtt=1996&rtt_var=759&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1768&delivery_rate=1432777&cwnd=169&unsent_bytes=0&cid=2693ae06407cdc1a&ts=377&x=0"
2025-01-11 14:42:06 UTC	445	IN	Data Raw: 34 65 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 4e4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2025-01-11 14:42:06 UTC	814	IN	Data Raw: 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 39 30 30 35 61 62 65 37 35 38 37 33 37 32 39 66 27 2c 74 3a 27 4d 54 63 7a 4e 6a 59 77 4e 6a 55 79 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 61 2e 6e 6f 6e 63 65 3d 27 27 3b 61 2e 73 72 63 3d 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 73 63 72 69 70 74 73 2f 6a 73 64 2f 6d 61 69 6e 2e 6a 73 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 22 3b 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 Data Ascii: .__CF$cv$params={r:'9005abe75873729f',t:'MTczNjYwNjUyNi4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName(
2025-01-11 14:42:06 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2025-01-11 14:42:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49808	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:06 UTC	931	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/9005abd2da7d0f77 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:06 UTC	740	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 11 Jan 2025 14:42:06 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y8hEt%2FRwEWBhTW2JCl%2BgDzOpzSWNmEOaY2wkUA48cDvXLrGhEJXATocz9r0SgVenxgtzD57R7OJkVV5ThHTyAxLsWGpUp0R%2B4VMcKATBOCC3cHzVkvoNmA0%2B6J4xNgc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abe7591f5e80-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1664&min_rtt=1655&rtt_var=639&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1509&delivery_rate=1689814&cwnd=218&unsent_bytes=0&cid=326739713dd1da6d&ts=196&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49818	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:07 UTC	1190	OUT	GET /lnternationalcardservices/lcs/files/0-1 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:07 UTC	918	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 14:42:07 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2FHzzKB8ft0fnzlPUj5DIHcjCf67f5uJx0yQIYlHk0ZGoqLZ6qIdLoSnOmnkKTf2k5R%2BYfymzPCYCeg3RBkTaqMePL2Kkqc9Ml5L6%2BlV9JRlCux0YtSSD5MPvQtJRbo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abeadf2c425c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1624&min_rtt=1617&rtt_var=611&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1768&delivery_rate=1805813&cwnd=226&unsent_bytes=0&cid=a3c038451b1d38a6&ts=344&x=0"
2025-01-11 14:42:07 UTC	451	IN	Data Raw: 34 65 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 4e5<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2025-01-11 14:42:07 UTC	809	IN	Data Raw: 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 39 30 30 35 61 62 65 61 64 66 32 63 34 32 35 63 27 2c 74 3a 27 4d 54 63 7a 4e 6a 59 77 4e 6a 55 79 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 61 2e 6e 6f 6e 63 65 3d 27 27 3b 61 2e 73 72 63 3d 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 73 63 72 69 70 74 73 2f 6a 73 64 2f 6d 61 69 6e 2e 6a 73 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 22 3b 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 Data Ascii: cv$params={r:'9005abeadf2c425c',t:'MTczNjYwNjUyNy4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head'
2025-01-11 14:42:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49819	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:07 UTC	931	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/9005abdb08735e72 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:07 UTC	738	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 11 Jan 2025 14:42:07 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bJZsWshxOaRFr90Mo3ao32HemLQ82fBRkCINlF1uaVyEWH44%2BLeIfS4Z9Gf7dVGYq4hvO%2FaVwwGKTpfgNt88prA3KUqPcAmViy79xeO0dUQTCdIA5IRwbz3xwYQtn%2Fk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abeadf3641f3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1656&min_rtt=1656&rtt_var=621&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1509&delivery_rate=1762220&cwnd=223&unsent_bytes=0&cid=f082b60ed465886b&ts=171&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49821	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:07 UTC	1565	OUT	GET /lnternationalcardservices/lcs/files/0 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de; cf_clearance=R1Ffm6HxoXzMHTriC7xE6Z_YD8wfGpuJkjyBG1gBVmc-1736606525-1.2.1.1-JL7si6DerFkiohHBs9e6DChMym7jr4vXjCYjI66eDqgibgT3QErbwJe0gn_s.V5F2wHFzxa2VgPt.W5BD.qGzGxr6.toiigj7B.ABvqtcPz4FtC8b0MFp8Y8ydEBTjTWo0RJYROBEk7dxvQzUw_6OTfQ.wjRTy.S7I0El4DxmE_aEJ1HDbEcHaBknRtjrVcJkB03vE7jVd1ZzpeuCb7wVuoRdo3llyaIjpnQHnZlKaPHrBcvhdstFkjODKFLIM62Y5GqQg1UmtZ92bm_1gja5ZHwEJ5qB_CmGIdk_XlUsmE
2025-01-11 14:42:07 UTC	916	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 14:42:07 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dw2vDUw53gq5gEWc4c5x8MWz6XBm8WRcXv%2F1h98dFDPv23qAe0xfgtP0GCxrKkFupBjeAm5GIRcr0hGsodx9aPxb1DtWeC5G1YQj6N%2F497DRkdj4KyHfu8l9WwCOSS0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abeac8cb1851-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1720&min_rtt=1714&rtt_var=655&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2143&delivery_rate=1655328&cwnd=214&unsent_bytes=0&cid=0f5d5676323b1d49&ts=303&x=0"
2025-01-11 14:42:07 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2025-01-11 14:42:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49822	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:07 UTC	931	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/9005abdd2afd72b9 HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:07 UTC	746	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 11 Jan 2025 14:42:07 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SRu0IyAWcvp0RgEInSDClJtL4%2BpExJXjuNc%2FWEX%2FXBXReA6aVyiP4scSp6x9cBpAVtg9Jt%2BNFuESCGWbO0BDbkMOh04lkzcIdGuLGvRyp%2B86%2FSMIMSMTGaOx%2BKzAeBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abeb0d0d42fb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1663&min_rtt=1652&rtt_var=642&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1509&delivery_rate=1674311&cwnd=212&unsent_bytes=0&cid=9c53a67ddcd07609&ts=171&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49824	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:07 UTC	919	OUT	GET /lnternationalcardservices/lcs/files/4.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:07 UTC	1022	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:07 GMT Content-Type: image/png Content-Length: 2415 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32988 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QVN1z%2BPsuo7VBN2gx4Cd3ccrHIKdFt8FjF39HrRLjKrYEwZOD6AjVDudRuEgQRlDvD9KLzDggpoJHjAVO9yuThf1h3TBKfbJkdcmthjANM86U42E2oeNAKEYgdAhsfg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abeb297cde9a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1492&min_rtt=1486&rtt_var=561&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1497&delivery_rate=1965006&cwnd=194&unsent_bytes=0&cid=67ee6d64cdc0177e&ts=147&x=0"
2025-01-11 14:42:07 UTC	347	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 09 21 49 44 41 54 78 da bd 58 fb 53 5a d9 1d e7 6f e9 b6 d9 6e 7c 20 17 30 e6 b9 c6 76 b3 6d 93 ed 34 dd a4 db ce 64 a6 79 ec 4c d2 24 b3 dd f4 b1 b3 6d b2 31 70 ef 05 df e6 31 59 e3 6a b2 89 89 ab 51 79 dd 97 20 2a 1a 44 45 22 f8 42 83 80 8a a8 a0 02 3e 10 7c f0 ea b9 17 f0 d1 74 da fe 42 66 ce 30 70 ce b9 f7 7b 3e df ef e7 fb f9 7e 0f 2c 85 88 23 17 65 e3 28 1b 87 21 1c 85 08 94 9b a2 81 23 10 8e 70 71 94 43 c1 1c 12 3e c0 6a 28 e2 34 89 0e 51 48 3a 3d 8b 70 52 6c 18 22 10 2e 21 3c aa 40 39 2c 0a e6 11 68 1a 01 73 69 b8 48 aa 11 33 b6 d1 34 0a fd 80 45 1f 21 ee 04 e6 33 75 86 09 94 83 d3 Data Ascii: PNGIHDR((/:pHYs~!IDATxXSZon\| 0vm4dyL$m1p1YjQy *DE"B>\|tBf0p{>~,#e(!#pqC>j(4QH:=pRl".!<@9,hsiH34E!3u
2025-01-11 14:42:07 UTC	1369	IN	Data Raw: c1 ed a7 de da 90 9c 8c bf 8d bb 13 e3 c4 71 98 d9 9d b1 e7 d5 89 99 9d 81 72 f7 ec 47 fe fd 27 91 fc 9e 38 04 02 ed 46 1c 37 96 90 2d 52 c4 25 51 88 44 f7 9c 1a 4f 00 02 ab 3c b0 81 d8 b5 4a ec 9a 27 45 50 fc d9 5d 8f c7 51 25 a1 ef 22 2f 8b 61 39 84 21 10 85 40 cd 02 6e 93 20 53 2a e0 60 77 20 0c 06 69 97 05 b4 8c 82 0f 92 82 1c ac 20 93 42 d2 b0 9b e9 b2 7c b6 0c c9 c0 60 30 20 39 cc 63 36 64 4a 6e a7 37 de 61 4b 05 19 32 41 a6 5c c0 56 08 d8 98 20 4b 21 e4 28 60 0e 06 03 31 ce dc a5 1e 49 c3 b4 66 d1 b9 95 4d 21 6c 0c e1 da 74 15 b3 23 98 59 73 df 20 ff ba b3 e6 82 fa de 29 4a c4 a3 d0 f4 86 db 99 d2 d2 3c 83 e4 cf d6 b6 32 4b eb fd 61 1c 36 d4 dd e8 7e 72 5e 7d ef 13 45 c9 47 7d c4 3f 67 cd 72 d7 48 ab d3 24 b7 ea 6b cc 1d 0f 8c 4a d4 d4 f8 17 fd d3 Data Ascii: qrG'8F7-R%QDO<J'EP]Q%"/a9!@n S*`w i B\|`0 9c6dJn7aK2A\V K!(`1IfM!lt#Ys )J<2Ka6~r^}EG}?grH$kJ
2025-01-11 14:42:07 UTC	699	IN	Data Raw: de da 6b 9a 8a 4f 55 65 79 aa f2 e3 ad 0f 4e 76 54 9e e9 7a 7e d1 20 fb fb b0 aa c8 da 55 e5 18 92 2d 4e 74 03 1d 04 a9 3e d0 2c 6e f8 86 a3 04 e4 80 f9 18 c3 2f 16 10 33 9c 8e 36 9f 40 32 f1 e2 9f 07 3c a3 ab 1e c7 d4 00 3e a2 2e ed ab bb da 56 f1 6b 09 72 6c aa ef 19 10 8a 40 20 b0 e4 b2 2d 8e 77 b9 8d 8d d6 8e 0a 13 0e eb 7f b8 da f1 08 18 3e de 5c fa 61 cb fd 93 9a 47 67 b5 35 97 fa a4 7f 1b 52 16 8e 6b bf 9b 35 35 4d db 4d 2b 7e 4f 60 71 50 51 72 42 8e 66 90 28 9b 80 b3 99 66 8f c3 8a b7 42 a0 3a e1 70 06 51 f2 b3 8d 95 51 bf cf e1 18 a2 80 80 f4 d5 5f 6f ab 38 4d 8a f9 12 e1 41 8b f6 49 68 63 2e b0 32 37 3f 39 64 1f a6 2c da aa 41 02 d5 d7 5d ef a8 3c ab 2a cf 53 96 e5 aa 69 c4 67 75 2f 3e 37 c8 bf 1a a2 11 57 bb 06 65 cb b3 c6 c0 82 41 f3 fd 25 59 Data Ascii: kOUeyNvTz~ U-Nt>,n/36@2<>.Vkrl@ -w>\aGg5Rk55MM+~O`qPQrBf(fB:pQQ_o8MAIhc.27?9d,A]<*Sigu/>7WeA%Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49823	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:07 UTC	919	OUT	GET /lnternationalcardservices/lcs/files/3.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:07 UTC	1022	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:07 GMT Content-Type: image/png Content-Length: 2743 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32988 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3hStiJrcu2u9igDmL1Ls4ISrVcrgwZgUNvDsniqKRJL1adZ9F7JAMmq4ESbzP7PItcr5UcvmUYRkIwwQz3R2HdKWzO68E%2BllMYW0lXomT2uXynyQDaq4iFsfAZ57lEM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abeb3c1b4270-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1884&min_rtt=1815&rtt_var=820&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1497&delivery_rate=1230509&cwnd=225&unsent_bytes=0&cid=3d7046733cf89c4a&ts=157&x=0"
2025-01-11 14:42:07 UTC	347	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 0a 69 49 44 41 54 78 da b5 57 79 58 13 d7 16 4f 5d aa 44 32 93 49 32 33 49 a4 2e 55 e9 eb f2 5a 9f b8 90 40 92 99 2c 28 a2 f8 54 b4 b2 28 5a b6 8a 4a 0b ad 7d 56 8b ad 15 b0 a2 4f 01 b5 ad 95 16 8b 05 ba 97 62 2b 08 49 50 01 59 54 5c e0 09 b5 08 d5 da d7 da 5a b1 05 05 93 00 3d 77 26 61 51 fb f9 8f 7c df f9 e6 bb c9 dc b9 bf f3 3b f7 dc 73 7f 47 20 97 fa 4a 48 5f 11 cd 8a 49 03 4e eb c5 94 5e 4c 1b 1e b8 e1 60 14 8b 53 7a 8c 32 51 a4 0a 97 b3 02 5a aa c5 68 bd bb 9c 91 c8 18 18 88 49 76 50 80 29 3d 98 98 62 c5 94 01 a3 c0 0f 9d 40 42 ea 31 da 80 d1 2c 41 b2 e0 d7 20 31 06 48 40 01 56 00 2f Data Ascii: PNGIHDR((/:pHYs~iIDATxWyXO]D2I23I.UZ@,(T(ZJ}VOb+IPYT\Z=w&aQ\|;sG JH_IN^L`Sz2QZhIvP)=b@B1,A 1H@V/
2025-01-11 14:42:07 UTC	1369	IN	Data Raw: 1b 09 99 9a 03 a6 78 c6 06 17 09 d6 45 9a 75 32 a3 ee cb d8 e8 e4 ea b2 7b 32 16 93 0c 02 96 9b 24 14 cf 18 fd 8b 96 20 10 a4 96 a0 34 04 87 4a d0 be 62 0a 8c c5 f9 d5 21 01 69 ad 98 66 08 5a 47 50 3a d8 2a 82 33 8c 32 8a 28 94 9e 18 8d ce 05 86 d2 07 ed 1a 41 72 6b 92 3c 6a df 1e e3 94 0e 96 12 b8 e2 60 00 54 09 c9 c0 3c 09 65 94 50 26 82 84 27 4b 50 0c ef 38 97 14 b0 37 30 8d 9f 60 24 9c 3f 81 b7 1a 97 ab 09 5a 43 c8 c1 7c c4 c8 d4 62 5a 23 01 54 9a 91 70 2b f0 29 0d 4f 70 51 4c a2 03 ec 62 cc d1 05 18 09 bc 90 ea c5 32 06 e6 c1 d8 e9 2f 3a f8 b0 8a 81 44 51 82 2f 39 36 32 38 81 68 20 95 eb a5 e0 96 54 8f 4b 59 f4 a1 0c bc 87 57 3a 38 33 80 21 a6 34 b8 33 66 7d 8c 31 8a 67 8c 6a 16 aa 5c 40 51 24 f1 96 8d f6 91 8f 65 28 0f 86 54 b2 12 3e 44 e0 84 dc cf Data Ascii: xEu2{2$ 4Jb!ifZGP:*32(Ark<j`T<eP&'KP870`$?ZC\|bZ#Tp+)OpQLb2/:DQ/9628h TKYW:83!43f}1gj\@Q$e(T>D
2025-01-11 14:42:07 UTC	1027	IN	Data Raw: 0b 8c 7f b4 97 4f d8 13 53 16 2a c6 e9 65 4a d5 82 e0 b5 1b 36 ef db bc 35 6b 47 fa 47 b0 f1 07 72 8a 0e 16 1e 3f 5e 53 f7 7d d3 65 f8 f6 dd 7d f9 c3 dc a6 de 03 98 97 2c 12 85 9e 03 4e e8 e8 b0 a1 02 92 91 1b b3 7a cb 33 d3 16 65 66 7f cd 9d e3 ce d6 3f 6e d4 37 34 1d ad a8 ff 24 ff 68 6a 46 ee aa 84 6d f3 16 c5 4f 99 b1 64 ec 63 f3 14 e3 fd 27 3d bd 50 cd 46 cc 0f 8a 5f b9 26 65 53 ca be cc 0f 0b a0 d4 9c 6f 68 01 e0 ad 3b 0e f0 8c c5 77 33 c6 50 a8 0d 0f b9 a9 16 2e 8d bf 85 b2 1a 0a 48 4e 74 6c f2 34 9f 65 9a 99 91 90 6e 90 d7 ad ad 7f c2 42 c5 96 ca f7 b3 bf de b4 65 5f 64 ec 9b 01 ff 8e 7b c6 eb d9 71 13 e7 3e f6 e4 82 a9 aa a5 7e 01 ab 97 2c dd 10 b7 76 7b d2 f6 cc ac 9c 83 66 eb a9 86 86 cb e0 f4 b2 e7 d6 0d 73 f3 92 d1 7e 48 35 0c 60 cc 25 ba 44 Data Ascii: OS*eJ65kGGr?^S}e},Nz3ef?n74$hjFmOdc'=PF_&eSoh;w3P.HNtl4enBe_d{q>~,v{fs~H5`%D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49825	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:07 UTC	953	OUT	GET /lnternationalcardservices/lcs/files/woty-badge-populairste-financieel-1.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:07 UTC	1028	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:07 GMT Content-Type: image/png Content-Length: 5065 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:18 GMT CF-Cache-Status: HIT Age: 32988 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vbPAQ88ba%2Bn%2BKzxQh67RQMq8fkX66Whylua7ZNh8ejG9WVeql5gQtECsqGG4qU1mMWL8BqwvLG%2F5KxU5I%2FiZKt6mPzyWQWstZwUlPrrouruHVlnsydF4wDvjycF3kWg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abedff538c69-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1819&min_rtt=1817&rtt_var=685&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1531&delivery_rate=1593016&cwnd=217&unsent_bytes=0&cid=181ce911a73a8ea8&ts=165&x=0"
2025-01-11 14:42:07 UTC	341	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3a 00 00 00 3a 08 06 00 00 00 e1 bb 4a 28 00 00 13 90 49 44 41 54 78 01 c5 5a 07 78 95 45 d6 7e bf 92 46 7a 02 24 84 1a c0 44 16 42 89 a8 28 45 c4 5f 01 51 f9 17 41 d4 7f 15 6c a1 08 58 b0 ec 0a e8 8f 5d 40 5d d0 55 64 6d 88 20 0a 22 88 02 2a 2b 45 8a 2e 35 09 20 a1 24 21 04 42 20 bd 97 af ec 3b 73 21 e4 e6 de 54 82 7b 78 c2 fd ca cc 7c 73 e6 b4 f7 9c 19 05 97 81 6c db 8e c8 cf cf 1f a8 eb 7a 1f c5 b6 3b db 40 34 1f 87 29 8a e2 cf 5f 95 ef 45 b3 42 fe 66 f1 d9 69 cb b6 93 79 bf 5d d3 b4 84 16 2d 5a 24 f0 99 89 66 26 05 cd 44 85 85 85 dd 54 55 bd 97 93 ff 5f 72 da bd c9 63 db 76 aa a2 aa 9b c9 fc 12 3f 3f bf 5f c8 74 25 9a 81 2e 89 51 32 a5 16 e6 e5 8d 54 75 fd 71 de 0e 44 33 2e 9c 1c 1f 38 ac 29 ca Data Ascii: PNGIHDR::J(IDATxZxE~Fz$DB(E_QAlX]@]Udm "*+E.5 $!B ;s!T{x\|slz;@4)_EBfiy]-Z$f&DTU_rcv??_t%.Q2TuqD3.8)
2025-01-11 14:42:07 UTC	1369	IN	Data Raw: af 29 e1 e1 0d 96 6e 83 18 15 b6 58 5c 58 f8 1a 14 e5 69 34 b3 1d 36 95 e8 b0 36 f0 e7 21 5f 5f df d3 0d 6a 5f 5f 03 32 e9 45 75 5d 62 5b d6 18 34 90 14 b3 18 4a e6 2a c0 23 18 56 ab db 38 88 09 f5 cc 97 80 ee 0f 2b 78 00 7f 83 e5 7b c5 36 60 b5 1c c6 f5 d3 a1 64 2c 85 ed d3 11 76 e8 cd 68 c4 5a 1e d2 2d 6b a4 77 60 e0 b1 fa 1a d6 39 a2 64 b2 b8 f8 6b fe 8e 40 23 48 4b 7e 95 0a 76 1a ea a9 c5 30 af 7c 1b ea d9 b5 64 b0 3f 23 a8 0f 94 ac 1f c9 fc 70 a8 a5 29 50 33 96 c1 ea 38 4d 7c 07 4a 69 32 54 32 6f 5c 1f 0f db bb 6d 83 bf 45 06 92 35 db 1e ee 1d 10 70 a4 ae 76 6a 6d 2f 84 ba 4a 49 ba 61 52 29 11 f1 dd ae ad 2b cc ce cf 91 c1 f9 6c a8 f3 ce 82 92 b3 09 b6 6f 94 fc 53 f3 e8 47 42 6f 84 19 3d 17 96 4f 24 6c 8f 10 58 9d ff 0a 3b f0 5a 2e c0 88 3a 99 54 4a Data Ascii: )nX\Xi466!__j__2Eu]b[4J*#V8+x{6`d,vhZ-kw`9dk@#HK~v0\|d?#p)P38M\|Ji2T2o\mE5pvjm/JIaR)+loSGBo=O$lX;Z.:TJ
2025-01-11 14:42:07 UTC	1369	IN	Data Raw: 97 03 1a 57 ad 93 a8 c5 f6 0a bf f8 5e 55 31 75 ca 34 a9 96 f1 09 f1 e8 d1 a3 07 32 cf 66 52 9a 67 d1 ef da 7e 58 f5 cd 2a 54 94 97 23 c0 df 1f c7 8e 1d a3 7d 66 c1 db db 1b 73 e6 cc 93 52 5b bf 61 3d 36 6e dc 88 1f 7f fa 11 15 15 15 ec df 1d be 2d 7c a5 64 3b 75 8c 94 df e8 3f 60 00 96 2e 5b ca 05 2c 02 33 28 f9 2c f5 c4 89 8b c2 a2 b6 89 a4 41 e2 e9 b0 3b 09 22 26 d3 0b 3f 40 55 34 9c 85 0a 0c 71 a8 ae 65 5d 83 1a 64 33 8f 54 8a 7e 87 fe db 00 28 d9 3f 53 b2 3f b8 78 b6 9e 3d 7b 22 36 36 16 4b 96 7c 86 2b a2 a2 e0 e1 e1 81 17 5f 9a 8d c1 83 6f a4 3a e7 a2 73 e7 2e 98 31 63 26 d6 ac fe 16 2d 5b b6 aa ea d7 26 22 02 9e 1e 9e 78 ea a9 a7 d1 be 7d 7b 7c f8 e1 3f f1 f9 e7 9f c3 1d e5 e7 e7 c1 d7 b7 05 c6 8d 1b 8f f5 eb 36 20 3a 2a fa e2 4b ce d1 10 b1 d4 af Data Ascii: W^U1u42fRg~XT#}fsR[a=6n-\|d;u?`.[,3(,A;"&?@U4qe]d3T~(?S?x={"66K\|+_o:s.1c&-[&"x}{\|?6 :K
2025-01-11 14:42:07 UTC	1369	IN	Data Raw: 21 10 08 a7 1d 09 a6 44 c8 e8 d8 b1 a3 54 df 60 e2 58 11 4b 05 f9 f9 fb a1 88 70 4e 30 22 9c ce 09 c2 39 c1 70 60 60 a0 a8 3a 3a c0 7f 68 28 4d c0 20 d8 3f 29 c7 10 fd c5 02 89 f8 2b c2 50 4d 52 93 5f 81 9a c3 3a 71 59 3a 0b 03 d9 32 6f 36 ae d9 42 a7 14 7b 51 6e b6 7d c8 cf df bf 87 c2 41 26 d0 4e 17 3a 0d 90 4a e3 3e fb 3d cb 95 27 65 65 01 cc ff 8c 98 c5 c4 94 a3 d0 10 2a a4 04 bf 5c be 5c 66 24 ad 5a b5 c2 65 21 96 52 3d 76 f4 91 f5 5e db 83 02 f1 0c 93 b1 de ec fe 81 8c 1c d5 e8 2b 32 3a 96 bb ef fa 06 d3 70 76 c9 22 b9 85 f8 a3 ab 96 a5 48 0e 0a a5 e1 c9 76 11 25 f0 c1 a2 85 68 d7 be 1d 91 d1 30 5c 16 22 33 46 2c 8b 64 5e 11 b2 da 5f 83 b9 2a a2 10 e5 16 a3 4e af 78 82 13 3b cb eb 8b 41 ca 64 06 7f 78 2a f5 bd 5c 56 e0 c4 bd f8 95 ea cb 74 ad 3e 12 Data Ascii: !DT`XKpN0"9p``::h(M ?)+PMR_:qY:2o6B{Qn}A&N:J>='ee\\f$Ze!R=v^+2:pv"Hv%h0\"3F,d^_Nx;Adx*\Vt>
2025-01-11 14:42:07 UTC	617	IN	Data Raw: 2e 6b 23 aa 10 5c 75 35 ed 1d 8e c0 1a 53 2f 96 5d 3a 3d 01 35 e1 2f 0e 26 c9 a0 d5 75 36 27 3a 95 50 6d ad 3c 48 75 81 f4 c4 fb ce 3b 13 b1 0d d8 86 b1 7a 9d 63 b3 99 2a 2a aa ee 62 11 f5 84 fb 64 08 11 89 b4 d8 ba 57 59 d6 51 f2 77 38 c6 a9 b9 bf 22 c6 d4 f5 f1 75 31 79 7e d6 75 53 45 51 51 af 0a db fe 81 97 ae 7e 9c 5b fb 0a 6b bf b6 77 47 da e8 c3 b4 ad 15 dc 19 1f 08 83 aa 26 4a 31 ea c9 85 b2 62 61 52 42 82 c4 09 15 ed f0 63 32 24 19 7d 56 4b 15 14 27 58 b4 03 e3 64 8c 36 62 09 50 b8 55 a9 26 bf ce fb 2b a9 b2 ab 61 13 82 8a 64 da f6 72 3d 7f 64 9f 67 92 89 c9 e2 7a d8 a8 3f 26 78 fa f9 c5 eb 1e 1e 62 23 26 c9 e5 25 57 58 a8 1c cc 02 4a d9 df 51 e8 a6 74 25 62 49 5f c4 2d 9e 8e 74 ff 1f c9 a6 0a 93 63 ed d8 4c c7 b5 a8 49 9d 74 a4 c0 56 eb 11 fc 1b Data Ascii: .k#\u5S/]:=5/&u6':Pm<Hu;zc**bdWYQw8"u1y~uSEQQ~[kwG&J1baRBc2$}VK'Xd6bPU&+adr=dgz?&xb#&%WXJQt%bI_-tcLItV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49827	104.21.9.2	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:08 UTC	1596	OUT	GET /lnternationalcardservices/lcs/files/favicon-144x144-withoutlines.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal-nl.ru/lnternationalcardservices/selecteren.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de; cf_clearance=KWxHOYc5VLIz2KurtpHEyq5GACaOl0iva7Hrr6ZU7Pw-1736606526-1.2.1.1-PryqVippeYUwxkFemS826drsDiFxYb21YAQJuIRzgcjzeDJv2ZRGHdcmeDcJU7qiXH4GPvlrmSAt9NETUz6jjNRE3x.kLMzIoUUYOu7QteO559mSYGyxHNbVnxufsrtSFAZ4H9agiihpzLwC56hsGFSAikR21lCeD7gfFaaJzZxE2o6XUAm5RzahmAfu36OPv.RMHYhK1cQBQX94q_xvm6g1S2MtvYm4DdQkukeh.3Nr0h8OmlOU1vugfqV.l2EtT8t.r3DLqD5S3usUtuFjawjZWamDu.0wb92M1UljIYM
2025-01-11 14:42:08 UTC	1028	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:08 GMT Content-Type: image/png Content-Length: 2128 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:19 GMT CF-Cache-Status: HIT Age: 32987 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TqXt6svga2K64CsXHtJ4%2BamRLHIvGgPZAWf1CaeLODNDigD%2BkKLjHPHzas7nUQv1wkICOhsUKMBhxcdqF978t3qPQw125m3IckwQOMSUlWFxkz6U%2BkS3K%2FG3Zt6iY60%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abf358db430e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2023&min_rtt=1620&rtt_var=1414&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2174&delivery_rate=602186&cwnd=186&unsent_bytes=0&cid=da26b53fae7a0345&ts=236&x=0"
2025-01-11 14:42:08 UTC	341	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 e5 49 44 41 54 78 01 ed 9d 4d 68 54 57 14 c7 6f 4b 37 a6 a2 85 a4 d5 85 93 45 15 22 68 b5 ba 10 4c 56 05 a3 76 15 54 d0 ba 88 60 a5 45 a1 a5 82 89 ee 6a e2 ce 24 82 c5 52 0b c5 76 61 a1 28 68 eb aa 6a 5c 76 14 ba 50 94 04 26 a0 42 67 84 5a 48 16 8a c6 65 7b ff 2f be 99 3b f1 73 e6 9c fb ee 7d cd ff 07 92 04 8d 79 79 f7 f7 ce fd 38 e7 de f7 c6 3b 8b 3f fa d7 10 d2 24 6f 1a 42 04 50 20 22 82 02 11 11 14 88 88 a0 40 44 04 05 22 22 28 10 11 41 81 88 08 0a 44 44 50 20 22 82 02 11 11 14 88 88 a0 40 44 04 05 Data Ascii: PNGIHDRFpHYssRGBgAMAaIDATxMhTWoK7E"hLVvT`Ej$Rva(hj\vP&BgZHe{/;s}yy8;?$oBP "@D""(ADDP "@D
2025-01-11 14:42:08 UTC	1369	IN	Data Raw: 41 81 88 08 0a 44 44 50 20 22 82 02 11 11 6f 19 45 5a 16 bc 6d d6 6c ee 32 cd 30 59 b9 6f 26 ae dd 32 3e 68 5d b2 c8 b4 2c 9c 6f da 9e 7e d4 66 e2 da 4d 7b fd ff 3c f7 ef 70 4f 5a 0b 8b 4d fb 8a a5 26 14 25 7b 7d 53 2f b8 3e 29 6a 02 b5 15 16 99 81 2b df 27 37 ac 59 2e 8c 9c 36 17 8e 9d 36 52 3a d6 af 36 ed 2b 97 5a 99 d7 db 8f cb 44 d7 f4 32 a6 1f 3e 32 a7 be 1a 7e 46 1e fc bc ee cf b6 9a 8e ce 55 66 79 e7 6a 13 03 27 76 0f 98 1b 17 af 1a 6d de d0 7a 5b cf 97 3f 1d 6e 3a fa b8 f4 af eb 6d ea 69 49 1b ad 6b c7 c6 44 66 df 20 62 1e dd d6 5f 77 ad 05 2b ed ce c1 bd d1 48 e3 02 c9 0f da 7b ab 8d 5a 04 9a b7 40 a7 6b 40 e3 37 22 10 fe 7d 4f 5f af e9 da be d1 64 45 79 ec b6 19 b2 f2 4c 3f 7c 9c 7c 0d 79 7b fa 76 59 81 b7 98 58 f1 f5 50 a9 8e 81 b2 24 8d 38 90 Data Ascii: ADDP "oEZml20Yo&2>h],o~fM{<pOZM&%{}S/>)j+'7Y.66R:6+ZD2>2~FUfyj'vmz[?n:miIkDf b_w+H{Z@k@7"}O_dEyL?\|\|y{vYXP$8
2025-01-11 14:42:08 UTC	418	IN	Data Raw: 51 d2 aa f5 16 9f b9 8c 8f e8 03 72 53 13 4d 89 9a 07 e3 49 bc a2 c1 07 b9 2a aa 87 44 78 ef 15 67 67 8d 81 77 9a f9 4a 28 e7 6e 57 06 32 f6 78 d5 52 1e 8b da 43 80 da a4 1b 17 af 19 5f e4 72 5b 0f 6a 6e 20 11 6e 0e a3 d1 f3 49 bb 2d df db b1 73 bd 2f 0c 37 e7 e0 ba 5d 14 69 16 88 ce 87 37 ec 53 af 45 7a 1e 6a d9 78 ad 3e b6 99 ed c9 c5 a7 15 80 5d 3b ba 93 d7 6e ae f5 70 9e f3 e4 bd 9a a0 95 f1 bb 51 be d6 52 eb 38 bf 46 50 7b 67 ea 4c 19 e9 b0 fd d8 5c b9 24 42 2e 06 c9 1a 39 30 64 ca 3b 3a 3f b4 8d fc 41 72 ee 10 b2 e9 92 72 d2 d9 a7 9d e1 ff 1a b8 f2 5d d3 bf ab 16 b8 67 49 bd 92 1d 17 e2 e0 87 10 95 97 6a 02 a5 14 9a 68 ac e4 40 ef f2 7d ef f5 cb 48 d6 62 2b 51 23 d7 57 19 bb fd c2 eb 2a 08 c5 6c 16 74 d7 4f 9c a3 ee 42 a2 2e 10 99 5b f0 70 05 22 82 Data Ascii: QrSMIDxggwJ(nW2xRC_r[jn nI-s/7]i7SEzjx>];npQR8FP{gL\$B.90d;:?Arr]gIjh@}Hb+Q#WltOB.[p"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49829	172.67.130.200	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:09 UTC	946	OUT	GET /lnternationalcardservices/lcs/files/favicon-144x144-withoutlines.png HTTP/1.1 Host: portal-nl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2hatba-YMW-h0AoVTIHSFMVEt8w=LAsPh9cx3yEZPI3_SYc03Zd926s; DdTRuKbjKavV_PWxR1b2qS3nOAo=1736606505; ejqhwYQeF3WeQWQJIPEdZhH5ZH8=1736692905; tUwp9bDOGIVwruvw2SZbIt76TU8=yM5jADAgbmKl3WPWNJgsiRI3j0g; mB2TF6a05IDJYGacr58T7EGivkQ=h1v2otxaIEdnRXEfYd_55XI16cA; 5hcZqO6R-E_N-gg7sdK2f17Q8Xo=24V5fd_SqGfynCsHmAJbl9ySndA; hLcaSHYpYMKfTesepX5x26dt3ds=1736606516; 6bKdElJqxAEERBVNavZ-3ISWD3o=1736692916; IJrz2xX2k3EdXhfTk2m0xaSss7Y=WeK3Iilmg4w5C9yS17-a5NY6pnc; PHPSESSID=3981f56dfc2574ee893d90e72c55fa78; visitor_id=98398d0aaf6b98562680b323c1b732de
2025-01-11 14:42:09 UTC	1028	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 14:42:09 GMT Content-Type: image/png Content-Length: 2128 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=5184000 Pragma: public Last-Modified: Sat, 04 Jan 2025 18:21:21 GMT Expires: Wed, 12 Mar 2025 05:32:19 GMT CF-Cache-Status: HIT Age: 32988 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CF6a6r%2BCEIVgz9SqV4rQUoj7c09AuCxs6PQ9Wt4ozPjvN8RIo6TOZybm8f3YV2Q9e2kFymEXrhlPcgRFbv1FwSP7wz%2FnxLtC8S5nNezcmtyr5yYvtEsZ%2FaPhjGQ%2FfAM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9005abfa4f455e80-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1715&min_rtt=1576&rtt_var=870&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1524&delivery_rate=1083487&cwnd=218&unsent_bytes=0&cid=8f51cc51b133f134&ts=157&x=0"
2025-01-11 14:42:09 UTC	341	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 e5 49 44 41 54 78 01 ed 9d 4d 68 54 57 14 c7 6f 4b 37 a6 a2 85 a4 d5 85 93 45 15 22 68 b5 ba 10 4c 56 05 a3 76 15 54 d0 ba 88 60 a5 45 a1 a5 82 89 ee 6a e2 ce 24 82 c5 52 0b c5 76 61 a1 28 68 eb aa 6a 5c 76 14 ba 50 94 04 26 a0 42 67 84 5a 48 16 8a c6 65 7b ff 2f be 99 3b f1 73 e6 9c fb ee 7d cd ff 07 92 04 8d 79 79 f7 f7 ce fd 38 e7 de f7 c6 3b 8b 3f fa d7 10 d2 24 6f 1a 42 04 50 20 22 82 02 11 11 14 88 88 a0 40 44 04 05 22 22 28 10 11 41 81 88 08 0a 44 44 50 20 22 82 02 11 11 14 88 88 a0 40 44 04 05 Data Ascii: PNGIHDRFpHYssRGBgAMAaIDATxMhTWoK7E"hLVvT`Ej$Rva(hj\vP&BgZHe{/;s}yy8;?$oBP "@D""(ADDP "@D
2025-01-11 14:42:09 UTC	1369	IN	Data Raw: 41 81 88 08 0a 44 44 50 20 22 82 02 11 11 6f 19 45 5a 16 bc 6d d6 6c ee 32 cd 30 59 b9 6f 26 ae dd 32 3e 68 5d b2 c8 b4 2c 9c 6f da 9e 7e d4 66 e2 da 4d 7b fd ff 3c f7 ef 70 4f 5a 0b 8b 4d fb 8a a5 26 14 25 7b 7d 53 2f b8 3e 29 6a 02 b5 15 16 99 81 2b df 27 37 ac 59 2e 8c 9c 36 17 8e 9d 36 52 3a d6 af 36 ed 2b 97 5a 99 d7 db 8f cb 44 d7 f4 32 a6 1f 3e 32 a7 be 1a 7e 46 1e fc bc ee cf b6 9a 8e ce 55 66 79 e7 6a 13 03 27 76 0f 98 1b 17 af 1a 6d de d0 7a 5b cf 97 3f 1d 6e 3a fa b8 f4 af eb 6d ea 69 49 1b ad 6b c7 c6 44 66 df 20 62 1e dd d6 5f 77 ad 05 2b ed ce c1 bd d1 48 e3 02 c9 0f da 7b ab 8d 5a 04 9a b7 40 a7 6b 40 e3 37 22 10 fe 7d 4f 5f af e9 da be d1 64 45 79 ec b6 19 b2 f2 4c 3f 7c 9c 7c 0d 79 7b fa 76 59 81 b7 98 58 f1 f5 50 a9 8e 81 b2 24 8d 38 90 Data Ascii: ADDP "oEZml20Yo&2>h],o~fM{<pOZM&%{}S/>)j+'7Y.66R:6+ZD2>2~FUfyj'vmz[?n:miIkDf b_w+H{Z@k@7"}O_dEyL?\|\|y{vYXP$8
2025-01-11 14:42:09 UTC	418	IN	Data Raw: 51 d2 aa f5 16 9f b9 8c 8f e8 03 72 53 13 4d 89 9a 07 e3 49 bc a2 c1 07 b9 2a aa 87 44 78 ef 15 67 67 8d 81 77 9a f9 4a 28 e7 6e 57 06 32 f6 78 d5 52 1e 8b da 43 80 da a4 1b 17 af 19 5f e4 72 5b 0f 6a 6e 20 11 6e 0e a3 d1 f3 49 bb 2d df db b1 73 bd 2f 0c 37 e7 e0 ba 5d 14 69 16 88 ce 87 37 ec 53 af 45 7a 1e 6a d9 78 ad 3e b6 99 ed c9 c5 a7 15 80 5d 3b ba 93 d7 6e ae f5 70 9e f3 e4 bd 9a a0 95 f1 bb 51 be d6 52 eb 38 bf 46 50 7b 67 ea 4c 19 e9 b0 fd d8 5c b9 24 42 2e 06 c9 1a 39 30 64 ca 3b 3a 3f b4 8d fc 41 72 ee 10 b2 e9 92 72 d2 d9 a7 9d e1 ff 1a b8 f2 5d d3 bf ab 16 b8 67 49 bd 92 1d 17 e2 e0 87 10 95 97 6a 02 a5 14 9a 68 ac e4 40 ef f2 7d ef f5 cb 48 d6 62 2b 51 23 d7 57 19 bb fd c2 eb 2a 08 c5 6c 16 74 d7 4f 9c a3 ee 42 a2 2e 10 99 5b f0 70 05 22 82 Data Ascii: QrSMIDxggwJ(nW2xRC_r[jn nI-s/7]i7SEzjx>];npQR8FP{gL\$B.90d;:?Arr]gIjh@}Hb+Q#WltOB.[p"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49912	35.190.80.1	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:58 UTC	531	OUT	OPTIONS /report/v4?s=TqXt6svga2K64CsXHtJ4%2BamRLHIvGgPZAWf1CaeLODNDigD%2BkKLjHPHzas7nUQv1wkICOhsUKMBhxcdqF978t3qPQw125m3IckwQOMSUlWFxkz6U%2BkS3K%2FG3Zt6iY60%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://portal-nl.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 14:42:58 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Sat, 11 Jan 2025 14:42:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49913	35.190.80.1	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:58 UTC	531	OUT	OPTIONS /report/v4?s=CF6a6r%2BCEIVgz9SqV4rQUoj7c09AuCxs6PQ9Wt4ozPjvN8RIo6TOZybm8f3YV2Q9e2kFymEXrhlPcgRFbv1FwSP7wz%2FnxLtC8S5nNezcmtyr5yYvtEsZ%2FaPhjGQ%2FfAM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://portal-nl.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 14:42:58 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Sat, 11 Jan 2025 14:42:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49918	35.190.80.1	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:58 UTC	477	OUT	POST /report/v4?s=TqXt6svga2K64CsXHtJ4%2BamRLHIvGgPZAWf1CaeLODNDigD%2BkKLjHPHzas7nUQv1wkICOhsUKMBhxcdqF978t3qPQw125m3IckwQOMSUlWFxkz6U%2BkS3K%2FG3Zt6iY60%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 3385 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 14:42:58 UTC	3385	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 30 37 36 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 37 39 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6f 72 74 61 6c 2d 6e 6c 2e 72 75 2f 6c 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 63 61 72 64 73 65 72 76 69 63 65 73 2f 73 65 6c 65 63 74 65 72 65 6e 2e 70 68 70 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 2e 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 Data Ascii: [{"age":50769,"body":{"elapsed_time":1798,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://portal-nl.ru/lnternationalcardservices/selecteren.php","sampling_fraction":1.0,"server_ip":"104.21.9.2","status_code":404,"type":"http
2025-01-11 14:42:58 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sat, 11 Jan 2025 14:42:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49919	35.190.80.1	443	3704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 14:42:58 UTC	477	OUT	POST /report/v4?s=CF6a6r%2BCEIVgz9SqV4rQUoj7c09AuCxs6PQ9Wt4ozPjvN8RIo6TOZybm8f3YV2Q9e2kFymEXrhlPcgRFbv1FwSP7wz%2FnxLtC8S5nNezcmtyr5yYvtEsZ%2FaPhjGQ%2FfAM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1321 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 14:42:58 UTC	1321	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 30 33 34 35 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 31 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 33 30 2e 32 30 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6f 72 74 61 6c 2d 6e 6c 2e Data Ascii: [{"age":50345,"body":{"elapsed_time":1113,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.130.200","status_code":405,"type":"http.error"},"type":"network-error","url":"https://portal-nl.
2025-01-11 14:42:58 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sat, 11 Jan 2025 14:42:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2908, Parent PID: 5308

General

Target ID:	0
Start time:	09:41:43
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3704, Parent PID: 2908

General

Target ID:	2
Start time:	09:41:47
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2192,i,17868920631784718586,2862128570928024239,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6512, Parent PID: 5308

General

Target ID:	3
Start time:	09:41:53
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.heractivatie-portal.net/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portal-nl.ru/web?t=1736606516... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and indicative of potential malicious intent.
Source: 0.7.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portal-nl.ru/lnternationalcardservices/lcs... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and indicative of a potential attack vector.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portal-nl.ru/web?t=1736606516... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The script appears to be attempting to bypass security measures and execute unauthorized actions on the user's system. The presence of obfuscated code and the attempt to interact with various browser automation frameworks further increases the risk. Overall, this script demonstrates a high level of malicious intent and should be treated with caution.
Source: 0.5.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portal-nl.ru/lnternationalcardservices/sel... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of malicious intent.
Source: 0.9.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portal-nl.ru/lnternationalcardservices/lcs... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of malicious intent.

Source: https://portal-nl.ru/web?t=1736606516	HTTP Parser: No favicon
Source: https://portal-nl.ru/lnternationalcardservices/selecteren.php	HTTP Parser: No favicon
Source: https://portal-nl.ru/lnternationalcardservices/selecteren.php	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: app.heractivatie-portal.net
Source: global traffic	DNS traffic detected: DNS query: portal-nl.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://app.heractivatie-portal.net/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

Windows Analysis Report
https://app.heractivatie-portal.net/